Patent Document ID: 20170318053
Application ID: 15424736
Patent Flag: 0

Claim One:
1. A method comprising: identifying a network for deploying one or more deception mechanisms, wherein a deception mechanism emulates one or more characteristics of a machine on the network; determining one or more asset densities of the network, wherein an asset density is associated with a real-time determination of a total number of assets connected to the network; determining a summary statistic associated with one or more historical attacks on the network; determining a probability of an attack on the network, wherein determining the probability includes using the one or more asset densities or the summary statistic; using the probability to dynamically determine a number of deception mechanisms to deploy in the network, wherein as the probability changes, the number of deception mechanisms to deploy in the network is updated in real time; and dynamically deploying the number of deception mechanisms or the updated number of deception mechanisms in the network in real-time.