Too Long; Didn't Read
Part 1 introduced 3 Phases of Cyber Deception Campaign. We briefly highlighted 4 considerations related to Industrial networks: (1) Safety, (2) Availability, (3) Realism, & depending on our strategic goals, (4) Secrecy that we should be mindful throughout the planning & execution. The more advanced, more skilled, skilled actors are the more skilled. We need to establish ways to quantify success. Achieving success requires a convincing story together with a well-designed maze that exploits attackers’ mental bias.