Skip to main content
U.S. Department of Energy
Office of Scientific and Technical Information

Computer network defense system

Patent ·
OSTI ID:1375930
A method and apparatus for protecting virtual machines. A computer system creates a copy of a group of the virtual machines in an operating network in a deception network to form a group of cloned virtual machines in the deception network when the group of the virtual machines is accessed by an adversary. The computer system creates an emulation of components from the operating network in the deception network. The components are accessible by the group of the cloned virtual machines as if the group of the cloned virtual machines was in the operating network. The computer system moves network connections for the group of the virtual machines in the operating network used by the adversary from the group of the virtual machines in the operating network to the group of the cloned virtual machines, enabling protecting the group of the virtual machines from actions performed by the adversary.
Research Organization:
Sandia National Laboratories (SNL-NM), Albuquerque, NM (United States)
Sponsoring Organization:
USDOE
DOE Contract Number:
AC04-94AL85000;
Assignee:
National Technology & Engineering Solutions of Sandia, LLC
Patent Number(s):
9,742,804
Application Number:
14/925,645
OSTI ID:
1375930
Country of Publication:
United States
Language:
English

References (2)

Changing the game: The art of deceiving sophisticated attackers conference June 2014
Improving deception in honeynet: Through data manipulation conference December 2014

Similar Records

Network protection system using linkographs
Patent · 2018 · OSTI ID:1463863

Best Paper Award: Gathering Threat Intelligence Through Computer Network Deception
Technical Report · 2016 · OSTI ID:1561800

R&D 100 Winner 2017 HADES Platform
Multimedia · 2017 · OSTI ID:1467611

Related Subjects