Abstract:

This webinar, featuring Dave Kennedy and John Dwire from Binary Defense, discusses the importance and attainability of deception in cybersecurity. They explain deception as the act of deploying traps and pockets within a network to manipulate attackers into revealing themselves. The webinar explores how deception works, provides practical use cases, and addresses common concerns about its implementation, cost, and effectiveness. They also highlighted, a novel approach to democratizing access to deception technology by integrating it into an existing MDR service.

Deception in Cybersecurity: Strategies, Use Cases, and the Future of Defense

• 0:00:06 Introduction: The webinar introduces the topic of deception in cybersecurity and highlights Binary Defense's approach to making it attainable.

• 0:01:23 The Importance of Deception: Binary Defense stresses the importance of deception as a core critical practice in defensive capabilities.

• 0:03:45 What is Deception? Deception is defined as putting out traps or pockets in the network to add time to response and disrupt attacker stealth.

• 0:04:46 How Deception Works: Attackers are lured into a place where they believe is real, causing them to uncover themselves. The effectiveness relies on making fake scenarios that are believable to attackers.

• 0:05:40 Real-World Examples of Deception: The webinar provides examples of how deception has been used in real-world engagements and its mental impact on attackers.

• 0:11:23 Operator's Perspective on Deception: Attackers seek the easiest and quickest way to achieve their objectives. Creating scenarios that present information making it quicker for the "attacker" to their objectives is very effective.

• 0:12:24 Defender's Perspective on Deception: Deception is a good way to fill the gaps in visibility where different areas in your network may be poorly defended.

• 0:17:49 Specific Examples You Can Implement: The presenter then gives various specific use cases that the listener can implement themselves.

• 0:22:08 Why Don't More Companies Use Deception: The primary reason cited is the resource constraints and the difficulty of securing reinvestment for deception technologies.

• 0:24:41 Incorporating Deception: The presenter discusses incorporating deception technology into a preexisting product and offering manage detection services.

• 0:26:44 Use Cases: There are various use cases ranging from accounts to SPN accounts or honeypots that the webinar dives into.

• 0:30:55 Free solutions: There are many no cost free solutions to adding deception to your network.

• 0:31:13 Examples: Different examples of attacks are given with different solutions that will trick the intruder and alert the defender.

• 0:36:08 Generative AI: Is suggested as a method to better emulate user accounts and hostnames so as to make the trap appear more lifelike.

• 0:37:37 Managed Deception: Integrating deception into a managed service democratizes its accessibility and reduces management overhead.

• 0:42:55 Innovation and Future Trends: With advances in machine learning, the future of deception lies in creating immersive experiences indistinguishable from reality and AI to react in real time.

• 0:53:55 Objective Based Testing: This is a good way to add deception into your network. Test the traps and continue to fix them or continue to add more.