CPC H04L 63/0209 (2013.01) [H04L 9/3239 (2013.01); H04L 63/1491 (2013.01); H04L 67/02 (2013.01); H04L 67/63 (2022.05); H04W 12/121 (2021.01)] | 20 Claims |
1. A gateway device comprising:
a network interface configured to intercept a first data flow from an internal network to an external network, wherein the first data flow is from a first terminal device in the internal network to a second terminal device in the external network;
a memory configured to store instructions; and
a processor coupled to the memory and configured to execute the instructions to cause the gateway device to:
obtain a first document in the first data flow, wherein the first document is associated with a document type that comprises a decoy document;
insert a first Uniform Resource Locator (URL) into an associated part of the first document to obtain a second document, wherein the first URL comprises a server address of a server, and wherein the first URL of the associated part is configured to be accessed by another terminal device when the second document is opened, and wherein the first URL corresponds to the decoy document when the document type is the decoy document; and
replace the first document in the first data flow with the second document to obtain a second data flow,
wherein the network interface is further configured to send, to the second terminal device, the second data flow.
|