Patent ID: 11876833
Assignee: UCHICAGO ARGONNE, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC G  H

Claim 15:
16. A computing system for moving target defense using software-defined networking (SDN) based routing, the system comprising at least one processor and a memory comprising computer-executable instructions, the instructions, when executed by the at least one processor, operable to:
receive a packet;
determine a source identifier from the packet;
responsive to a determination that the source identifier does not match a pre-defined packet flow rule of an SDN switch:
transmit at least a first segment of the packet, via the SDN switch, to a decoy controller, the decoy controller structured to manage packet flow rules regarding packet routing to a decoy environment; and
if at least the first segment of the packet violates a configuration resource rule of the decoy controller:
modify a second segment of the packet, comprising operations to replace a destination identifier with a decoy environment identifier; and
route the packet, via the SDN switch, to a resource within the decoy environment;

generate a new packet flow rule comprising at least one property of the packet, the new packet flow rule generated in part based on instructions from the configuration resource of the decoy controller; and
add the new packet flow rule to the SDN switch.