Decoy Transfer Records for Malfeasant Access Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Distributed networks face challenges in managing user access and detecting malfeasant activity, as transparency allows users to intercept or tamper with data transfers, making it difficult for controlling entities to monitor and secure the network.
Innovation Solution
A system generates decoy executed data transfer records with similar information to actual transfers, monitors access to these records, and implements escalation actions, including limiting access or shutting down the network if malfeasant activity is detected.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If transparency of data transfers is provided in distributed networks, then users can access information freely, but malfeasant activity such as intercepting or interfering with data transfers increases
Solution Approach 1:
The system performs preliminary actions by generating decoy executed data transfer records before actual malfeasant activity occurs. These decoy records are placed in the portal in advance, and when users interact with them, the system can detect and respond to potential threats before they affect real data transfers
Solution Approach 2:
The system introduces an intermediary mechanism - the decoy executed data transfer records - that mediates between the transparent nature of the distributed network and the need to prevent malfeasant activity. The decoys serve as safe intermediaries that allow user interaction while enabling monitoring and detection without exposing actual data transfers to harm
2Adaptability or versatility
If many users are allowed on the distributed network, then network functionality and usage increase, but managing user access and detecting malfeasant activity becomes difficult
Solution Approach 1:
The system implements self-service by allowing the distributed network to automatically monitor and detect malfeasant activity through user interactions with decoy records. The system autonomously tracks access patterns, identifies suspicious behavior, and triggers escalation actions without requiring manual intervention for each user
Solution Approach 2:
The system establishes feedback loops where user interactions with decoy records generate detectable signals that feed back into the system. This feedback mechanism enables automatic detection of malfeasant activity patterns and triggers appropriate escalation actions, making user access management scalable regardless of network size
3Measurement precision
If decoy executed data transfer records are generated and monitored, then malfeasant activity detection capability improves, but system complexity increases
Solution Approach 1:
The system uses copying by creating decoy executed data transfer records that replicate the appearance and structure of real executed data transfer records. These copies are functionally equivalent for monitoring purposes but harmless, allowing precise detection of malfeasant activity without requiring complex analysis of actual sensitive data
Solution Approach 2:
The system segments the monitoring function by separating decoy records from actual data transfer records. This segmentation allows the detection mechanism to operate independently on decoy records, simplifying the overall system architecture while maintaining high detection precision through dedicated monitoring of segmented decoy elements
Data Source
AI summary
Systems, computer program products, and methods for determining and preventing malfeasant activity in a private distributed network. The method includes generating one or more executed data transfer records for each of one or more executed data transfers across a distributed network. Each of the one or more executed data transfer records includes one or more data transfer information fields. The method also includes generating one or more decoy executed data transfer records. The decoy executed data transfer record(s) includes the data transfer information field(s). The method further includes providing a portal that contains each of the records associated with the distributed network. The method still further includes detecting a record access for one or more of the decoy executed data transfer records by an end-point device associated with a user. The method also includes causing an escalation action to be executed based on the detection of the record access.