Deception for Cyber Adversaries
Abdullah Alshammari, Danda B. Rawat, Moses Garuba, Charles Kamhoua, Laurent Njilla · 2020
Cybersecurity continues to be a major concern for many organizations. Losing private and critical information to attackers is often unthinkable for individuals as well as organizations. As such, over the decades, different organizations have developed a wide range of techniques to secure their private information and infrastructure. Cyber deception is one technique used to learn and combat the malicious cyberattacks. The purpose of this chapter is to present the current status, challenges, and perspectives of cyber deception for cyber adversaries. This chapter also investigates the game-theoretic deception approach for cyber adversaries. Our intent is to help readers develop a thorough understanding of cyber deception with regard to cybersecurity. We present the unique advantages of using deception techniques for cybersecurity over traditional security defenses, allowing the system to learn and adapt security parameters on the fly to combat malicious cyber operations. The paradigm shift to the Internet of Things (IoT) is bringing significant benefits for many future IoT applications, as well as significant cybersecurity challenges. Here, we identify and discuss how cyber deception can be applied in the IoT context.