EP1382154B8

System and method for computer security using multiple cages

Abstract

A system and method are disclosed for providing security for a computer network. Content sets are generated for a computer associated with the network. It is determined whether a user should be routed to the generated content sets. If it is determined that the user should be routed to the generated content sets, a generated content set is selected and the user is so routed. Various actions and events may be recorded in a logfile, and the logfile is analyzed using regular expressions.

Term

Term ended

Expired 23 April 2022, 4.4 years ago.

  1. Priority
  2. Filed
  3. Granted
  4. Expired
  5. Today

Every citation, both ways

Citations
DocumentRelationOffice
WO0104757ACitesWorld Intellectual Property Organization (WIPO)
WO0104759ACitesWorld Intellectual Property Organization (WIPO)
WO0105168ACitesWorld Intellectual Property Organization (WIPO)
WO0106373ACitesWorld Intellectual Property Organization (WIPO)
US4719566ACitesUnited States of America
US5345590ACitesUnited States of America
US5928363ACitesUnited States of America
US2002066034A1CitesUnited States of America
CHESWICK BILL: 'An evening with Berferd in which a cracker is lured, endured and studied' AT & T BELL LABS 1990, pages 1 - 13, XP002952580Non-patent
STAGGS MICHAEL: 'IDS:RE: cybercop sting' UNIVERSITY OF WOLLONGONG, AUSTRALIA, [Online] 08 October 1999, pages 1 - 2, XP002952579 Retrieved from the Internet: <URL:http://www.shmoo.com/mail/ids/oct99/ms g00467.html>Non-patent
SPITZNER LANCE: 'To build a honeypot' LANCE SPITZNER WEB SITE, [Online] 10 October 1999, pages 1 - 5, XP002952578 Retrieved from the Internet: <URL:http://www.archive.org/web/19991013141 306/http://enteract.com/~1spitz/honeypot.ht ml>Non-patent
COHEN FRED: 'A mathematical structure of simple defensive network deceptions' FRED COHEN & ASSOC., [Online] 1999, pages 1 - 13, XP002952577 Retrieved from the Internet: <URL:http://www.all.net/journal/deception/m athdeception/mathdeception.html>Non-patent
'Network associates ships cybercop sting' NETWORK ASSOCIATES, [Online] 16 July 1999, pages 1 - 3, XP002952576 Retrieved from the Internet: <URL:http://www.infowar.com/P_and_s/99/p_n_ s_071699d_j.shtml>Non-patent
COHEN FRED: 'Internet holes-internet lightening rods' MANAGEMENT ANALYTICS, [Online] 1996, pages 1 - 5, XP002952575 Retrieved from the Internet: <URL:http://www.all.net/journal/netsec/9607 -2.html>Non-patent
MESSMER ELLEN: 'Decoy server helps track down hackers NWFusion focus' NEWSGROUPS:ALT.2600 NEWS:37B88C12.9479112ONETNEWS.WORLDNET.ATT. NET, [Online] 12 August 1999, XP002952573 Retrieved from the Internet: <URL:http://www.groups.google.com/groups>Non-patent
'CyberCop sting-industry's 1st decoy server silently traces & tracks hacker activity' NEWSGROUPS:ALT2000.NL, [Online] 15 July 1999, pages 1 - 3, XP002952574 Retrieved from the Internet: <URL:http://biz.yahoo.com/prnews/990714/ca_ ntwrk_a_1.html>Non-patent
'Decoy nets' gain backers in battle against hackers network world' NETWORK WORLD, [Online] 06 March 2001, pages 1 - 3, XP002952572 Retrieved from the Internet: <URL:http://www.itworld.com/sec/2210/NWW010 306decoy/>Non-patent
COHEN FRED: 'A note on the role of deception in information protection' FRED COHEN & ASSOC., [Online] 1998, pages 1 - 25, XP002952571 Retrieved from the Internet: <URL:http://www.all.net/journal/deception/d eception.html>Non-patent
EVEN LORAS: 'What is a Honeypot?' SANS INSTITUTE, [Online] 12 July 2000, pages 1 - 5, XP002952570 Retrieved from the Internet: <URL:http://www.sans.org/netlook/resources/ IDFAQ/honeypot3.htm>Non-patent
'HONEYNET.ORG know your enemy: Honeynets' HONEYNET PROJECT WEB SITE, [Online] 21 April 2001, pages 1 - 7, XP002952569 Retrieved from the Internet: <URL:http://web.archive.org/web/20010428053 525/http://project.honeynet.org/>Non-patent