SYSTEM AND METHOD FOR COMPUTER SECURITY USING MULTIPLE CAGES

(19)

(11)

EP 1 382 154 B8

(12)	CORRECTED EUROPEAN PATENT SPECIFICATION
	Note: Bibliography reflects the latest situation

(15)	Correction information:
	Corrected version no 1 (W1 B1)

(48)	Corrigendum issued on:
	21.03.2012 Bulletin 2012/12

(45)	Mention of the grant of the patent:
	02.11.2011 Bulletin 2011/44

(21)	Application number: 02721805.6

(22)	Date of filing: 23.04.2002

(51)

International Patent Classification (IPC):

H04L 12/14^(2006.01)

(86)	International application number:
	PCT/US2002/012842

(87)	International publication number:
	WO 2002/087155 (31.10.2002 Gazette 2002/44)

(54)	SYSTEM AND METHOD FOR COMPUTER SECURITY USING MULTIPLE CAGES SYSTEM UND VERFAHREN FÜR COMPUTERSICHERHEIT UNTER VERWENDUNG MEHRERER KÄFIGE SYSTEME ET PROCEDE PERMETTANT D'ASSURER LA SECURITE INFORMATIQUE AU MOYEN DE PLUSIEURS CAGES

(84)	Designated Contracting States:
	AT BE CH CY DE DK ES FI FR GB GR IE IT LI LU MC NL PT SE TR

(30)

Priority:

23.04.2001 US 841700

(43)	Date of publication of application:
	21.01.2004 Bulletin 2004/04

(73)	Proprietor: SYMANTEC CORPORATION
	Mountain View, CA 94043 (US)

(72)	Inventors:
	SORKIN, Stephen Menlo Park, CA 94025 (US) LYLE, Michael San Jose, CA 95121 (US) ROSS, Robert, F. Mountain View, CA 94041 (US) MARICONDO, James, R. Palo Alto, CA 94303 (US)

(74)	Representative: Meldrum, David James et al
	D Young & Co LLP 120 Holborn London EC1N 2DY London EC1N 2DY (GB)

(56)

References cited: :

WO-A-01/04757
WO-A-01/05168
US-A- 4 719 566
US-A- 5 928 363

WO-A-01/04759
WO-A-01/06373
US-A- 5 345 590
US-A1- 2002 066 034

CHESWICK BILL: 'An evening with Berferd in which a cracker is lured, endured and studied' AT & T BELL LABS 1990, pages 1 - 13, XP002952580
STAGGS MICHAEL: 'IDS:RE: cybercop sting' UNIVERSITY OF WOLLONGONG, AUSTRALIA, [Online] 08 October 1999, pages 1 - 2, XP002952579 Retrieved from the Internet: <URL:http://www.shmoo.com/mail/ids/oct99/ms g00467.html>
SPITZNER LANCE: 'To build a honeypot' LANCE SPITZNER WEB SITE, [Online] 10 October 1999, pages 1 - 5, XP002952578 Retrieved from the Internet: <URL:http://www.archive.org/web/19991013141 306/http://enteract.com/~1spitz/honeypot.ht ml>
COHEN FRED: 'A mathematical structure of simple defensive network deceptions' FRED COHEN & ASSOC., [Online] 1999, pages 1 - 13, XP002952577 Retrieved from the Internet: <URL:http://www.all.net/journal/deception/m athdeception/mathdeception.html>
'Network associates ships cybercop sting' NETWORK ASSOCIATES, [Online] 16 July 1999, pages 1 - 3, XP002952576 Retrieved from the Internet: <URL:http://www.infowar.com/P_and_s/99/p_n_ s_071699d_j.shtml>
COHEN FRED: 'Internet holes-internet lightening rods' MANAGEMENT ANALYTICS, [Online] 1996, pages 1 - 5, XP002952575 Retrieved from the Internet: <URL:http://www.all.net/journal/netsec/9607 -2.html>
MESSMER ELLEN: 'Decoy server helps track down hackers NWFusion focus' NEWSGROUPS:ALT.2600 NEWS:37B88C12.9479112ONETNEWS.WORLDNET.ATT. NET, [Online] 12 August 1999, XP002952573 Retrieved from the Internet: <URL:http://www.groups.google.com/groups>
'CyberCop sting-industry's 1st decoy server silently traces & tracks hacker activity' NEWSGROUPS:ALT2000.NL, [Online] 15 July 1999, pages 1 - 3, XP002952574 Retrieved from the Internet: <URL:http://biz.yahoo.com/prnews/990714/ca_ ntwrk_a_1.html>
'Decoy nets' gain backers in battle against hackers network world' NETWORK WORLD, [Online] 06 March 2001, pages 1 - 3, XP002952572 Retrieved from the Internet: <URL:http://www.itworld.com/sec/2210/NWW010 306decoy/>
COHEN FRED: 'A note on the role of deception in information protection' FRED COHEN & ASSOC., [Online] 1998, pages 1 - 25, XP002952571 Retrieved from the Internet: <URL:http://www.all.net/journal/deception/d eception.html>
EVEN LORAS: 'What is a Honeypot?' SANS INSTITUTE, [Online] 12 July 2000, pages 1 - 5, XP002952570 Retrieved from the Internet: <URL:http://www.sans.org/netlook/resources/ IDFAQ/honeypot3.htm>
'HONEYNET.ORG know your enemy: Honeynets' HONEYNET PROJECT WEB SITE, [Online] 21 April 2001, pages 1 - 7, XP002952569 Retrieved from the Internet: <URL:http://web.archive.org/web/20010428053 525/http://project.honeynet.org/>

Note: Within nine months from the publication of the mention of the grant of the European patent, any person may give notice to the European Patent Office of opposition to the European patent granted. Notice of opposition shall be filed in a written reasoned statement. It shall not be deemed to have been filed until the opposition fee has been paid. (Art. 99(1) European Patent Convention).