Spoofing Network Architectures in Response to Hostile Reconnaissance

The DataSoft Network Obfuscation and Virtualized Anti-reconnaissance system (NOVA) detects hostile network reconnaissance and denies access to real network information while simultaneously providing false network information to attackers. This results in attackers expending significantly extra time and effort, allowing defenders additional time to mount an appropriate response. NOVA is a novel distributed system consisting of independent autonomous agents that combine lightweight virtualization, attacker classification, dynamic rerouting for asset protection, and diverse mechanisms for provision of false information to attackers. Our Phase II effort expands upon our successful Phase I prototype by developing a fully functional software system. We expand the current NOVA implementation with an extensive list of new functionality, as well as improve the existing system capabilities. All of the Phase II development efforts are highly results driven, with live demonstrations being performed at every step to ensure practical viability against real attacks. The Phase II effort continues the technology development and technical risk reduction efforts that were begun in Phase I, developing key useful NOVA capabilities and providing a foundation for the future growth of the NOVA system.