Paper

Incorporating Deception into CyberBattleSim for Autonomous Defense

This paper describes the incorporation of deceptive elements, including honeypots and decoys, into Microsoft's CyberBattleSim experimentation platform. According to the authors, they tested the defensive capabilities of these elements against reinforcement-learning-based attackers in a capture-the-flag environment, finding that attacker progress depended on the number and location of deceptive elements.

HoneypotDecoyNetwork

What we know

This paper describes the incorporation of deceptive elements, including honeypots and decoys, into Microsoft's CyberBattleSim experimentation platform. According to the authors, they tested the defensive capabilities of these elements against reinforcement-learning-based attackers in a capture-the-flag environment, finding that attacker progress depended on the number and location of deceptive elements.

Evidence limits

This entry is based solely on the available title and abstract; the full text has not been reviewed and reported effectiveness has not been independently validated.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. Incorporating Deception into CyberBattleSim for Autonomous Defense
    abstract · 2026-10-04

Reviewed: 2026-10-04. This record may change when new evidence is found.

RIS · BibTeX