Deterring Attackers with HoneyTrail: Deploying Deception in AWS | by Adan | May, 2024 | Medium

I’ve always been a big fan of deception and honeypots. Even my final degree project was about implementing a honeypot with active blocking for an Internet Service Provider. At that time, not many companies were using honeypots, and the job market in cybersecurity barely touched on them. Today, despite some advancements, honeypots, honeytokens, and deception technologies remain largely underutilized, even though they offer proven benefits for detecting and analyzing attacks. During the UniCon 2024 Opening Keynote, Dave Kennedy highlighted a crucial point: attackers are genuinely scared of infrastructure deceptions. This is exactly why we need to change the cybersecurity landscape. We must make attackers realize that they cannot infiltrate our networks without consequences. They should feel that even the slightest misstep will lead to their immediate discovery and blockage. It is true that the space is changing, but slowly. Websites like https://canarytokens.org/ from Thinkst Canary are

I’ve always been a big fan of deception and honeypots. Even my final degree project was about implementing a honeypot with active blocking for an Internet Service Provider. At that time, not many companies were using honeypots, and the job market in cybersecurity barely touched on them. Today, despite some advancements, honeypots, honeytokens, and deception technologies remain largely underutilized, even though they offer proven benefits for detecting and analyzing attacks. During the UniCon 2024 Opening Keynote, Dave Kennedy highlighted a crucial point: attackers are genuinely scared of infra