Patent ID: 7461402

Claim:
A method for concealing from a user a monitoring process running on a computer comprising: monitoring the interaction of the user with a deception environment; receiving from the user a request to access a process file concerning a process running on the computer; determining whether the process file requested by the user relates to the monitoring process; and in the event that the requested process file does not relate to the monitoring process, providing the user with access to the process file; wherein the process file is associated with a process information pseudo file system and contains process information about the monitoring process; and providing the user with access to the process file would reveal to the user existence of the monitoring process; and further comprising replacing one or more operating system functions in a system entry table with a new program configured to perform said step of receiving from the user a request to access a process file concerning a process running on the computer and to provide in response to the request, in the event it is determined that the process file requested by the user relates to the monitoring process, an indication that the requested file does not exist.