Patent ID: 7698738

Claim:
A method for real-time network-based recovery from information warfare (IW) attacks on a network comprising subnets, each subnet comprising nodes, the method executed by a computer including a processor and a memory and comprising: executing, utilizing the processor and the memory, a pre-IW attack routine to identify IW attack recovery information, wherein the recovery information is used during a response to an IW attack to restore the network to a full operational status, the pre-IW attack routine comprising: discovering recovery information in the network, collecting the discovered recovery information, and processing the collected recovery information, wherein the processing, comprises: insulating the collected recovery information from the IW attacks on parts of the network by embedding the recovery information in digitally represented information including a host image, wherein embedding the recovery information in the digitally represented information including a host image produces an altered host image and enables the recovery information to be determined by comparing the altered host image to the host image, recording timing of events in the network, and monitoring the network for attack indications; in response to an IW attack, executing, utilizing the processor and the memory, an IW attack response routine; and executing, utilizing the processor and the memory, a real-time network-based recovery routine.