Deception Toolkit

• DTK creates deceptive IP services

  • Deceptions intermingled with normal systems
    • Use otherwise unused ports
    • Provide several steps of depth
  • Detects some technical intelligence attempts
  • Misleads intelligence efforts -> more effort needed
  • More depth of deception gains you time
  • Increased visibility of attacks makes react easier
  • Detection -> switch to pure deception systems
  • Works against many insiders as well as outsiders
  • May deter certain types of attacks

Notes: