{"id":22356,"date":"2024-01-30T18:22:22","date_gmt":"2024-01-30T17:22:22","guid":{"rendered":"https:\/\/www.riskinsight-wavestone.com\/?p=22356"},"modified":"2024-01-30T18:22:24","modified_gmt":"2024-01-30T17:22:24","slug":"deceptive-security-the-solution-for-effective-detection-in-the-cloud-your-luring-strategy","status":"publish","type":"post","link":"https:\/\/www.riskinsight-wavestone.com\/en\/2024\/01\/deceptive-security-the-solution-for-effective-detection-in-the-cloud-your-luring-strategy\/","title":{"rendered":"Deceptive Security: the solution for effective detection in the cloud? – your luring strategy.\u00a0"},"content":{"rendered":"\n

\u00a0<\/p>\n

\u00a0<\/span><\/p>\n

Today, cyber-attacks are part of our daily lives, and are becoming increasingly numerous and sophisticated.\u00a0<\/span>\u00a0<\/span><\/p>\n

Simultaneously<\/span>, we are moving towards Information Systems built on an ever-increasing diversity of environments, thanks in particular to the Cloud,<\/strong> which is now <\/span>an integral part within <\/span>corporate I<\/span>nformation <\/span>S<\/span>ystems<\/span>. This enables <\/span>corporation to <\/span>expand their capabilities, <\/span>however it also <\/span>the surface area and risks of attack.\u00a0<\/span>\u00a0<\/span><\/p>\n

Conventional intrusion detection and protection techniques already exist and are developing exponentially. These are effective against the most common attacks, <\/span>however<\/span> are <\/span>not <\/span>always <\/span>adapted to the specificities of the Cloud.\u00a0<\/span>\u00a0<\/span><\/p>\n

This raises questions about the use of proactive strategies<\/strong>, such as Deceptive Security<\/strong>, to stay one step ahead of attackers. Particularly in the context of Cyber-Resilience: how can this kind of technology be used in both <\/span>a <\/span>traditional and <\/span>a <\/span>cloud environment<\/span>?\u00a0<\/span>\u00a0<\/span><\/p>\n

When should Deceptive Security techniques be used? Are Deceptive Security solutions in the Cloud being developed today? Are there any specific strategies to consider in a Cloud environment as opposed to a traditional one?\u00a0<\/em><\/p>\n

We will answer these questions in a <\/span>mini-series of 2 articles<\/span><\/b>. In the first article, we will show you how to develop and evaluate your decoy strategy. In the second article, we’ll present a practical example of deceptive security in AWS.<\/span>\u00a0<\/span><\/p>\n

\u00a0<\/p>\n

Develop<\/span> and <\/span> evaluate<\/span> your\u00a0deceptive<\/span> strategy<\/span> \u00a0<\/span><\/h1>\n

Ambitions of <\/span>Deceptive Security<\/span>\u00a0<\/span><\/h2>\n

Deceptive Security in a nutshell<\/span>\u00a0<\/span><\/h3>\n

“Deceptive Security<\/strong>” (referred to as “Deceptive” in the rest of this article), or “digital decoying<\/strong>“, is a cyber-defense technique that deals with the intrusion of attackers into an IS<\/strong> (Information System). It works by setting up traps and\/or decoys<\/strong> in an IS. These are designed to imitate legitimate technology,<\/strong> so as not to be <\/span>identified as security systems\/measures<\/span>.\u00a0<\/span>\u00a0<\/span><\/p>\n

This method makes it possible to detect<\/strong> intrusions by generating alerts, to prevent damage<\/strong> to the actual infrastructure and to observe<\/strong> the practices used by the attacker.\u00a0<\/span>\u00a0<\/span><\/p>\n

Before delving into the details of this subject, we recommend reading the article “<\/span>Deceptive Security : comment arroser l\u2019arroseur ?<\/span><\/a> “, which describes the main concepts of “Deceptive Security<\/strong>“.\u00a0<\/span>\u00a0<\/span><\/p>\n

\u00a0<\/p>\n

The main objectives of Deceptive<\/span>\u00a0<\/span><\/h3>\n

The use of Deceptive on an IS can have several objectives:\u00a0<\/span>\u00a0<\/span><\/p>\n