Deception Toolkit Example

• DTK creates deceptive IP services

  • Detects some technical intelligence attempts
  • Misleads intelligence efforts -> more effort needed
  • Depth of deception gains you time
  • Increased visibility of attacks makes react easier
  • Detection -> switch to pure deception systems
  • Works against many insiders as well as outsiders
  • May deter certain types of attacks

P(A in V) low

P(A in D) high

Ta (D) ? infinity

Ta(R,D) ? infinity

Td(D) ? 0

Tr(D) ? 0

Previous slide

Next slide

Back to first slide

View graphic version