Cloud Deception Platform for Scalable Threat Detection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional deception technology solutions require on-premises appliances, which do not scale well and necessitate infrastructure within the customer network, making them inadequate for large-scale or cloud-based deployments.

Innovation Solution

Integration of deception technology with a cloud-based security system that eliminates the need for on-premises appliances, utilizing a cloud-based system to deploy breadcrumbs/honeypots that appear unique and mimic the customer environment, with dynamic risk scoring and targeted threat detection based on user types.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If conventional deception technology uses on-premises appliances, then deployment is straightforward, but scalability and infrastructure requirements worsen

Engineering Contradiction:

Improvedeployment simplicityVSAvoidscalability

Core Design Contradiction:

Ease of manufactureVSAdaptability or versatility

Solution Approach 1:

The patent extracts the deception technology from on-premises appliances and relocates it to a cloud-based platform. The system removes the need for physical infrastructure deployment by moving honeypot deployment, monitoring, and management to a cloud environment accessible via the internet, thereby eliminating scalability constraints of on-premises hardware while maintaining deployment simplicity through cloud service access.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces a cloud-based intermediary platform that mediates between the customer's network and the deception technology. This cloud intermediary handles all honeypot deployment, traffic routing, data collection, and analysis functions remotely, allowing customers to access deception capabilities without managing physical infrastructure while enabling unlimited scalability through cloud resource elasticity.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If conventional deception technology uses on-premises appliances, then infrastructure control is maintained, but the need for on-site infrastructure increases complexity

Engineering Contradiction:

Improveinfrastructure controlVSAvoidon-premises infrastructure

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts all infrastructure complexity from the customer environment by moving honeypot deployment and management to a cloud platform. The customer retains reliability through controlled access to cloud-based deception services while eliminating the need to purchase, deploy, maintain, and scale physical on-premises infrastructure, thereby reducing operational complexity.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent creates virtual copies of honeypots and deception infrastructure in the cloud environment rather than requiring physical replicas in the customer's network. These cloud-based virtual instances provide identical deception functionality without the complexity of physical infrastructure deployment, allowing flexible provisioning and management through software-defined virtualization.

Inventive Principle:

Principle #26Copying

3Adaptability or versatility

If cloud-based deception technology is deployed, then scalability is improved, but the need for cloud infrastructure integration increases system complexity

Engineering Contradiction:

ImprovescalabilityVSAvoidcloud integration requirements

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent implements a universal cloud-based platform that provides multiple deception technology functions through a single integrated system. The cloud platform simultaneously handles honeypot deployment, network traffic monitoring, data exfiltration detection, threat intelligence sharing, and analytics, eliminating the need for customers to integrate multiple separate cloud services and reducing overall system complexity despite cloud infrastructure requirements.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent enables the cloud-based deception system to automatically provision, deploy, and manage honeypots without requiring extensive manual configuration or integration work from the customer. The system self-manages infrastructure provisioning, traffic routing, and data collection through automated cloud APIs and configuration templates, reducing integration complexity while maintaining scalability.

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS12107889B2Cloud-based deception technology utilizing zero trust to identify threat intelligence, telemetry, and emerging adversary tactics and techniques

Publication Date: 2024.10.01 ZSCALER INC

AI summary

Cloud-based deception systems and methods with zero trust include hosting a decoy cloud environment for a customer that contains a plurality of decoys and that is hosted and separated from a real environment of the customer; receiving traffic from a user associated with the customer; detecting the traffic is related to accessing a fake asset on a user device associated with the user; rerouting the traffic to the decoy cloud environment; and monitoring activity associated with the fake asset in the decoy cloud environment.