{"id":6593,"date":"2019-06-27T02:47:01","date_gmt":"2019-06-27T09:47:01","guid":{"rendered":"https:\/\/www.acalvio.com\/?p=6593"},"modified":"2019-06-27T02:47:01","modified_gmt":"2019-06-27T09:47:01","slug":"amazon-firestick-is-to-vcr-as-deception-is-to","status":"publish","type":"post","link":"https:\/\/acalvio.p2staging.us\/index.php\/2019\/06\/27\/amazon-firestick-is-to-vcr-as-deception-is-to\/","title":{"rendered":"“Amazon Firestickb\u0000\u001d is to b\u0000\u001cVCRb\u0000\u001d, as b\u0000\u001cDeceptionb\u0000\u001d is to _________"},"content":{"rendered":"

Complete the Analogy: <\/p>\n

b\u0000\u001cAmazon Firestickb\u0000\u001d is to b\u0000\u001cVCRb\u0000\u001d, as b\u0000\u001cDeceptionb\u0000\u001d is to _________.<\/h3>\n

<\/p>\n

Correct Answer: b\u0000\u001cHoneypotb\u0000\u001d<\/h4>\n

<\/p>\n

Remember your SAT or ACT exams with the analogy questions?<\/i><\/p>\n

If so you probably got this one right. For those of us old enough to remember, Video Cassette Recorders were used to record TV programs. At least on a good day that is, because a lot of things had to come together: You had to have the program schedule and channel right, make sure the tape was in the correct place and the record tab present, check the cables, and worst of all, set the recording parameters correctly. Compare that with a Firestick, to which you can just say b\u0000\u001cPlay Game of Thrones!b\u0000\u001d and youb\u0000\u0019re in business. Roughly the same goal, but a whole lot easier and more reliable.<\/p>\n

Modern Deception solutions are analogous to the Firestick as compared to the VCR<\/h4>\n

When compared with honeypots, modern Deception solutions are analogous to the Firestick as compared to the VCR. They both can detect adversaries, retard their attack, and provide intelligence on the attackerb\u0000\u0019s techniques and motives. But trying to operationalize honeypots at scale is extremely difficult, and even if you can pull it off, itb\u0000\u0019ll cost you a fortune in staff time b\u0000\u0013 time that could be much better used. <\/p>\n

Deception solutions on the other hand take care of the hard work:<\/h4>\n
    \n
  • Creation and distribution of assets (decoys, breadcrumbs, lures)
    \n<\/li>\n
  • Ongoing matching of asset profiles with production environment<\/li>\n
  • Collection and presentation of telemetry and indicators of compromise<\/li>\n
  • Cost effective Deployment at scale<\/li>\n<\/ul>\n

    Advanced Deception solutions are dynamic<\/h4>\n

    Crucially, advanced Deception solutions are dynamic. That is, they continuously modify the attributes of the deception assets based on changes observed in the production environment, so that they stay credible in the eyes of an adversary. Trying to do that by hand is virtually impossible, and itb\u0000\u0019s crucial because these days IT environments are always changing.<\/p>\n

    Implementing a proper Deception offering frees up staff to work on what they should be working on: evaluating high-fidelity events, incident response, threat hunting, policy, and so on. So the next time youb\u0000\u0019re asked to explain the difference between Deception and honeypots, just ask them if they remember taking their SATs, and it should be an easy conversation!<\/p>\n","protected":false},"excerpt":{"rendered":"

    Complete the Analogy: b\u001cAmazon Firestickb\u001d is to b\u001cVCRb\u001d, as b\u001cDeceptionb\u001d is to _________. Correct Answer: b\u001cHoneypotb\u001d Remember your SAT or ACT exams with the analogy questions? If so you probably got this one right. For those of us old enough to remember, Video Cassette Recorders were used to record TV programs. At least on a […]<\/p>\n","protected":false},"author":2,"featured_media":6619,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[3],"tags":[87,88,96,109,124,144],"_links":{"self":[{"href":"https:\/\/acalvio.p2staging.us\/index.php\/wp-json\/wp\/v2\/posts\/6593"}],"collection":[{"href":"https:\/\/acalvio.p2staging.us\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/acalvio.p2staging.us\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/acalvio.p2staging.us\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/acalvio.p2staging.us\/index.php\/wp-json\/wp\/v2\/comments?post=6593"}],"version-history":[{"count":0,"href":"https:\/\/acalvio.p2staging.us\/index.php\/wp-json\/wp\/v2\/posts\/6593\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/acalvio.p2staging.us\/index.php\/wp-json\/wp\/v2\/media\/6619"}],"wp:attachment":[{"href":"https:\/\/acalvio.p2staging.us\/index.php\/wp-json\/wp\/v2\/media?parent=6593"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/acalvio.p2staging.us\/index.php\/wp-json\/wp\/v2\/categories?post=6593"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/acalvio.p2staging.us\/index.php\/wp-json\/wp\/v2\/tags?post=6593"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}