Skip to content

Deception Technology

Honeypots and decoys detecting and analyzing attacker behavior

Fig. 205 · Decoy duck

The field

At a glance

Definition

Honeypots and decoys detecting and analyzing attacker behavior

Technologies

Honeypots simulate vulnerable systems to attract attackers. Honey tokens (fake credentials, documents) detect unauthorized access. Dynamic deception environments adapt to the real network to maintain realism. Breadcrumbs planted across endpoints lure attackers toward decoys. High-fidelity alerts correlate decoy interactions with attack patterns.

Applications

Honey tokens detect when stolen credentials are used. Decoy file servers detect ransomware attempting to encrypt network shares. Fake internal applications detect lateral movement. Breadcrumbs in Active Directory lure attackers toward monitoring traps.

Market and funding

The deception technology market is a niche within cybersecurity, growing as organizations seek high-fidelity detection methods with zero false positives.

Is this page right?How the research works

Something's off