Open reference / Cyber deception

Cyber deception, in context.

Techniques, evidence, solutions and field experience connected to their sources.

01 / Orientation

Four ways into the field

Start with a question; resources are connected by topic, evidence and use.

01 / MAPUnderstand the fieldConcepts, techniques and the environments where defensive deception is used.02 / EVIDENCEExamine the evidencePapers, datasets and field reports with explicit review depth.03 / SOLUTIONSSurvey the ecosystemProducts, services and open software tied to their sources.04 / PRACTICEPut it into practiceGuides for deployment, evaluation, experiments and measurement.

02 / Taxonomy

Browse by technique and environment

Two distinct dimensions: what kind of lure is used and where it is placed.

Techniques

Honeypots and honeynets Honeytokens and decoy credentials Decoy assets and objects Adversary engagement Moving target defense

Environments

Networks and services Identity and credentials Cloud and hybrid environments Applications and APIs OT, ICS and critical infrastructure

Open the topic map →

03 / Library

A record, a source, a review boundary

FRAMEWORK

MITRE Engage

Framework for planning and communicating deception, denial and adversary engagement.

Open sourced record ↗

01 We identify the original source.

02 We classify technique, environment and type.

03 We state what we reviewed and what remains unknown.

Explicit boundary

A global reference grows through traceability.

The selection draws on sources from different regions and organizations; it is neither a worldwide census nor proof of commercial effectiveness by enumeration. Corrections and new sources go through editorial review.

Open the full library Suggest a source