Patent ID: 8549640

Claim:
A method for providing security for a computer network, comprising: automatically generating content for a file system for a first computer associated with the network, wherein automatically generating content comprises, for at least a subset of the generated content, selecting through an automated process and without human intervention a corresponding value for each of one or more inputs of at least one template comprising fictitious content, the fictitious content comprising at least one of a decoy user name, a decoy domain name, and a decoy host name; creating a directory within the first computer; copying the file system of the first computer into the directory; routing a user who attempts to gain unauthorized access to a second computer associated with the network to the directory in the first computer, wherein the routing is specified by a policy indicating that the user is to be routed to the directory in the first computer in the event the user attempts to access at least one of: a specified port and a specified service; and employing processes running outside of the directory to screen requests by the user to access files to prevent the user from detecting processes used to monitor the user.