Unlock instant, AI-driven research and patent intelligence for your innovation.

Apparatus and method for generating, using, and optimizing honeypots

A device, technology of honeypots, applied in the field of devices and methods for generating, using and optimizing honeypots, capable of solving problems such as probability reduction

Active Publication Date: 2022-03-11
HUAWEI TECH CO LTD
View PDF5 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Therefore, during a ransomware infection, the implanted honeypot is less likely to be the first file to be attacked and thus the honeypot may not be effective against ransomware

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Apparatus and method for generating, using, and optimizing honeypots
  • Apparatus and method for generating, using, and optimizing honeypots
  • Apparatus and method for generating, using, and optimizing honeypots

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0060] Embodiments of the present invention are based on the proposal to rely on backup systems to learn the behavior of different ransomware on protected systems, and create honeypots based on this. Part of the focus of this invention is how to use this specific pre-engineered honeypot to attract ransomware. Another main focus of this invention is to optimize honeypots for fast detection of ransomware and, if necessary, optimization of decryption operations.

[0061] Generally speaking, the scheme proposed in the embodiments of the present invention includes three parts:

[0062] Part 1 - Creation of the Honeypot

[0063] figure 1 A device 100 provided by an embodiment of the present invention is shown. Device 100 may include processing circuitry (not shown) for performing, implementing or enabling the various operations of device 100 described herein. The processing circuitry may include hardware and software. Hardware may include analog circuits or digital circuits, or...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The present invention provides an apparatus for generating a honeypot for attracting a ransomware, an apparatus for using a honeypot for attracting a ransomware, an apparatus for optimizing a honeypot for attracting and decrypting a ransomware, and corresponding methods. The equipment is used for acquiring a first backup image of a user system at a first time point; creating a first backup system according to the first backup image; running one or more ransomware toolkits on the first backup system; identifying a first set of data structures in the first backup system that are attacked by the one or more ransomware toolkits within a determined time period; identifying a first set of attributes of the first set of data structures; and generating the honeypot according to the first group of attributes.

Description

technical field [0001] The present invention relates to a class of devices and methods for protecting user systems from ransomware. To this end, the present invention provides a device for generating a honeypot for attracting ransomware, a device for using a honeypot for attracting ransomware, a device for optimizing honeypots for attracting and decrypting ransomware The equipment of the honeypot of the software and the corresponding method. Background technique [0002] Ransomware malware or ransomware is an umbrella term for various types of malware that infects a system and encrypts data stored on the system. Ransomware prevents users from accessing their data (often by encrypting the data) and then demands that the user pay a ransom in order to regain access (by decrypting the encrypted data). [0003] Ransomware has become increasingly common in recent years. There are many different variants of ransomware. One way to detect ransomware-infected systems is by plantin...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L9/40G06F21/53G06F21/56
CPCH04L63/1491G06F21/53G06F21/566
Inventor 阿维夫·库温特阿萨夫·纳塔逊亚伦·莫阿萨夫·耶格尔
Owner HUAWEI TECH CO LTD