Paper

Catch Me if You Can: Effective Honeypot Placement in Dynamic AD Attack Graphs

According to its authors, this paper studies a Stackelberg game between attacker and defender over large, dynamic Active Directory (AD) attack graphs, where the defender deploys honeypots to prevent the attacker from reaching high-value targets. The authors propose a mixed-integer programming (MIP) formulation and a clustering-based approach (dyMIP(m)) to handle large dynamic graph instances, reporting near-optimal results under realistic conditions.

HoneypotIdentityNetwork

What we know

According to its authors, this paper studies a Stackelberg game between attacker and defender over large, dynamic Active Directory (AD) attack graphs, where the defender deploys honeypots to prevent the attacker from reaching high-value targets. The authors propose a mixed-integer programming (MIP) formulation and a clustering-based approach (dyMIP(m)) to handle large dynamic graph instances, reporting near-optimal results under realistic conditions.

Evidence limits

This summary is based solely on the published title and abstract; the full text was not reviewed, and the effectiveness of the proposed algorithms has not been independently verified or replicated.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. Catch Me if You Can: Effective Honeypot Placement in Dynamic AD Attack Graphs
    abstract · 2026-10-04

Reviewed: 2026-10-04. This record may change when new evidence is found.

RIS · BibTeX