Deterring Attackers with HoneyTrail: Deploying Deception in AWS | by Adan | May, 2024 | Medium
I’ve always been a big fan of deception and honeypots. Even my final degree project was about implementing a honeypot with active blocking for an Internet Service Provider. At that time, not many companies were using honeypots, and the job market in cybersecurity barely touched on them. Today, despite some advancements, honeypots, honeytokens, and deception technologies remain largely underutilized, even though they offer proven benefits for detecting and analyzing attacks. During the UniCon 2024 Opening Keynote, Dave Kennedy highlighted a crucial point: attackers are genuinely scared of infrastructure deceptions. This is exactly why we need to change the cybersecurity landscape. We must make attackers realize that they cannot infiltrate our networks without consequences. They should feel that even the slightest misstep will lead to their immediate discovery and blockage. It is true that the space is changing, but slowly. Websites like https://canarytokens.org/ from Thinkst Canary are
3 min read May 12, 2024 -- Press enter or click to view image in full size I’ve always been a big fan of deception and honeypots. Even my final degree project was about implementing a honeypot with active blocking for an Internet Service Provider. At that time, not many companies were using honeypots, and the job market in cybersecurity barely touched on them. Today, despite some advancements, honeypots, honeytokens, and deception technologies remain largely underutilized, even though they offer proven benefits for detecting and analyzing attacks. During the UniCon 2024 Opening Keynote,…
related reading
- Honeypot (computing) - Wikipediaen.wikipedia.org
- Security incident disclosure — July 2026huggingface.co
- Intrusion Detection | Computer Securitytextbook.cs161.org
- The End-State Fallacy: Where Is AI Security Headed?endstatefallacy.com
- How AWS tracks the cloud’s biggest security threats and helps shut them down | AWS Security Blogaws.amazon.com
- PerfectData Software Abuse and Account Takeover Risksdarktrace.com
- Awareness and Developer Training That Actually Works | Anagram Securityanagramsecurity.com
- Cloud Email Security - Block Malicious Email Attacks | Abnormal AIabnormal.ai
- Email Compromise To Mass Phishing Campaigndarktrace.com
- Frontier AI Cybersecurity Observatorycybergym.io
- Removing Jeff Bezos From My Bed ◆ Truffle Security Co.trufflesecurity.com
- A hard look at GuardDuty shortcomings | Tracebittracebit.com