Application Layer Cyber Deception without Developer Interaction

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Kahlhofer, Mario, Rass, Stefan
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866909282263367680
author Kahlhofer, Mario
Rass, Stefan
author_facet Kahlhofer, Mario
Rass, Stefan
contents Cyber deception techniques that are tightly intertwined with applications pose significant technical challenges in production systems. Security measures are usually the responsibility of a system operator, but they are typically limited to accessing built software artifacts, not their source code. This limitation makes it particularly challenging to deploy cyber deception techniques at application runtime and without full control over the software development lifecycle. This work reviews 19 technical methods to accomplish this and evaluates them based on technical, topological, operational, and efficacy properties. We find some novel techniques beyond honeypots and reverse proxies that seem to have received little research interest despite their promise for cyber deception. We believe that overcoming these technical challenges can drive the adoption of more dynamic and personalized cyber deception techniques, tailored to specific classes of applications.
format Preprint
id arxiv_https___arxiv_org_abs_2405_12852
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Application Layer Cyber Deception without Developer Interaction
Kahlhofer, Mario
Rass, Stefan
Cryptography and Security
Distributed, Parallel, and Cluster Computing
Networking and Internet Architecture
Software Engineering
Cyber deception techniques that are tightly intertwined with applications pose significant technical challenges in production systems. Security measures are usually the responsibility of a system operator, but they are typically limited to accessing built software artifacts, not their source code. This limitation makes it particularly challenging to deploy cyber deception techniques at application runtime and without full control over the software development lifecycle. This work reviews 19 technical methods to accomplish this and evaluates them based on technical, topological, operational, and efficacy properties. We find some novel techniques beyond honeypots and reverse proxies that seem to have received little research interest despite their promise for cyber deception. We believe that overcoming these technical challenges can drive the adoption of more dynamic and personalized cyber deception techniques, tailored to specific classes of applications.
title Application Layer Cyber Deception without Developer Interaction
topic Cryptography and Security
Distributed, Parallel, and Cluster Computing
Networking and Internet Architecture
Software Engineering
url https://arxiv.org/abs/2405.12852