ADAPTING DECOY DATA PRESENT IN A NETWORK

摘要

Disclosed are various embodiments for obtaining policy data specifying decoy data eligible to be inserted within a response to an access of a data store. The decoy data is detected in the response among a plurality of non-decoy data based at least upon the policy data. An action associated with the decoy data is initiated in response to the access of the data store meeting a configurable threshold.

主权项

1. A non-transitory computer-readable medium embodying a program executable in at least one computing device, the program, when executed, causing the at least one computing device to at least:
obtain policy data, the policy data specifying decoy data eligible to be inserted in a data store and further specifying a behavioral characteristic for accessing the data store; obtain a response to an access of the data store, the response comprising the decoy data among a plurality of non-decoy data; determine legitimacy of the access of the data store based at least in part upon the behavioral characteristic associated with the access; and initiate an action associated with the decoy data, the action being initiated in response to the legitimacy of the access.