Deterring Attackers with HoneyTrail: Deploying Deception in AWS | by Adan | May, 2024 | Medium
I’ve always been a big fan of deception and honeypots. Even my final degree project was about implementing a honeypot with active blocking for an Internet Service Provider. At that time, not many companies were using honeypots, and the job market in cybersecurity barely touched on them. Today, despite some advancements, honeypots, honeytokens, and deception technologies remain largely underutilized, even though they offer proven benefits for detecting and analyzing attacks. During the UniCon 2024 Opening Keynote, Dave Kennedy highlighted a crucial point: attackers are genuinely scared of infrastructure deceptions. This is exactly why we need to change the cybersecurity landscape. We must make attackers realize that they cannot infiltrate our networks without consequences. They should feel that even the slightest misstep will lead to their immediate discovery and blockage. It is true that the space is changing, but slowly. Websites like https://canarytokens.org/ from Thinkst Canary are
3 min read May 12, 2024 -- Press enter or click to view image in full size I’ve always been a big fan of deception and honeypots. Even my final degree project was about implementing a honeypot with active blocking for an Internet Service Provider. At that time, not many companies were using honeypots, and the job market in cybersecurity barely touched on them. Today, despite some advancements, honeypots, honeytokens, and deception technologies remain largely underutilized, even though they offer proven benefits for detecting and analyzing attacks. During the UniCon 2024 Opening Keynote,…
related reading
- Honeypot (computing) - Wikipediaen.wikipedia.org
- A Deep Dive Into The Cloud & Application Security Ecosystemsoftwareanalyst.substack.com
- Deep Deceptiveness — LessWronglesswrong.com
- The End-State Fallacy: Where Is AI Security Headed?endstatefallacy.com
- What I learned this week - Can distillation be stopped, Mythos and the cybersecurity equilibrium, Pipeline RLdwarkesh.com
- Defining A Software Supply Chain Security Platform & Exploring New Techniques, Part 2softwareanalyst.substack.com
- Want Better Cloud Security? Make Your Detections Multi-Dimensionalomeronsecurity.com
- Exposing and shutting down an inbox heist in actionredcanary.com
- Cloud coverage: Detecting an email payroll diversion attackredcanary.com
- What is Detection Engineering and Why do I Need it?cyberseccafe.com
- A hard look at GuardDuty shortcomings | Tracebittracebit.com
- Cloud Email Security - Block Malicious Email Attacks | Abnormal AIabnormal.ai