Patent ID: 8819777

Claim:
A method of preventing network intrusion to a network, comprising: receiving by a network device an initial communication from an entity; determining the entity is not trusted based on the initial communication, wherein said determining can be based on (i) the entity missing from a trust list or (ii) discovering a flag of a packet turned on which is normally turned off, the packet being included in the initial communication; and transmitting a first disinformation in place of a real information of the network device to misguide the by one of a plurality of net liar modules, each net liar module operating independently in a sub-network of the network, wherein the first disinformation is made congruent over the sub-network by a net liar management module configured to manage the plurality of net liar modules such that the first disinformation and any other disinformation transmitted by another of the net liar modules do not contradict each other; and transmitting signals that are indicative of the first disinformation to hide the real information of the network device in a consistent manner within a first time window.