Patent ID: 8661102
Filing Date: 2014-02-25
Classification: H04L

Abstract:
1. A method, comprising: collecting information at a server, the information relating to network traffic targeting a plurality of computers having a respective honey pot that collectively form a distributed honey pot system; detecting a pattern among the information through a correlation of a plurality of hashes, wherein the pattern is indicative of malicious or unwanted traffic, and wherein the information is associated with the network traffic targeting a plurality of unused addresses of a subnet, and wherein the unused addresses of the subnet correspond to one or more of the honey pots of the distributed honey pot system; generating response data that emulates at least one computer, which was targeted by the malicious or unwanted traffic, wherein the response data is to be sent to a particular one of the plurality of computers associated with the distributed honey pot system, and wherein the generating includes translating a plurality of operating system fingerprints; and responding to responses that are generated as a result of the response data.