Shawn H Young

US Patent:

7549166, Jun 16, 2009

Filed:

Dec 5, 2002

Appl. No.:

10/313728

Inventors:

Paul T. Baffes - Austin TX, US
John Michael Garrison - Austin TX, US
Michael Gilfix - Austin TX, US
Allan Hsu - Centerville OH, US
Tyron Jerrod Stading - Austin TX, US
Ronald S. Woan - Austin TX, US
John D. Wolpert - Austin TX, US
Shawn L. Young - Austin TX, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 11/00
G06F 7/04

US Classification:

726 23, 726 24, 726 27

Abstract:

A method and system for handling a malicious intrusion to a machine in a networked group of computers. The malicious intrusion is an unauthorized access to the machine, such as a server in a server farm. When the intrusion is detected, the machine is isolated from the rest of the server farm, and the machine is reprovisioned as a decoy system having access to only data that is ersatz or at least non-sensitive. If the intrusion is determined to be non-malicious, then the machine is functionally reconnected to the server farm, and the machine is reprovisioned to a state held before the reprovisioning of the machine as a decoy machine.