CyberBlackhole - advanced deception framework

Abstract

In recent times, cyber attackers have progressively become stealthier and persistent, and have come to be known as Advanced Persistent Threats (APTs). These attackers are usually state sponsored with a defined objective of gathering information and/or exploiting the target without getting detected for an extended period of time. It is extremely difficult to detect these kind of attackers because of their slow and stealthy mode of operation. One of the ways to mitigate these threat agents is deception. Deceiving the adversary into believing that the system they are targeting is real and contains valuable information. Honeypots come into the picture in helping us achieve this goal. In this project, we try to lay the groundwork for creating deception as a service. A complete service which detects, analyses, deceives and monitors the APTs trying to penetrate the network.