Patent ID: 9060017
Filing Date: 2015-06-16
Classification: G06F,H04L

Abstract:
1. A method for detecting and manipulating a malicious actor/communication on a computer system, the method comprising the steps of: providing multiple detection points at specific locations in the computer system, each detection point presenting an opportunity to detect and manipulate a malicious actor/communication; detecting a malicious actor/communication on the system based on a triggering of a first detection point; controlling or manipulating the malicious actor/communication to a second detection point; characterizing the malicious actor/communication to determine some information about the malicious actor/communication based on an analysis of the activities or aspects of the malicious actor/communication detected by the triggering of one or more of the detection points; wherein there are multiple detection points provided in the system that are accessible from the first detection point; wherein the step of controlling or manipulating the malicious actor/communication comprises permitting the malicious actor/communication to access the multiple detection points that are accessible from the first detection point; and wherein the step of characterizing the malicious actor/communication involves determining an aspect of the malicious actor/communication based on which of the multiple detection points that are accessible from the first detection point are triggered by the malicious actor/communication.