Cyber Denial, Deception and Counter Deception: A Framework for Supporting Active Cyber Defense

This book presents the first reference exposition of the Cyber-Deception Chain: a flexible planning and execution framework for creating tactical, operational, or strategic deceptions. This methodology bridges the gap between the current uncoordinated patchwork of tactical denial and deception (D&D) techniques and their orchestration in service of an organization’s mission. Concepts for cyber- D&D planning operations and management are detailed within the larger organizational, business, and cyber defense context. It examines the necessity of a comprehensive, active cyber denial scheme.

The authors explain the organizational implications of integrating D&D with a legacy cyber strategy, and discuss trade-offs, maturity models, and lifecycle management. Chapters present the primary challenges in using deception as part of a security strategy, and guides users through the steps to overcome common obstacles. Both revealing and concealing fact and fiction have a critical role in securing private information. Detailed case studies are included.

Cyber Denial, Deception and Counter Deception is designed as a reference for professionals, researchers and government employees working in cybersecurity. Advanced-level students in computer science focused on security will also find this book useful as a reference or secondary text book.

Table of Contents

Chapter 1: Introduction
Chapter 2: Bridging the Classical D&D and Cyber Security Domains
Chapter 3: Intrusions, Deception, and Campaigns
Chapter 4: Cyber-D&D Case Studies
Chapter 5: Exercising Cyber-D&D
Chapter 6: Considerations, Adaptation, and Sharing
Chapter 7: Countering Denial and Deception
Chapter 8: Capability Maturity Model
Chapter 9: Cyber-D&D Lifecycle Management
Chapter 10: Looking to the Future
Appendix A: Cyber-D&D Taxonomy
Appendix B: False Virtual Persona Checklists
Appendix C: Deception Maxims Applied to Defensive Cyber-D&D
Appendix D: Strategic Denial & Deception Capabilities
Appendix E: Definitions