Patent ID: 11876833
Assignee: UCHICAGO ARGONNE, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC G  H

Claim 14:
15. A computing system for moving target defense using software-defined networking (SDN) based routing, the system comprising at least one processor and a memory comprising computer-executable instructions, the instructions, when executed by the at least one processor, operable to:
receive a packet;
determine a source identifier from the packet; and
responsive to a determination that the source identifier does not match a pre-defined packet flow rule of an SDN switch:
transmit at least a first segment of the packet comprising a pointer to a memory location shared by the SDN switch and the decoy controller, via the SDN switch, to a decoy controller, the decoy controller structured to manage packet flow rules regarding packet routing to a decoy environment; and
if at least the first segment of the packet violates a configuration resource rule of the decoy controller:
modify a second segment of the packet, comprising operations to replace a destination identifier with a decoy environment identifier; and
route the packet, via the SDN switch, to a resource within the decoy environment.