News for hackers. Stuff that matters.

A comment on YC-backed Cymmetria published a report about an APT caught with cyber-deception.

Re:YC-backed Cymmetria published a report about an APT caugh... by dkopi on Saturday July 09, 2016 @06:02PM (#12063537)
How is cyber-deception different from regular honeypots?
[ Parent | on HN ]
Re:YC-backed Cymmetria published a report about an APT caugh... by ddiinn2 on Saturday July 09, 2016 @06:30PM (#12063641)
There are two main advancements beyond "classic" honeypots:

1. Honeypots are easy to fingerprint (see our blackhat talk, https://www.youtube.com/watch?v=Pjvr25lMKSY )

2. Most honeypots just "sit on the network", waiting to be scanned. By using breadcrumbs (AKA honeytokens) as part of deception stories you're actively hunting the attackers in the network, by influencing their decision process.

[ Parent | on HN ]