| CPC H04L 63/1483 (2013.01) [H04L 63/02 (2013.01)] | 20 Claims |
|
1. A cyber clone of a computing entity, the cyber clone comprising:
a processor; and
a memory storing instructions that when executed by the processor cause the cyber clone to:
store a plurality of states, each state of the plurality of states corresponding to a distinct operating state of the computing entity;
store for each state of the plurality of states:
a recorded request received at the computing entity in the corresponding distinct operating state, and
a recorded response sent from the computing entity and associated with the recorded request;
receive an external request from an attacker;
determine an indicator of attack from the external request;
compare the external request with the recorded request for a current state of the plurality of states;
in response to the external request matching the recorded request, send the associated recorded response to the attacker;
in response to the external request not matching the recorded request:
(i) provide a false, deceiving response, or
(ii) forward the external request to the computing entity,
receive a live response from the computing entity, and
forward the live response to the attacker; and
update the current state to a state of the plurality of states based on the external request and the current state.
|