Case study2026
Review: Public pageCritical readingProofpoint observed post-compromise activity for over a month in a Deception.Pro decoy environment; adversary behavior research, not a commercial effectiveness trial.
EndpointNetworkDecoyAdversary engagement
Paper2026
Review: Full textEditor contributionPacheco and Staino present BUDA as an approach to simulating fictitious-user activity and strengthening decoy credibility, aligned with MITRE Engage.
EndpointNetworkDecoyAdversary engagement
Case study2026
Review: Public pageCritical readingIBM X-Force and Deception.Pro recorded two incidents in simulated organizations, observing reconnaissance, malware deployment and fake-document exfiltration.
EndpointOT/ICSDecoyAdversary engagement
Open software2025
Review: RepositoryEditor contributionExperimental framework generating fictitious user profiles and activity for decoy environments; the repository documents narratives, profiles and language-model integration.
EndpointNetworkDecoyAdversary engagement
Paper2021
Review: Full textHistorical review of honeypots, honeytokens and moving target defense from the late 1980s through 2021.
NetworkEndpointHoneypotHoneytoken
Paper2020
Review: Full textCritical readingSurvey of defensive deception models and techniques in networks, hosts and cryptographic mechanisms.
NetworkEndpointDecoy
Paper2018
Review: MetadataBibliographic record on ransomware tracing through deception. The abstract and findings still require review.
EndpointDecoy
Open software2015
Review: RepositoryRepository about capture of USB-propagated malware; documentation and maintenance require further review.
EndpointHoneypot
Product—
Review: Public pageCritical readingPersistent instrumented environments for malware detonation and adversary observation, according to the platform description.
NetworkEndpointDecoyAdversary engagement
Case study—
Review: Public pageCritical readingEnergy company Shadow adoption story published by Proofpoint; investigation-time reduction is a customer statement reported by the vendor.
EndpointIdentityDecoy
Product—
Review: Public pageCritical readingCommercial identity protection component deploying endpoint deceptions to alert on lateral movement, according to Proofpoint.
EndpointIdentityDecoyHoneytoken