Patent ID: 9516054
Filing Date: 2016-12-06
CPC Classification: H04L

Claim Text:
1. A method of detecting a cyber threat, the method comprising: automatically discovering real resources on a network, wherein the real resources provide services and wherein the real resources include at least one of: a device and a server; faking at least one real resource discovered on the network wherein faking a resource includes advertising at least one service provided by the faked resource; detecting an interaction of a malware applications with the faked resource; capturing code of the malware applications and storing the code on the faked resource; uploading the code to a server; analyzing the code, by the server, to produce an analysis result; determining, for each of the plurality of payloads, a severity score based on the analysis result; providing a report based on the scores; and performing at least one action based on the analysis result.