Patent ID: 7000250

Claim:
A method for protecting a computer in an opened share mode, comprising: (a) running a computer on a network in an opened share mode, wherein the opened share mode indicates a file structure parameter and a name parameter and applies only to a manually selected list of at least one of application programs and data; (b) monitoring attempts to access the computer by applications utilizing the network, using the file structure and name parameter; (c) determining whether the applications attempt to modify the computer; and (d) executing a security event in response to any attempt to modify the computer; wherein the opened share mode indicates a plurality of parameters that are randomly selected to prevent detection of a virtuality of the parameters; wherein the computer is run in an actual opened share mode and a virtual opened share mode such that the at least one of application programs and data is accessible in the actual opened share mode, and attempted access to the at least one of application programs and data associated with the virtual opened shared mode prompts a security process; wherein the security process includes temporarily logging off the network, recording in a record information on any attempt to modify the computer including time and source information, logging the computer back on the network in a mode other than the actual opened share mode, transmitting the information to a third party, determining whether a trend is found indicative of a coordinated attack, and sending an alert and logging a culpable computer off the network based on the determination.