System, method, and computer program for real-time cyber intrusion detection and intruder identity analysis

A system, method, and computer program product are provided for real-time cyber intrusion detection and intruder identity analysis. In operation, an intrusion detection system detects an intrusion by a cyber intruder attempting to access a first area of a system utilizing an application programming interface layer (API) layer. The intrusion detection system directs the cyber intruder to a secure second area of the system that mimics the first area of the system via the API layer. Further, the intrusion detection system notifies a security system of the intrusion.