Dynamic service handling using a honeypot
First Claim
Patent Images
1. A method comprising:
- receiving, by a network device from a client device, a service request to receive a service indicated in the service request from a server indicated in the service request, wherein the service request specifies an address for the server indicated in the service request, and wherein the address is not associated with the network device; and
by the network device and in response to obtaining a negative indication for the service that indicates the server indicated in the service request does not offer the service, sending a representation of the service request to a honeypot to cause the honeypot to offer the service to the client device, wherein the negative indication for the service comprises an expiry of a timer for the service response without the network device having received a positive indication for the service from the server indicated in the service request.
0 Assignments
0 Petitions
Accused Products
Abstract
A network device comprises one or more processors coupled to a memory, and a dynamic services module configured for execution by the one or more processors to receive, from a client device, a service request specifying a service. The dynamic service module is further configured for execution by the one or more processors to, in response to obtaining a negative indication for the service, send a representation of the service request to a honeypot to cause the honeypot to offer the service to the client device.
41 Citations
31 Claims
-
1. A method comprising:
-
receiving, by a network device from a client device, a service request to receive a service indicated in the service request from a server indicated in the service request, wherein the service request specifies an address for the server indicated in the service request, and wherein the address is not associated with the network device; and by the network device and in response to obtaining a negative indication for the service that indicates the server indicated in the service request does not offer the service, sending a representation of the service request to a honeypot to cause the honeypot to offer the service to the client device, wherein the negative indication for the service comprises an expiry of a timer for the service response without the network device having received a positive indication for the service from the server indicated in the service request. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A method comprising:
receiving, by a network device, a probe from a client device; receiving, by the network device from the client device and after receiving the probe, a service request to receive a service indicated in the service request from a server indicated in the service request; sending, by the network device in response to obtaining a negative indication for the service that indicates the server indicated in the service request does not offer the service and determining the network device previously received the probe from the client device, a representation of the service request to a honeypot to cause the honeypot to offer the service to the client device. - View Dependent Claims (10, 11, 12, 13, 14, 15)
-
16. A non-transitory computer-readable storage medium comprising instructions stored thereon that, when executed, configure one or more processors to:
-
receive, by a network device from a client device, a service request to receive a service indicated in the service request from a server indicated in the service request, wherein the service request specifies an address for the server indicated in the service request, and wherein the address is not associated with the network device; and by the network device and in response to obtaining a negative indication for the service that indicates the server indicated in the service request does not offer the service, send a representation of the service request to a honeypot to cause the honeypot to offer the service to the client device, wherein the negative indication for the service comprises an expiry of a timer for the service response without the network device having received a positive indication for the service from the server indicated in the service request.
-
-
17. A network device comprising:
-
one or more processors coupled to a memory; a dynamic services module configured for execution by the one or more processors to; receive, from a client device, a service request to receive a service indicated in the service request from a server indicated in the service request, wherein the service request specifies an address for the server indicated in the service request, and wherein the address is not associated with the network device; and in response to obtaining a negative indication for the service that indicates the server indicated in the service request does not offer the service, send a representation of the service request to a honeypot to cause the honeypot to offer the service to the client device, wherein the negative indication for the service comprises an expiry of a timer for the service response without the network device having received a positive indication for the service from the server indicated in the service request. - View Dependent Claims (18, 19, 20, 21, 22, 23, 24)
-
-
25. A network device comprising:
-
one or more processors coupled to a memory; a dynamic services module is further configured for execution by the one or more processors to; receive, a probe from a client device; receive, from the client device after receiving the probe, a service request to receive a service indicated in the service request from a server indicated in the service request; and in response to obtaining a negative indication for the service that indicates the server indicated in the service request does not offer the service and determining the network device previously received the probe from the client device, send a representation of the service request to a honeypot to cause the honeypot to offer the service to the client device. - View Dependent Claims (26, 27, 28, 29, 30, 31)
-
Specification