The Devil Does Not Exist - The Role of Deception in Cyber
summary
Presents a practical taxonomy—eye-to-eye, con, hypercon—that maps attacker and defender perceptions and shows how deception flips risk into opportunity. Describes concrete methods: passive/implied monitoring, honeypots, data pollution of the attacker decision loop (used against theft in transactions worth hundreds of millions of dollars), egress deception and a feigned incident response that forces attackers to reveal IOCs. Grounded in game theory and consultations with Jose Rodriguez (CIA clandestine services).
AI-written summary · about
chapters (8)
- 0:00Start
- 1:42The Cultural Bias Associated with Deception
- 19:28Feigned Retreat
- 20:30World War Two Enigma
- 28:14Example Questions
- 29:48What if My Perception Is Wrong
- 36:02And One That I Think Was a Classic Was a Company That Thought that They Had Suffered a Compromise but Had no Ioc S on the Network Whatsoever and They'Re Kind Of Baffled as to What To Do and What They Decided To Do Is Actually Initiate like a Feigned Incident Response so They Went into Incident Response Mode and Started Talking on the Email and Going into High Alert That Kicked the Attacker into Emergency Mode and They Started To Exfiltrate Large Quantities of Data It Started To Wake Up Machines That Were Compromised and that Actually Gave Them the Ioc S To Go and Kind Of Hunt the Folks on the Network
- 37:16You See some Entities That Really Don't Care on the Deception Side and Then You See Others That Go through You Know Fairly Sophisticated Measures To Try and Do You Know Attack Her Obfuscation and Things of that Sort So One of those I Think One of the Things That Is Interesting to Me Is in World War Two Just because We Were a Good Deceiver Didn't Mean that You Couldn't Be Deceived It's Almost a Law of Deception and They'Re One Thing When You Think about the Hyper Con I Think It Adds an Element of Risk Where Maybe You Don't Think Risk Exists because the Con if You'Re GonNa Pull Off a Con You May Be Overconfident
related talks
46mApplied Deception Beyond the Honeypot: Moving Past 101
50mStop Being Sitting Cyber Ducks! Adversary Engagement: the New Cyber-Defense
15mWolves amongst Sheep--Defeating Targeted Attacks with Deception
29mThe Art of Deception
45mCyber-Counterintelligence—Deception, Distortion, Dishonesty
46mDeception Is on the Rise, But Is It Time to Unleash Engagement Operations?
45mSlaying Dragons Together...
45mWinning by deception: tactics, techniques, and procedures of adversarial A.I.