Abstract: A system (130) for monitoring a denial of service attack upon a target network resource includes a memory (210) and a processor (205). The memory (210) stores instructions. The processor (205) executes the instructions in the memory (210) to receive one of a plurality of denial of service attack profiles, each profile identifying the target network resource and to execute a denial of service attack against the target network resource in accordance with the received profile. The processor (205) further executes the instructions in the memory (210) to scan one or more ports of the target network resource to determine an effect of the executed denial of service attack.

Abstract: A security system (150) in a network includes a softswitch (440) and a detection unit (420). The detection unit (420) detects activity directed to the softswitch (440) and records the detected activity. In another implementation, a method for configuring a security device (150) for use in a network includes installing a detection unit (420) to monitor and record traffic directed to the security device (150), installing a deceptive operating system (430), installing a softswitch (440), and configuring the deceptive operating system (430) and softswitch (440) to mirror settings used in an active softswitch (140) in the network.