DataSoft/Nova — Issue #4: Close vulnerability around Doppleganger component and multiple scans
Author: DataSoft
Created: 2012-02-16 19:23:00+00:00
State: open

If real information about a host computer is acquired before a suspect is flagged as hostile, activating the doppleganger component will change information about the host and possibly give away the host as real.

In that case the suspect should be flagged as having real information on the host and the doppleganger system should not be engaged, instead electing to remain hidden in the crowd.