Deception Technology: Honeypots and Honeytokens

Detect attackers using decoy systems and data.

Deception technology creates false targets for attackers.

Deception Types

- Honeypots: Fake systems
- Honeytokens: Fake credentials/files
- Honeynets: Network of decoys
- Bread crumbs: Lures to deception

- Low false positives
- Early warning system
- Attacker intelligence
- Detects lateral movement
- No production impact

- Attivo Networks (now SentinelOne)
- Illusive Networks
- TrapX Security
- Thinkst Canary
- Canarytokens (free)