Re:Cymmetria (YC S15) Uses Virtual Machines to Decoy and Det...
by ddiinn2 on Sunday June 28, 2015 @09:26PM
(#9795959)
Like was said before, you have to attack the decoy to recognize it and that enables catching the attack traffic. Also the mere fact that they recount every single action 10 times over before acting is a huge value in and of itself.
On another note I agree that they will try and we will be constantly remembering that fact :)
Let's say that an attacking organization fully installs your sensor in their own lab. What is to prevent them from engineering an approach to fully defeat the sensor itself?