Cyber deception represents the next paradigm of cyber defence, where one engages with their adversary much earlier in the attack lifecycle than before. By redirecting attackers towards decoy assets (whether a VM, service, or an entire subnet!), there exists immense potential to both deter attacks and gleam considerable amounts of real-time threat intelligence against would-be adversaries, including insider threats.

In this talk, we'll briefly look at what cyber deception entails, demonstrate an example or two of cyber deception campaigns, and the prerequisites for implementing an effective cyber deception scheme.