Deception: Technologies and Strategy for Cybersecurity

There are many different types of security threats to individual, business and government enterprises. Although there are efforts to ensure that technologies work to the best levels, there are still several challenges. Keeping the security of the enterprise system in view, security designers have introduced multiple security perimeters like firewalls and threat detection and response (TDR) systems. These frameworks directly contribute to detecting and defending any unwanted action into the system. The objective of this paper is to survey the role and strategies of deception in cyberattack. A detailed discussion of technologies and tools for combating unwanted adversary actions are presented.

I. Introduction

It is necessary for enterprises to find ways to detect and defend human attackers in real time. Deception tools and technologies are the best solution to the problem. Deception tools work in real time to detect and defend unwanted actions from human attackers that attempt to steal critical information from the system. The tools are very accurate and automated, which keeps a firm eye on the malicious activities happening in the system. These tools can track the activities from the internal network that cannot be tracked by other cyberdefence frameworks. Deception tools operate proactively, working to deceive the attackers. The tools are designed to think like cyberattackers, which enables them to proactively defend and defeat the intruders. The tools include threat intelligence systems which can differentiate among the potentially harmful threat alerts and normal alerts.