Patent ID: 11934948
Assignee: GOVERNMENT OF THE UNITED STATES AS REPRESENTED BY THE DIRECTOR, NATIONAL SECURITY AGENCY
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 16:
17. An adaptive deception system for defending a production network including production devices from a cyber-attack, comprising:
a deception management system in communication with a management network, including a monitor and a manager; and hosting at least one container system service including at least one deception device available for deployment to a production network; and
a control system including:
at least one sensor configured to receive production device properties, deception device properties, deception management system observations, derived attacker observations, new production device properties, new deception device properties, and new deception management system observations from said monitor,
an algorithm for providing a hypothesis test adaption specification, defining a hypothesis to be tested, in response to said production device properties, said deception device properties, said deception management system observations, and said derived attacker observations, and evaluating said hypothesis in response to said new production device properties, said new deception device properties, and said new deception management system observations; and
at least one actuator for implementing said hypothesis test adaption specification.