Patent ID: 8973142
Filing Date: 2015-03-03
Classification: H04L

Abstract:
1. A method for setting a trap to detect if an intruder has compromised a client end station in an attempt to gain unauthorized access to enterprise data provided by a server executing on a server end station, wherein the client end station comprises a set of one or more user data files storing user data accessed through a set of one or more applications and further comprises a configuration repository storing application configuration data used by the set of one or more applications to configure the operation of the set of one or more applications, the method comprising: causing a honey token to be placed on the client end station secluded within the application configuration data stored in the configuration repository, wherein the configuration repository is one of a data source name (DSN) data structure, a Windows registry database, an application configuration file, and a local storage of a web browser, wherein the honey token is one or more of metadata and instructions indicating how one or more of the set of one or more applications can seemingly access the enterprise data provided by the server, wherein the honey token is invalid and does not allow access to any of the enterprise data provided by the server, wherein the server is unaware of the honey token, wherein the honey token is a reverse honey token in that it is placed on the client end station and not on the server, wherein the causing the honey token includes transmitting a custom generation program to the client end station, and wherein the client end station executes the custom generation program to create the honey token; and causing a set of one or more attribute values to be installed on a security gateway implemented in an electronic device and coupled between the client end station and the server, wherein the set of one or more attribute values are to be utilized for a security rule that causes the security gateway to,