Microsoft Technology Licensing, LLC

Andrew E Johnson

Hani Hana Neuvirth

Tomer Weinberger

Yaniv Zohar

Craig A Nelson

Methods, systems, and media are shown for creating and deploying honey tokens for intrusion detection in a remote computing resource system. Resource modules provisioned for a tenant are identified for intrusion detection. For each identified resource modules, a provisioned resource having a corresponding access credential is allocated and the access credential is deployed in the identified resource module. A data entry is created in a token mapping store that identifies the access credential and the resource module. Access logs are scanned to detect access attempts. For each access attempt, the token mapping store is searched for a data entry with an access credential that matches the access credential of the access attempt. If found, an alert is generated that includes the identified resource module of the matching data entry.

Growing community of inventors

Redmond, WA, United States of America

Andrew E Johnson