Patent ID: 9015300
Filing Date: 2015-04-21
Classification: H04L

Abstract:
1. A method performed by one or more devices, the method comprising: receiving, by the one or more devices, an inquiry from an external source to a network; monitoring, by the one or more devices, a response of the network to the inquiry; determining, by the one or more devices, properties of the network that are revealed to a potential attacker based on the response and one or more information templates, determining the properties of the network that are revealed to the potential attacker, based on the response and the one or more information templates, including: storing, by the one or more devices, information identifying a first property of the properties of the network in a data repository; setting, by the one or more devices, a data bit to a particular value, determining, by the one or more devices, a reconnaissance of the network, by the potential attacker, based on the information identifying the first property and the information identifying the second property stored in the data repository; determining, by the one or more devices, whether an amount of the properties, for which information is stored in the data repository, satisfies a threshold value; and sending, by the one or more devices and to a device associated with the network, an indication of the reconnaissance of the network, by the potential attacker, when the amount satisfies the threshold value.