News for hackers. Stuff that matters.

A comment on Running a fake power plant on the internet for a month. Parent comment

Re:Running a fake power plant on the internet for a month by GordonS on Saturday January 16, 2021 @12:56PM (#25803903)
Nice, your software looks pretty polished! Have you published any kind of best practices guides for using decoys, or alternatively are you aware of any other good guides?

I've seen decoys mentioned in infosec Twitter quite a few times recently (I think more about OSS ones), and I'd like to learn more about how they are generally actually used, what the expectations are etc.

[ Parent | on HN ]
Re:Running a fake power plant on the internet for a month by waihtis on Saturday January 16, 2021 @01:20PM (#25804108)
We haven't so far..

Mitre SHIELD (shield.mitre.org) lays out the different types of capabilities there are in this domain but doesn't have a lot of practical how-to advice which is what I think you're more after.

If you think it would be helpful I can send you our "product guide" which touches a bit on the decoy best practices. If this sounds useful message me at simo@[the domain in my profile] and I'll send it over.

I might actually write something about it online also, sounds like it could be useful knowledge for many.

[ Parent | on HN ]