US 12,395,516 B1
Providing obfuscated results to a network scanner
Landon Dalke, Meridian, ID (US); and Paul Miseiko, Mississauga (CA)
Assigned to Rapid7, Inc., Boston, MA (US)
Filed by Rapid7, Inc., Boston, MA (US)
Filed on May 30, 2023, as Appl. No. 18/203,111.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/1433 (2013.01) [H04L 63/1408 (2013.01); H04L 63/1483 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, by one or more processors of an asset in a private network, a request from a scanner;
sending, by the one or more processors, a response to the scanner acknowledging receiving the request;
receiving, by the one or more processors, one or more port scan requests associated with one or more ports of the asset, the one or more port scan requests sent by the scanner;
creating, by the one or more processors, one or more fake fingerprints, wherein individual fake fingerprints of the one or more fake fingerprints correspond to individual ports of the one or more ports of the asset, the individual fake fingerprints including incorrect information about individual ports;
sending, by the one or more processors, the one or more fake fingerprints to the scanner in response to the one or more port scan requests;
determining, by the one or more processors, that a scan engine is requesting access to the asset via a particular port of the one or more ports of the asset;
granting the scan engine access to the asset via the particular port; and
providing, by the one or more processors, asset data associated with the asset to the scan engine via the particular port.