Patent ID: 8898276

Claim:
A method for redirecting a computing device from a first network to a second network comprising: monitoring, by a monitoring device, a plurality of network ports; detecting, by the monitoring device, a communication from a computing device at one of the network ports; sending information from the monitoring device to a first server and a second server regarding the identity of the computing device; sending a command from the monitoring device to the first server to send a request to the computing device to renew the connection with the second server, wherein the command is sent after the information regarding the identity of the computing device is sent from the monitoring device to the first server and the second server; receiving a request from the computing device to renew its connection with the second server; determining whether the request was sent from the computing device where an attack by a worm originated, wherein the determining occurs after the request to renew its connection was received; and redirecting the computing device to a second network from a first network; wherein the monitoring device comprises the ports and is configured to appear to possess characteristics of a server and wherein the monitoring device configured to appear to possess characteristics of the server acts as bait for the worm to attack the monitoring device.