conference paper

Retrospectively Using Multilayer Deception in Depth Against Advanced Persistent Threats

Landsborough J.A.; Nguyen T.D.; Rowe N.C.

Publication year: 2024
Source / journal: proceedings of the annual hawaii international conference on system sciences
Country of origin: USA
Language: English
Authors’ affiliations: Naval Information Warfare Center Pacific, Naval Postgraduate School, United States
Import source: Scopus export

Abstract

Defensive cyber deception is useful in both the information and cognitive domains of warfare. Such deception works better when it is multilayer as a defense-in-depth strategy. We developed a tool to analyze the offensive tactics in the MITRE ATT&CK Enterprise framework that were popular with sixteen Advanced Persistent Threat (APT) groups, and identified deceptive defense methods that can counter each technique. With this knowledge defenders can make more informed decisions while planning the deception to use in different layers. We use as examples three recent high-profile APT events, and review how well the deception methods could interfere with them. © 2024 IEEE Computer Society. All rights reserved.

Author keywords

advanced persistent threat, apt analysis, deception in depth, mitre att&ck, multilayer defense