{"id":7249,"date":"2022-04-11T12:00:00","date_gmt":"2022-04-11T12:00:00","guid":{"rendered":"https:\/\/www.esecurityplanet.com\/2017\/09\/06\/deceiving-the-deceivers-deception-technology-emerges-as-an-it-security-defense-strategy\/"},"modified":"2023-03-22T14:38:01","modified_gmt":"2023-03-22T14:38:01","slug":"deception-technology","status":"publish","type":"post","link":"https:\/\/www.esecurityplanet.com\/networks\/deception-technology\/","title":{"rendered":"Top 8 Deception Tools"},"content":{"rendered":"

As technologies advance, and cyber threats with them, deception has become a big part of the 21st century cybersecurity battle. From bank transfer cons to CEO fraud to elaborate phishing<\/a> and spear phishing campaigns, cyber criminals have been quick to use deception as a major means of infiltrating networks<\/a> and systems, and for remaining undetected<\/a> while inside.<\/p>\n

But it can work the other way. Security vendors and startups use deception techniques to confuse and befuddle attackers. If an attacker is spending time and energy breaking into a decoy server, the defender is not only protecting valuable assets, but also learning about the attacker\u2019s objectives, tools, tactics, and procedures.<\/p>\n

That is the basic premise behind deception tools and technologies. By masking high-value assets in a sea of fake attack surfaces, attackers are disoriented and attack a fake asset, in the process alerting security teams to their presence. Deception tools can thus be an important defense against advanced persistent threats (APTs)<\/a>.<\/p>\n

What is Deception Technology?<\/h2>\n

According to Gartner analyst Lawrence Pingree, attackers must \u201ctrust\u201d<\/a> the environment they insert their malware into and the web applications and services they attack over the internet.<\/p>\n

They sneak around the fringes of the enterprise, seeking a way inside, which they might accomplish by tricking a user into clicking on a malicious link, opening an infected attachment or providing credentials and passwords, or perhaps by hacking an unpatched<\/a> or zero-day<\/a> vulnerability. Once inside, they can freely steal confidential information or pull off a financial heist.<\/p>\n

\u201cDeception exploits their trust and tempts the attacker toward alarms,\u201d said Pingree. \u201cDeception also can be used to move an attacker away from sensitive assets and focus their efforts on fake assets\u2014burning their time and the attacker\u2019s investment.\u201d<\/p>\n

How Does Deception Technology Work?<\/h2>\n

Deception tools are designed to trick attackers into thinking they have succeeded while also covertly luring them toward alerting security systems.<\/p>\n

\u201cDistributed deception platforms (DDP) are solutions that create faked systems (often real operating systems, but used as sacrificial machines), lures (such as fake drive maps and browser histories), and honeytokens (fake credentials) on real end-user systems to entice and mislead the attacker to faked assets in order to enhance detection and to delay their actions as they attack those decoy assets,\u201d said Pingree.<\/p>\n

Core functions of such systems include:<\/p>\n