Reinforcement of cyber deception strategies through simulated user behavior
Federico Pacheco, Diego Staino · 2025
Cyber deception has emerged as a pivotal defensive strategy in the effort to detect and counter advanced persistent threats and sophisticated attacks. However, the implementation of conventional methods, such as decoy services, frequently lacks the credible support necessary to optimize their effectiveness. Generally, honeypot and honeytoken systems face limitations, including a lack of realism due to static configurations and an absence of human activity. Additionally, the simulation of actions is costly, and profiling is challenging to scale, as well as automation and adaptability. In this paper, we present a tool designed to automate the generation of realistic activities and behaviors of fictitious users, seeking to integrate personalized and coherent patterns of human interaction in cyber deception scenarios to improve the credibility of decoys. Based on the MITRE Engage framework, the tool contributes to the strengthening of defensive operations, addressing a key challenge of cyber deception.