On Defencing Deceive Attack from Network

Wei Xi

2008-01-01

Abstract:Information is more and more important for people's life in the information age.So is the security of information.This article introduces some principles and approaches of deceive attack and how to guard such tricks.

What problem does this paper attempt to address?

Hiding and Trapping: A Deceptive Approach for Defending against Network Reconnaissance with Software-Defined Network

Junchi Xing,Mingliang Yang,Haifeng Zhou,Chunming Wu,Wei Ruan

DOI: https://doi.org/10.1109/IPCCC47392.2019.8958776

2019-01-01

Abstract:Network reconnaissance aims at gathering as much information as possible before an attack is launched. Meanwhile, static host address configuration facilitates network reconnaissance. Currently, more sophisticated network reconnaissance has been emerged with the adaptive and cooperative features. To address this, in this paper, we present Hiding and Trapping (HaT), which is a deceptive approach to disrupt adversarial network reconnaissance with the help of the software-defined networking (SDN) paradigm. HaT is able to hide valuable hosts from attackers and to trap them into decoy nodes through strategic and holistic host address mutation according to characteristic of adversaries. We implement a prototype of HaT, and evaluate its performance by experiments. The experimental results show that HaT is capable to effectively disrupt adversarial network reconnaissance with better deceptive performance than the existing address randomization approach.
How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

Daojing He,Sammy Chan,Yan Zhang,Chunming Wu,Bing Wang

DOI: https://doi.org/10.1109/mis.2013.105

IF: 6.744

2014-01-01

IEEE Intelligent Systems

Abstract:Attack-defense models play an important role in the design of cybersecurity systems. Here, the authors review some traditional and prevailing attack-defense models along with their weaknesses. Then, they survey some recently proposed paradigm shifts to these models based on which more effective security strategies can be designed. Further, they provide some suggestions on how to adopt the new models, and present challenges that need to be addressed in this field.
Computer Network Attack and Defense Technology

S. Zhou,Guanghui Ren,Yaling Liu,Xinyu Yang

2018-02-07

Abstract:In recent years, the Internet as a symbol of the computer network protocols, standards and application technology development is extremely rapid. But the Internet is like a sharp double-edged sword, it is for the convenience of people at the same time, but also for computer viruses and computer crime to provide the soil, for systems, network protocols and databases, whether it is its own design flaws, or due to human factors caused by a variety of security vulnerabilities, may be some of the other attempts to use hackers and attack, so the establishment of an effective network security system is even more urgent. To ensure network security, reliable, you must be familiar with the general process of hacker network attacks. The only way to do before the hacker attack the necessary precautions is to ensure that the network is safe and reliable operation. This article comprehensively analyzes the steps, methods and common attack tools of network attack, and tells the concrete precautionary measures from several aspects, so that readers have a comprehensive network of knowledge, in the treatment of network threats are well prepared.

Computer Science,Engineering
Research on Active Network Defence Technology Based on Deception

WU Xin,HUANG Hao

DOI: https://doi.org/10.3969/j.issn.1001-3695.2006.11.031

2006-01-01

Abstract:Honeypots take several deception technology to protect network.This paper will explain actively the deception technology,including it's definition,purpose,category and development.It analyzes the principles of most kinds of deception technology,including banner simulation,random server,redirection,cage and virtual command.It discusses how to choose proper deception technology to deploy deception policy baesd on different deception purposes.
Security of networked control systems subject to deception attacks: a survey

Zhong-Hua Pang,Lan-Zhi Fan,Haibin Guo,Yuntao Shi,Runqi Chai,Jian Sun,Guo-Ping Liu

DOI: https://doi.org/10.1080/00207721.2022.2143735

2022-11-14

Abstract:A networked control system (NCS), which integrates various physical components by utilising communication networks, is a complex intelligent control system with high flexibility and reliability. It has been widely applied in various areas, such as power grids, intelligent transportation, and smart manufacturing. However, compared with traditional control systems, NCSs expose more extra vulnerabilities with the openness of communication networks, leading to long-term concerns for the security of NCSs against cyber attacks. This paper gives a survey in detail on recent developments on the security of NCSs subject to deception attacks from the two domains of information technology (IT) and system control, respectively. First, several security incidents reported in recent years are reviewed and a couple of prevailing cyber attacks are analysed. Besides, the results on IT security with respect to the protection-detection-reaction model are summarised. Then, from the domain of system control, the security issues on attack design, attack detection, secure state estimation and resilient control are surveyed in depth. Furthermore, several novel security topics from the combination of IT and system control are also discussed. Finally, several future research directions are presented on this topic.
Strategies for Counteracting Social Engineering Attacks

Rubia Fatima,Affan Yasin,Lin Liu,Wang Jianmin

DOI: https://doi.org/10.12968/s1361-3723(22)70583-0

2022-01-01

Abstract:As the result of a five-year project investigating social engineering attacks, researchers at Tsinghua University, China have identified a number of strategies that organisations can use to protect themselves. However, they warn that there is no single strategy that works for all forms of attack. And when choosing the right methods it's essential to consider the context, the environment and the available facilities.
Know Yourself As Well As the Enemy and You Can Fight a Hundred Battles with No Danger of Defeat--A Study of Network Sniffing Technology and Its Precautionary Measures

巫喜红

DOI: https://doi.org/10.3969/j.issn.1006-7302.2004.01.014

2004-01-01

Abstract:Network sniffing has been a sensitive topic. It can bring not only convenience but also harm. This paper discusses the principle of network sniffering and expounds its detecting methods and precautionary measures.
Detection of Deception Attacks on the Backward Channel of Networked Control Systems

Pang Zhonghua,Liu Guoping,Zhou Donghua

2012-01-01

Abstract:This paper addresses the security issues of data transmitted in the backward channel of networked control systems (NCSs) under deception attacks, especially confidentiality and integrity. As a kind of typical active attacks, deception attacks can severely degrade the system performance or even destabilize the system. To detect the deception attacks on the backward channel of NCSs, a detection scheme is presented in this paper, which mainly integrates the Data Encryption Standard (DES) algorithm and strong tracking filter (STF). A numerical example is employed to illustrate the effectiveness of the proposed method.
On Hacker and Network Security

Yunteng Huang

2001-01-01

Abstract:With the development of computer technology,computer network become more complex,more and more peoples are involved in computer crimes. Hacker's attack on computer network is a new computer crime. I analyse here hacker's motives,their behaviors and technical methods in committing crimes. I bring forward here relevant countermeasures against hackers to secure the computer network.
Deception Maze: A Stackelberg Game-Theoretic Defense Mechanism for Intranet Threats

Jieling Liu,Zhiliang Wang,Jiahai Yang,Bo Wang,Lin He,Guanglei Song,Xinran Liu

DOI: https://doi.org/10.1109/ICC42927.2021.9500765

2021-01-01

Abstract:The intranets in modern organizations are facing severe data breaches and critical resource misuses. By reusing user credentials from compromised systems, Advanced Persistent Threat (APT) attackers can move laterally within the internal network. A promising new approach called deception technology makes the network administrator (i.e., defender) able to deploy decoys to deceive the attacker in the intranet and trap him into a honeypot. Then the defender ought to reasonably allocate decoys to potentially insecure hosts. Unfortunately, existing APT-related defense resource allocation models are infeasible because of the neglect of many realistic factors. In this paper, we make the decoy deployment strategy feasible by proposing a game-theoretic model called the APT Deception Game to describe interactions between the defender and the attacker. More specifically, we decompose the decoy deployment problem into two subproblems and make the problem solvable. Considering the best response of the attacker who is aware of the defender's deployment strategy, we provide an elitist reservation genetic algorithm to solve this game. Simulation results demonstrate the effectiveness of our deployment strategy compared with other heuristic strategies.
A Defence Scheme Against Identity Theft Attack Based on Multiple Social Networks

Bing-Zhe He,Chien-Ming Chen,Yi-Ping Su,Hung-Min Sun

DOI: https://doi.org/10.1016/j.eswa.2013.09.032

IF: 8.5

2013-01-01

Expert Systems with Applications

Abstract:Recently, on-line social networking sites become more and more popular. People like to share their personal information such as their name, birthday and photos on these public sites. However, personal information could be misused by attackers. One kind of attacks called Identity Theft Attack is addressed in on-line social networking sites. After collecting the personal information of a victim, the attacker can create a fake identity to impersonate this victim and cheat the victim's friends in order to destroy the trust relationships on the on-line social networking sites. In this paper, we propose a scheme to protect users from Identity Theft Attacks. In our work, users' personal information can be still kept public. It means that this scheme does not violate the nature of the social networks. Compared with previous works, the proposed scheme incurs less overhead for users. Experimental results also demonstrate the practicality of the proposed scheme.
Three Decades of Deception Techniques in Active Cyber Defense -- Retrospect and Outlook

Li Zhang,Vrizlynn L. L. Thing

DOI: https://doi.org/10.1016/j.cose.2021.102288

2021-04-08

Abstract:Deception techniques have been widely seen as a game changer in cyber defense. In this paper, we review representative techniques in honeypots, honeytokens, and moving target defense, spanning from the late 1980s to the year 2021. Techniques from these three domains complement with each other and may be leveraged to build a holistic deception based defense. However, to the best of our knowledge, there has not been a work that provides a systematic retrospect of these three domains all together and investigates their integrated usage for orchestrated deceptions. Our paper aims to fill this gap. By utilizing a tailored cyber kill chain model which can reflect the current threat landscape and a four-layer deception stack, a two-dimensional taxonomy is developed, based on which the deception techniques are classified. The taxonomy literally answers which phases of a cyber attack campaign the techniques can disrupt and which layers of the deception stack they belong to. Cyber defenders may use the taxonomy as a reference to design an organized and comprehensive deception plan, or to prioritize deception efforts for a budget conscious solution. We also discuss two important points for achieving active and resilient cyber defense, namely deception in depth and deception lifecycle, where several notable proposals are illustrated. Finally, some outlooks on future research directions are presented, including dynamic integration of different deception techniques, quantified deception effects and deception operation cost, hardware-supported deception techniques, as well as techniques developed based on better understanding of the human element.

Cryptography and Security
Evolving Defense Mechanism for Future Network Security

Haifeng Zhou,Chunming Wu,Ming Jiang,Boyang Zhou,Wen Gao,Tingting Pan,Min Huang

DOI: https://doi.org/10.1109/mcom.2015.7081074

IF: 9.03

2015-01-01

IEEE Communications Magazine

Abstract:The past few years have witnessed revolutionary advances in network technology. Along with new techniques such as SDN come lots of new network security challenges. Conventional network security mechanisms are incompetent to overcome these challenges, since they are built on a static network configuration that facilitates attackers in finding the weaknesses of a network. In this article, we conceive a novel conceptual network security mechanism, the evolving defense mechanism (EDM), to resolve current and future security problems. EDM is based on a bio-inspired idea of network configuration variations. According to the security requirements of the system, the user, and the network security state, EDM selects an efficient network configuration variation strategy to prevent corresponding security threats. Combined with SDN implementation, EDM resolves security problems from a new angle and is capable of evolving with new network security technology. We sketch a way to implement EDM and present its reference framework, which serves as an ecosystem and coexisting environment for various kinds of network configuration variations. The proposed mechanism avoids the deficiency of conventional mechanisms and has potential to cope with emerging security threats.
Intelligent deception techniques against adversarial attack on the industrial system

Suchi Kumari,Riteshkumar Jayprakash Yadav,Suyel Namasudra,Ching‐Hsien Hsu

DOI: https://doi.org/10.1002/int.22384

IF: 8.993

2021-02-25

International Journal of Intelligent Systems

Abstract:<p>Community detection algorithms (CDAs) are aiming to group nodes based on their connections and play an essential role in the complex system analysis. However, for privacy reasons, we may want to prevent communities or a group of nodes in the complex industrial network from being discovered in some instances, leading to the topics on community deception. In this paper, we introduce and formalize two intelligent community deception methods to conceal the nodes from various CDAs. We used node‐based matrices, persistence and safeness scores, to formalize the optimization problems to confound the CDAs. The persistence score is used to destabilize the constant communities in the network while the safeness score is used to assess the level of hiding of a node from CDAs. The objective functions aim to minimize the persistence score and maximize the safeness score of the nodes in the network. From the simulation results, it can be analyzed that the proposed strategies are intelligently concealing the community information in the complex industrial system.</p>

computer science, artificial intelligence
A Game-theoretic Taxonomy and Survey of Defensive Deception for Cybersecurity and Privacy

Jeffrey Pawlick,Edward Colbert,Quanyan Zhu

DOI: https://doi.org/10.1145/3337772

IF: 16.6

2020-07-31

ACM Computing Surveys

Abstract:Cyberattacks on both databases and critical infrastructure have threatened public and private sectors. Ubiquitous tracking and wearable computing have infringed upon privacy. Advocates and engineers have recently proposed using defensive deception as a means to leverage the information asymmetry typically enjoyed by attackers as a tool for defenders. The term deception, however, has been employed broadly and with a variety of meanings. In this article, we survey 24 articles from 2008 to 2018 that use game theory to model defensive deception for cybersecurity and privacy. Then, we propose a taxonomy that defines six types of deception: perturbation, moving target defense, obfuscation, mixing, honey-x, and attacker engagement. These types are delineated by their information structures, agents, actions, and duration: precisely concepts captured by game theory. Our aims are to rigorously define types of defensive deception, to capture a snapshot of the state of the literature, to provide a menu of models that can be used for applied research, and to identify promising areas for future work. Our taxonomy provides a systematic foundation for understanding different types of defensive deception commonly encountered in cybersecurity and privacy.

computer science, theory & methods
Weaving Tangled Webs: Offense, Defense, and Deception in Cyberspace

Erik Gartzke,Jon R. Lindsay

DOI: https://doi.org/10.1080/09636412.2015.1038188

2015-04-03

Security Studies

Abstract:It is widely believed that cyberspace is offense dominant because of technical characteristics that undermine deterrence and defense. This argument mistakes the ease of deception on the Internet for a categorical ease of attack. As intelligence agencies have long known, deception is a double-edged sword. Covert attackers must exercise restraint against complex targets in order to avoid compromises resulting in mission failure or retaliation. More importantly, defenders can also employ deceptive concealment and ruses to confuse or ensnare aggressors. Indeed, deception can reinvigorate traditional strategies of deterrence and defense against cyber threats, as computer security practitioners have already discovered. The strategy of deception has other important implications: as deterrence became foundational in the nuclear era, deception should rise in prominence in a world that increasingly depends on technology to mediate interaction.

international relations
Game-Theoretic and Machine Learning-based Approaches for Defensive Deception: A Survey

Mu Zhu,Ahmed H. Anwar,Zelin Wan,Jin-Hee Cho,Charles Kamhoua,Munindar P. Singh

DOI: https://doi.org/10.48550/arXiv.2101.10121

2021-05-09

Abstract:Defensive deception is a promising approach for cyber defense. Via defensive deception, the defender can anticipate attacker actions; it can mislead or lure attacker, or hide real resources. Although defensive deception is increasingly popular in the research community, there has not been a systematic investigation of its key components, the underlying principles, and its tradeoffs in various problem settings. This survey paper focuses on defensive deception research centered on game theory and machine learning, since these are prominent families of artificial intelligence approaches that are widely employed in defensive deception. This paper brings forth insights, lessons, and limitations from prior work. It closes with an outline of some research directions to tackle major gaps in current defensive deception research.

Cryptography and Security,Computer Science and Game Theory,Machine Learning
Counteracting Social Engineering Attacks

Affan Yasin,Rubia Fatima,Lin Liu,Jianmin Wanga

DOI: https://doi.org/10.1016/s1361-3723(21)00108-1

2021-01-01

Computer Fraud & Security

Abstract:Social engineers are very successful at exploiting human weaknesses, gathering information, communicating with people and creating creative storylines attacking people's psychological needs and weaknesses. And that is why people, who are among the weakest links in the information security chain, remain susceptible to social engineering attacks.
SEAtech: Deception Techniques in Social Engineering Attacks: An Analysis of Emerging Trends and Countermeasures

Devendra Chapagain,Naresh Kshetri,Bindu Aryal,Bhawani Dhakal

2024-08-05

Abstract:Social Engineering is the act of manipulating individuals to perform actions or reveal information. Social engineering tactics are widely recognized as a significant risk to information security. The increasing digital environment has increased the prevalence of social engineering attacks, bringing huge threats to both people and organizations. This paper explores current deception techniques used during social engineering attacks to understand emerging trends and discuss effective countermeasures. It is always a good idea to have knowledge of counter measures and risks from these increasing cyber threats. We have also explored the types of deception attacks and role of social engineering in Advanced Persistent Threats. Today major concern for cybersecurity and other web related attacks is due to social engineering attacks that is also the driving force of increasing cybercrimes worldwide. By uncovering emerging trends and analyzing the psychological underpinnings of these attacks this paper highlights the known deception techniques, emerging trends and counter measures of social engineering attacks.

Social and Information Networks
Poisoning attacks and countermeasures in intelligent networks: Status quo and prospects

Chen Wang,Jian Chen,Yang Yang,Xiaoqiang Ma,Jiangchuan Liu

DOI: https://doi.org/10.1016/j.dcan.2021.07.009

IF: 6.348

2022-04-01

Digital Communications and Networks

Abstract:Over the past years, the emergence of intelligent networks empowered by machine learning techniques has brought great facilitates to different aspects of human life. However, using machine learning in intelligent networks also presents potential security and privacy threats. A common practice is the so-called poisoning attacks where malicious users inject fake training data with the aim of corrupting the learned model. In this survey, we comprehensively review existing poisoning attacks as well as the countermeasures in intelligent networks for the first time. We emphasize and compare the principles of the formal poisoning attacks employed in different categories of learning algorithms, and analyze the strengths and limitations of corresponding defense methods in a compact form. We also highlight some remaining challenges and future directions in the attack-defense confrontation to promote further research in this emerging yet promising area.

telecommunications

On Defencing Deceive Attack from Network

Hiding and Trapping: A Deceptive Approach for Defending against Network Reconnaissance with Software-Defined Network

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

Computer Network Attack and Defense Technology

Research on Active Network Defence Technology Based on Deception

Security of networked control systems subject to deception attacks: a survey

Strategies for Counteracting Social Engineering Attacks

Know Yourself As Well As the Enemy and You Can Fight a Hundred Battles with No Danger of Defeat--A Study of Network Sniffing Technology and Its Precautionary Measures

Detection of Deception Attacks on the Backward Channel of Networked Control Systems

On Hacker and Network Security

Deception Maze: A Stackelberg Game-Theoretic Defense Mechanism for Intranet Threats

A Defence Scheme Against Identity Theft Attack Based on Multiple Social Networks

Three Decades of Deception Techniques in Active Cyber Defense -- Retrospect and Outlook

Evolving Defense Mechanism for Future Network Security

Intelligent deception techniques against adversarial attack on the industrial system

A Game-theoretic Taxonomy and Survey of Defensive Deception for Cybersecurity and Privacy

Weaving Tangled Webs: Offense, Defense, and Deception in Cyberspace

Game-Theoretic and Machine Learning-based Approaches for Defensive Deception: A Survey

Counteracting Social Engineering Attacks

SEAtech: Deception Techniques in Social Engineering Attacks: An Analysis of Emerging Trends and Countermeasures

Poisoning attacks and countermeasures in intelligent networks: Status quo and prospects