Harris Corporation

Ellen K Lin

Wayne B Smith

Ryan E Sharpe

Christopher T Dowin

Charles S Powers

Ashley M Kopman

Method for communicating in a computer network from a first node () in the network to a second node (), not in the network. A virtual identity is selected for the first node. The virtual identity is comprised of one or more session identity parameters used for representing the first node during a static communication session with the second node. The session identity parameters used during the static communication session are excluded from a coordinated variation of identity parameters for nodes within the network. In response to determining an occurrence of at least one communication security threat with respect to the static communication session, the method further involves adaptively modifying the virtual identity assigned to the first node by changing at least one of the session identity parameters.

Session hopping

Method for communicating in a computer network from a first node () in the network to a second node (), not in the network. A virtual identity is manually selected for the first node. The virtual identity is comprised of one or more session identity parameters used for representing the first node during a static communication session with the second node. The session identity parameters used during the static communication session are excluded from a coordinated variation of identity parameters for nodes within the network. In response to determining an occurrence of at least one communication security threat with respect to the static communication session, the method further involves adaptively modifying the virtual identity assigned to the first node by changing at least one of the session identity parameters.

Systems () and methods () for use in a network node (-). The methods involve: receiving a Data Communication ('DC') from Data Link Layer Software ('DLLS'); identifying an IDentity Parameter (&#x201c;IDP&#x201d;) contained in DC which comprises a False Value (&#x201c;FV&#x201d;) specifying false information about the node or DC; obtaining a True Value (&#x201c;TV&#x201d;) specifying true information about the node or DC; replacing the FV with the TV to generate a modified DC; and forwarding the modified DC to Network Layer Software (&#x201c;NLS&#x201d;). The methods also involve: receiving a Data Unit (&#x201c;DU&#x201d;) from NLS comprising a Transport Layer Header (&#x201c;TLH&#x201d;) and a Network Layer Header (&#x201c;NLH&#x201d;) including TVs specifying true information about the node or FDU; obtaining a FV which specifies false information about the node or FDU; replacing a TV of DU with the FV so as to form a Modified Data Unit (&#x201c;MDU&#x201d;); and forwarding MDU to DLLS.

Systems and methods for implementing moving target technology in legacy hardware

Systems () and methods () for identifying, deterring and/or delaying malicious attacks being waged on a Computer Network ('CN'). The methods involve implementing a Mission Plan ('MP') at a first Network Node (&#x201c;NN&#x201d;). MP () specifies that: a first IDentity Parameter (&#x201c;IDP&#x201d;) for a second NN has numerous possible values associated therewith; and at least two possible values are to be used in communications to and from the second NN in different timeslots of a time frame (-). At the first NN, a value for the first IDP, which is contained in a received packet, is compared with the possible values specified in MP to determine if the value is a &#x201c;correct&#x201d; value for a current timeslot. If it is determined that the value is not &#x201c;correct&#x201d; for the current timeslot, then the first NN performs actions to identify, deter or delay a possible malicious attack on CN.

Systems and methods for identifying, deterring and/or delaying attacks to a network using shadow networking techniques

A method and apparatus for processing data messages in a dynamic computer network is disclosed. The method includes implementing a mission plan specifying a message type, a message generation location, and a message distance vector for false messages, receiving a data message that includes a plurality of identity parameters, and determining a message type and a message distance vector for the received message. The network device is configured to generate false messages and process received messages. If the message type is a false message and the distance vector of the false message has been exhausted, the data message is dropped. If the distance vector of the false message has not been exhausted, transmitting the false message in accordance with the mission plan.

Growing community of inventors

West Melbourne, FL, United States of America

Ellen K Lin