SYSTEM FOR DETECTING, ANALYZING, AND CONTROLLING INFILTRATION OF COMPUTER AND NETWORK SYSTEMS

摘要

A method for detecting and manipulating a malicious actor/communication on a computer network or system. The method includes the steps of incorporating one or more synthetic vulnerabilities into the computer system at distinct locations, where each synthetic vulnerability presents an opportunity for exploitation by a malicious actor/communication, detecting an exploitation of one of the vulnerabilities by an actor, analyzing the actor to determine if the actor is a malicious actor/communication; and manipulating the malicious actor/communication. A computer program on a storage medium is also disclosed.

主权项

1. A method for detecting and manipulating a malicious actor/communication on a computer system, the method comprising the steps of:
providing multiple detection points at specific locations in the computer system, each detection point presenting an opportunity to detect and manipulate a malicious actor/communication; detecting a malicious actor/communication on the system based on a triggering of a first detection point; controlling or manipulating the malicious actor/communication to a second detection point; characterizing the malicious actor/communication to determine some information about the malicious actor/communication based on an analysis of the activities or aspects of the malicious actor/communication detected by the triggering of one or more of the detection points.