- Products
-
ProductsPlatform
- ShadowPlex Advanced Threat Defense
Deception for early detection of cyber threats with precision and speed
- ShadowPlex Identity Protection
Visibility, management and protection of identity stores and attack paths
- Acalvio Active Defense Platform
Comprehensive and Award-winning Distributed Deception Platform
- What is Active Defense?
Active defense detects and diverts attacks.
- Why do I need Acalvio Active Defense?
Active Defense deceives and disrupts attackers.
- ShadowPlex Advanced Threat Defense
-
- Solutions
-
Technology SolutionsIndustry Solutions
- Breach Detection
Active Defense for breach detection and response, both in on-premises and cloud workloads
- Identity Threat Detection & Response
Visibility into Identity attack surface and effective detect & respond solution for identity attacks
- OT / ICS Security
Passive and low-risk agentless solution that is easy to deploy
- Active Directory Protection
Visibility into AD attack surfaces and detection of AD Attacks
- Threat Hunting
Active threat hunting, based on targeted deception, to confirm hunting hypothesis
- Ransomware
AI-Driven Advanced Deception Technology to combat even zero-day Ransomware
- Honeytokens for CrowdStrike
Honeytokens are deceptive credentials and data that are embedded in legitimate assets
- Public Sector
Targeted solution for protecting Federal agencies in conformation with NIST and CISA recommendations
- Healthcare
Active defense solutions thwart healthcare attacks before they can inflict real damage.
- Breach Detection
-
- Resources
- Partners
- Company
The Next Wave – Review of Emerging Technologies, NSA
Beginning with our pilot studies, cyber deception has been shown to have a measurable impact on attacker performance. In the pilot, more time was spent on decoys than real machines, and there was increased confusion about the network. In addition, attackers frequently misidentified the real nodes as decoys. The pilot studies also suggest that simply thinking deception is present impedes success.
The Moonraker study demonstrated that host-based deception effectively hinders progress, prevents task completion, and induces increased confusion and surprise in computer specialists attempting to exfiltrate targeted information from a network. While the analysis of the results from the Tularosa study are ongoing, what has been discovered to date reinforces the utility of deception for cyber defense. Attackers were quickly detected in the system and generally fooled by the techniques employed, even when notified of deception’s presence. We expect to gain additional valuable insights by continuing to analyze the Tularosa data set.
Finally, the upcoming investigation into the effects of oppositional human factors opens a new arena in cybersecurity research.Scientifically rigorous human subjects research is necessary to truly evaluate the effectiveness of cyber deception on attackers’ progress and to understand the effects of deception on attackers’ decision-making processes.
While cyberpsychology is a relatively new field, the field of psychology is over a century old and provides the methodology to minimize experimental bias and maximize control of our experiments in order to produce statistically sound and empirically valid results. In the realm of cyber defense, the ability to impact the decision-making of attackers and cause them to waste both time and effort as well as expose their presence in the network through the use of deception or oppositional human factors has the potential to shift the asymmetry of cyber defense in our favor.