- Products
-
ProductsPlatform
- ShadowPlex Advanced Threat Defense
Deception for early detection of cyber threats with precision and speed
- ShadowPlex Identity Protection
Visibility, management and protection of identity stores and attack paths
- Acalvio Active Defense Platform
Comprehensive and Award-winning Distributed Deception Platform
- What is Active Defense?
Active defense detects and diverts attacks.
- Why do I need Acalvio Active Defense?
Active Defense deceives and disrupts attackers.
- ShadowPlex Advanced Threat Defense
-
- Solutions
-
Technology SolutionsIndustry Solutions
- Early Threat Detection
Detect cyber threats early in the attack lifecycle to prevent adversary breakout
- Identity Threat Detection & Response
Detect identity threats with precision and protect the identity architecture
- OT Security
Protect OT environments from cyber threats with an easy-to-deploy and non-intrusive solution
- Red Teaming
Strengthen defenses to detect red team activities
- Threat Hunting
Active threat hunting to confirm latent threats and gain visibility to attacker TTPs
- Ransomware
AI-driven deception to protect against known and zero-day ransomware variants
- Honeytokens for CrowdStrike
Enterprise-scale honeytokens to protect against current and evolving identity threats
- Active Directory Protection
Visibility to AD attack surface and detection of AD attacks
- Zero Trust
Advance Zero Trust maturity through improved cyber visibility
- Insider Threats
Unmask hidden dangers. Cyber deception for high-fidelity insider threat detection
- Public Sector
Targeted solution for protecting Federal agencies in conformation with NIST and CISA recommendations
- Financial Services
Transform Financial Cybersecurity with Innovative Cyber Deception and Active Defense
- Healthcare
Active defense solutions thwart healthcare attacks before they can inflict real damage.
- Early Threat Detection
-
- Resources
- Partners
- Company
The Next Wave – Review of Emerging Technologies, NSA
Beginning with our pilot studies, cyber deception has been shown to have a measurable impact on attacker performance. In the pilot, more time was spent on decoys than real machines, and there was increased confusion about the network. In addition, attackers frequently misidentified the real nodes as decoys. The pilot studies also suggest that simply thinking deception is present impedes success.
The Moonraker study demonstrated that host-based deception effectively hinders progress, prevents task completion, and induces increased confusion and surprise in computer specialists attempting to exfiltrate targeted information from a network. While the analysis of the results from the Tularosa study are ongoing, what has been discovered to date reinforces the utility of deception for cyber defense. Attackers were quickly detected in the system and generally fooled by the techniques employed, even when notified of deception’s presence. We expect to gain additional valuable insights by continuing to analyze the Tularosa data set.
Finally, the upcoming investigation into the effects of oppositional human factors opens a new arena in cybersecurity research.Scientifically rigorous human subjects research is necessary to truly evaluate the effectiveness of cyber deception on attackers’ progress and to understand the effects of deception on attackers’ decision-making processes.
While cyberpsychology is a relatively new field, the field of psychology is over a century old and provides the methodology to minimize experimental bias and maximize control of our experiments in order to produce statistically sound and empirically valid results. In the realm of cyber defense, the ability to impact the decision-making of attackers and cause them to waste both time and effort as well as expose their presence in the network through the use of deception or oppositional human factors has the potential to shift the asymmetry of cyber defense in our favor.