Example Cyber Deception Effects for Attacker and Defender
{"Image DocumentName": "Example Cyber Deception Effects for Attacker and Defender", "Image ImageDescription": "Fail to observe. Prevent the defender from detecting the attack. Prevent the attacker from discovering their target. Reveal. Trick the defender into providing access. Trick the attacker into revealing their presence. Waste Time. Focus the defender\u2019s attention on the wrong aspects of the incident. Focus the attacker\u2019s efforts on the wrong target. Underestimate. Induce the defender to think the attack is unsophisticated, not targeted. Induce the attacker into thinking that the sought after thing is not here. Disengage. Induce the defender into thinking that the attack is contained or completed. Induce the attacker into thinking that their have already achieved their goal. Misdirect. Focus the defender on a different attacker. Encourage the attacker to target a different victim. Misattribute. Induce the defender into thinking that the attacker is someone else. Induce the attacker into thinking that they\u2019ve compromised the wrong network. I really think this slide is important. A lot of the techniques that are listed on the attacker side are things that are common that have happened in real life, such as the relatively recent use of DDOS attacks to tie up incident response teams while other, targeted attacks are taking place. On the defender side, there are two things that I think its important to emphasize: No Security Through Obscurity is a mantra that has its place in combatting the sale of snake oil encryption systems, but people in infosec are sometimes too dogmatic about it and they apply it in too many different contexts. Security through obscurity is the reason that the Army wears green clothes. Its a time tested thing that really works. Armies aren\u2019t going to start wearing orange any time soon. 2. When you are dealing with persistent adversaries, you aren\u2019t necessarily going to win on a technical level. Some of the outcomes listed here for defenders speak to the need to target the person on the other side of the screen, and get them to decide to stop attacking you, because they\u2019ve concluded that there is no point in continuing to do so. Thats how you win.", "Image XResolution": "37", "Image YResolution": "37", "Image ResolutionUnit": "Pixels/Centimeter", "Image Software": "SlidePlayer", "Image YCbCrPositioning": "Centered"}