Patent ID: 7725937
Filing Date: 2010-05-25
Classification: G06F,H04L

Abstract:
1. A method of capturing a security breach, comprising: deploying a honey pot server comprising a honey pot; using a processor to detect a breach of the honey pot, wherein the breach indicates the honey pot has been compromised; using the processor to capture a state of the honey pot, including by creating a copy of data associated with the honey pot as compromised; and using the processor to automatically redeploy the honey pot, including by reinitializing the state of the honey pot to an initial state in which the honey pot was in at the time it was deployed; and wherein deploying the honey pot comprises registering with a virtual machine instance an initialization image associated with the initial state and instructing the virtual machine instance to execute the image, the image comprising data usable by the virtual machine to provide a virtual environment having a running instance of an operating system and one or more applications or other programs running on the operating system instance, and wherein redeploying the honey pot includes using the image to reset the virtual machine instance to the initial state.