Open software—
Material reviewed: Repository documentationServerless application that creates and monitors fake HTTP endpoints for use as URL honeytokens; its documentation describes deployment with AWS Lambda and API Gateway.
ApplicationCloudHoneytokenDecoy
Product—
Material reviewed: Public pageCritical readingInsightIDR capabilities for honeypots, honey users, files and credentials; documentation describes interaction alerts.
NetworkIdentityHoneypotHoneytoken
Product—
Material reviewed: Public pageCritical readingDocumented feature tagging honeytoken accounts and devices; sign-ins generate Defender for Identity alerts.
IdentityHoneytoken
Product—
Material reviewed: Public pageCritical readingCommercial identity protection component deploying endpoint deceptions to alert on lateral movement, according to Proofpoint.
EndpointIdentityDecoyHoneytoken
Case study—
Material reviewed: Public pageCritical readingCloud deception adoption story published by the vendor Tracebit.
CloudHoneytoken
Product—
Material reviewed: Public pageCritical readingCommercial deception portfolio for identity, cloud and networks, according to Acalvio documentation.
IdentityCloudDecoyHoneytoken
Product—
Material reviewed: Public pageCritical readingDecoy-based targeted threat intelligence offering; Acalvio describes managed and appliance delivery.
CloudNetworkDecoyHoneytoken
Product—
Material reviewed: Public pageCritical readingCommercial decoy product for detecting interactions with systems that appear legitimate.
NetworkIdentityHoneypotHoneytoken
Product—
Material reviewed: Public pageCritical readingCommercial deception platform with published cloud case studies.
CloudHoneytokenDecoy
Paper—
Material reviewed: AbstractThe thesis proposes an authentication framework combining multi-factor authentication with honeytoken-based deception techniques. It describes three successive architectures: static honeytokens to improve detection of compromised credentials, the 2FHA mechanism combining one-time passwords (Google Authenticator) with honeytokens, and a final architecture with session-bound honeytokens, blockchain-supported auditing, and smart contracts on Ethereum.
IdentityApplicationHoneytokenDecoy
Product—
Material reviewed: Public pageCritical readingZscaler product distributing decoys and interaction alerts, according to its product page.
NetworkIdentityDecoyHoneytoken