Patent Document ID: 10027709
Application ID: 15628450
Patent Flag: 1

Claim One:
1. A system, comprising: a hardware processor configured to: receive a network scan survey of a target network; generate a honey network configuration to emulate the target network using the network scan survey of the target network, wherein generating the honey network configuration includes generating a trigger table based on the honey network configuration for emulating at least a subset of the target network; execute the honey network using the honey network configuration, wherein executing the honey network using the honey network configuration includes determining a set of responses for each of a plurality of devices on the target network and each service in response to probes received from a scanning tool using the trigger table, wherein the trigger table includes a set of data that indicates responses used by the scanning tool to identify a device type, an operating system (OS) type and OS version, and a service provided by a device; receive a probe from the scanning tool sent to an IP address that is in the honey network; generate a response to the probe using the trigger table based on the honey network configuration; and send the response to the scanning tool, wherein the scanning tool is unable to detect that the response is associated with an emulated device and/or an emulated service in the honey network; and a memory coupled to the processor and configured to provide the processor with instructions.