Rapid7, Inc.
Honeypot Network with Dynamically Updated Alert Modules for Detecting Anomalous Connections

Abstract:

Analyzing and reporting anomalous internet traffic data by accepting a request for a connection to a virtual security appliance, collecting attribute data about the connection, applying an alert module to the data, and automatically generating an alert concerning an identified incident. An alert system for analyzing and reporting the anomalous internet traffic data. A processor to analyze and report anomalous internet traffic data.