Search

Deception has been widely deployed in human conflicts, but its application to information security could only be witnessed since the early 1990s. Different deception techniques have been proposed as part of computer-based information operations (IO), in order to facilitate specific warfare campaigns. In the recent years, a number of researchers have investigated different deception techniques used in computer-based networks, such as honeypots and honeynets, but in the light of several emerging issues more consideration is required in exploring deception as a strategic capability for Computer Network Defence (CND). In this discussion paper we address the potentially important role that deception can play for CND, similarly to its important role within conventional warfare and IO. We also highlight issues of further research towards the integration of deception in information security practices. [ABSTRACT FROM AUTHOR]

The concept of deception has been practised in human conflicts ever since they existed, but its application to an information security environment could only be witnessed in the early 1990s onwards. Since then, different deception techniques have also been introduced to the Computer Network Operations (CNO) environment, in order to achieve desired outcome(s). In the recent years, a number of researchers have investigated in different deception techniques used in computer based networks but more consideration is needed in exploring the strategic deception in a Computer Network Defence (CND) environment. To date, there are no models available that would allow strategic deception in a CNO environment and therefore building such model would be a great achievement. This paper aims to establish an understanding of the role of deception in a CNO environment and will also discuss a draft concept of a deception model that will allow strategic deception in a CNO environment. [ABSTRACT FROM AUTHOR]