Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.
Awesome Lists | Featured Topics | Projects
https://github.com/tolgadevsec/Awesome-Deception

An awesome list of resources on deception-based security with honeypots and honeytokens
https://github.com/tolgadevsec/Awesome-Deception
List: Awesome-Deception
awesome awesome-list cyber-deception honeypot honeytoken security
Last synced: 16 days ago
JSON representation
An awesome list of resources on deception-based security with honeypots and honeytokens
Host: GitHub
URL: https://github.com/tolgadevsec/Awesome-Deception
Owner: tolgadevsec
Created: 2018-12-03T15:08:39.000Z (about 6 years ago)
Default Branch: master
Last Pushed: 2023-09-10T22:36:16.000Z (over 1 year ago)
Last Synced: 2024-05-20T20:21:43.426Z (7 months ago)
Topics: awesome, awesome-list, cyber-deception, honeypot, honeytoken, security
Homepage:
Size: 508 KB
Stars: 144
Watchers: 10
Forks: 25
Open Issues: 0
Metadata Files:
- Readme: README.md
Awesome Lists containing this project

ultimate-awesome - Awesome-Deception - An awesome list of resources on deception-based security with honeypots and honeytokens. (Other Lists / Monkey C Lists)
README

        # Awesome Deception [![Awesome Deception](https://cdn.rawgit.com/sindresorhus/awesome/d7305f38d29fed78fa85652e3a63e154dd8e8829/media/badge.svg)](https://github.com/sindresorhus/awesome)

An awesome list of resources on deception-based security with honeypots and honeytokens.

> Note: This list will not be further maintained but it will stay available in this repository. Currently, I'm developing plans for a similar but more developer-centered resource with application intrusion detection and response as an overarching theme -> Suggestions and ideas are more than welcome. In the meantime, feel free to send along or suggest suitable deception content you would like to see in this list via pull requests. 

# Contents

- [Articles](#articles)

- [Books](#books)

- [Communities](#communities)

- [Frameworks](#frameworks)

- [Guides](#guides)

- [Related Lists](#related-lists)

- [Research](#research)

- [Podcasts](#podcasts)

- [Presentations](#presentations)

- [Videos](#videos)

# Articles

- [Valve used secret memory access “honeypot” to detect 40K Dota 2 cheaters](https://arstechnica.com/gaming/2023/02/valve-used-secret-memory-access-honeypot-to-detect-40k-dota-2-cheaters/)

- [Creating REST API Canary endpoints](https://blog.thinkst.com/2022/07/creating-rest-api-canary-endpoints.html)

- [Imposing a Cyber Penalty Against Attackers with Cyber Deception](https://www.usenix.org/publications/loginonline/imposing-cyber-penalty-against-attackers-cyber-deception)

- [Defeating Ransomware by Using Sysmon and PowerShell](https://posts.bluraven.io/defeating-ransomware-by-using-sysmon-and-powershell-b671920f3bb1)

- [Canaries as Network Motion Sensors](https://blog.thinkst.com/2022/08/canaries-as-network-motion-sensors.html)

- [NGINX honeypot — the easiest and fastest way to block bots!](https://medium.com/@getpagespeed/nginx-honeypot-the-easiest-and-fastest-way-to-block-bots-7c28166eb349)

- [Monitor a Honeypot with Azure App Insights](https://rsquaredpolicy.medium.com/monitor-a-honeypot-with-azure-app-insights-28a0f0f3508f)

- [Dripping a Little Honey in your Environment](https://marcusedmondson.com/2022/02/21/dripping-a-little-honey-in-your-environment/)

- [Trapdoor - The serverless HTTP honeypot](https://blog.3coresec.com/2021/03/trapdoor-serverless-http-honeypot.html)

- [yesman--Scanner Honeypot with scapy](https://samsclass.info/124/proj11/p17-123-yesman.html)

- [Deploy and monitor Azure Key Vault honeytokens with Azure Sentinel (Public preview)](https://docs.microsoft.com/en-us/azure/sentinel/monitor-key-vault-honeytokens)

- [Honeypot Journals: Credential Attacks and Lessons from Recent Honeynet Incursions](https://cujo.com/honeypot-journals-credential-attacks/)

- [Honeypot Journals Part II: Attacks on Residential Endpoints](https://cujo.com/honeypot-journals-part-ii-attacks-on-residential-endpoints/)

- [Deception Engineering: exploring the use of Windows Service Canaries against ransomware](https://research.nccgroup.com/2021/03/04/deception-engineering-exploring-the-use-of-windows-service-canaries-against-ransomware/)

- [Ensnare Attack Detection Tool Hopes to Frustrate Hackers, Too](https://threatpost.com/ensnare-attack-detection-tool-hopes-to-frustrate-hackers-too/105379/)

- [Honeypots: Good servers in dark alleys can be an enterprise asset](https://techmonitor.ai/cybersecurity/honeypots-jason-schorr)

- [Extending a Thinkst Canary to become an interactive honeypot](https://research.nccgroup.com/2020/09/14/extending-a-thinkst-canary-to-become-an-interactive-honeypot/)

- [HoneyPoC: The fallout data after I trolled the Internet...](https://blog.zsec.uk/cve-2020-1350-honeypoc/)

- [Experiments in Extending Thinkst Canary – Part 1](https://research.nccgroup.com/2020/07/04/experiments-in-extending-thinkst-canary-part-1/)

- [Using Canaries for Input Detection and Response](https://websec.io/2018/02/28/Canary-Input-Detect-Response.html)

- [Explain Like I’m Five: Poison Records (Honeypots for Database Tables)](https://medium.com/hackernoon/poison-records-acra-eli5-d78250ef94f)

- [Not so IDLE hands: FBI program offers companies data protection via deception](https://arstechnica.com/information-technology/2019/12/not-so-idle-hands-fbi-program-offers-companies-data-protection-via-deception/)

- [The SunDEW project: learning to pose scalability barriers to attackers](https://medium.com/sap-security-research/the-sundew-project-learning-to-pose-scalability-barriers-to-attackers-9d87a8e3a05a)

- [Honeysploit: Exploiting the Exploiters](https://medium.com/@curtbraz/exploiting-the-exploiters-46fd0d620fd8)

- [A Tale of Two PoCs or: How I Learned to Stop Worrying and Love the Honeypot](https://patrickriggs.com/blog/a-tale-of-two-pocs-or-how-i-learned-to-stop-worrying-and-love-the-honeypot/)

- [Honeyroasting. How to detect Kerberoast breaches with honeypots](https://www.pentestpartners.com/security-blog/honeyroasting-how-to-detect-kerberoast-breaches-with-honeypots/)

- [Deceiving blue teams using anti-forensic techniques](https://blog.redteam.pl/2020/01/deceiving-blue-teams-anti-forensic.html)

- [Endlessh: an SSH Tarpit](https://nullprogram.com/blog/2019/03/22/)

- [A Practical Guide to Honeypots](https://www.cse.wustl.edu/~jain/cse571-09/ftp/honey/)

- [Learn how to deploy a Honeypot and visualise its data step by step](https://medium.com/@galolbardes/learn-how-to-deploy-a-honeypot-and-visualise-its-data-step-by-step-ea3cd3f25822)

- [Bypassing LLMNR/NBT-NS honeypot](https://blog.redteam.pl/2019/10/bypassing-llmnr-nbns-honeypot.html)

- [RDP Honeypotting](https://www.wilbursecurity.com/2019/10/rdp-honeypotting/)

- [High Interaction Honeypots with Sysdig and Falco](https://labs.f-secure.com/archive/high-interaction-honeypots-with-sysdig-and-falco/)

- [Detecting Mimikatz Use On Your Network](https://isc.sans.edu/diary/Detecting+Mimikatz+Use+On+Your+Network/19311)

- [Implementing Honeytokens, Honeynets, and Honeytraps With Zero Budget](https://danielmiessler.com/blog/implementing-inexpensive-honeytrap-techniques/)

- [Creating and Deploying Honeypots in Kubernetes](https://www.apriorit.com/dev-blog/619-web-cybersecurity-honeypots-in-kubernetes)

- [Honeypot deployment on Linux - OpenCanary](https://itrandomstuff.blogspot.com/2019/05/Honeypot-deployment-Linux-OpenCanary.html)

- [Setting HoneyTraps with ModSecurity: Adding Fake robots.txt Disallow Entries](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/setting-honeytraps-with-modsecurity-adding-fake-robotstxt-disallow-entries/)

- [Setting HoneyTraps with ModSecurity: Adding Fake HTML Comments](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/setting-honeytraps-with-modsecurity-adding-fake-html-comments/)

- [Detecting Malice with ModSecurity: HoneyTraps](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/detecting-malice-with-modsecurity-honeytraps/)

- [How Google set a trap for Pwn2Own exploit team](http://www.zdnet.com/blog/security/how-google-set-a-trap-for-pwn2own-exploit-team/)

- [Build an easy RDP Honeypot with Raspberry PI 3 and observe the infamous attacks as (BlueKeep) CVE-2019–0708](https://medium.com/@alt3kx/build-an-easy-rdp-honeypot-with-raspberry-pi-3-and-observe-the-infamous-attacks-as-bluekeep-29a167f78cc1)

- [Building a real-world web honeypot for CVE-2019–6340 (RCE in Drupal core)](https://medium.com/@SecurityBender/building-a-real-world-web-honeypot-for-cve-2019-6340-rce-in-drupal-core-f4240f989c3f)

- [SSH Honey Keys](https://kulinacs.com/ssh-honey-keys/)

- [Deception as a {Free} Post-Breach Detection Tool](https://www.tripwire.com/state-of-security/security-data-protection/deception-free-post-breach-detection-tool/)

- [DevSecOps: Deception in Depth](https://devops.com/devsecops-deception-in-depth/)

- [How You Can Set up Honeytokens Using Canarytokens to Detect Intrusions](https://zeltser.com/honeytokens-canarytokens-setup/)

- [Gene Spafford: Challenging the Maxim, “No Security Through Obscurity”](https://threatvector.cylance.com/en_us/home/gene-spafford-no-security-through-obscurity.html)

- [Introduction to HoneyPy & HoneyDB](https://labs.signalsciences.com/honeypots-introduction-honeypy-honeydb)

- [Getting Started With HoneyPy — Part 1](https://labs.signalsciences.com/honeypy-part-1-getting-started)

- [Getting Started With HoneyPy — Part 2](https://labs.signalsciences.com/getting-started-with-honeypy-part-2)

- [Getting Started With HoneyPy — Part 3](https://labs.signalsciences.com/getting-started-with-honeypy-part-3)

- [Reflections Upon Deception-Based Security Tactics](https://zeltser.com/deception-security-tactics/)

- [Running A SSH Honeypot With Kippo: Let’s Catch Some Script Kiddies](http://blog.macuyiko.com/post/2011/running-a-ssh-honeypot-with-kippo-lets-catch-some-script-kiddies.html)

- [Cowrie Honeypot Analysis - 24 hours after installing a fresh Cowrie Honeypot 

on a Digital Ocean node in Singapore. I have data.](https://hackertarget.com/cowrie-honeypot-analysis-24hrs/)

- [Early Warning Detectors Using AWS Access Keys as Honeytokens](https://blog.rapid7.com/2016/11/30/early-warning-detectors-using-aws-access-keys-honeytokens/)

- [Introduction to T-Pot - The all in one honeypot](https://northsec.tech/introduction-to-t-pot-the-all-in-one-honeypot/)

- [Unveiling Patchwork – a targeted attack caught with cyber deception](https://cymmetria.com/research/patchwork-targeted-attack/)

- [“Deception as Detection” or Give Deception a Chance?](https://blogs.gartner.com/anton-chuvakin/2016/01/08/deception-as-detection-or-give-deception-a-chance/)

- [Deploy a fake Bitcoin wallet to save your own](https://www.theregister.co.uk/2014/06/05/deploy_a_fake_bitcoin_wallet_to_save_your_own/)

- [To Honey or not to Honey](https://www.cyberstuff.org/articles/to-honey-or-not-to-honey)

# Books

- [Intrusion Detection Honeypots: Detection through Deception](https://chrissanders.org/2020/09/idh-release/)

- [Offensive Countermeasures: The Art of Active Defense](https://www.blackhillsinfosec.com/projects/books/)

- [Aggressive Network Self-Defense](https://www.oreilly.com/library/view/aggressive-network-self-defense/9781931836203/)

- [Virtual Honeypots: From Botnet Tracking to Intrusion Detection](https://www.oreilly.com/library/view/virtual-honeypots-from/9780321336323/)

# Communities

- [/r/cyber_deception](https://www.reddit.com/r/cyber_deception/)

- [/r/honeypot](https://www.reddit.com/r/honeypot/)

- [The Honeynet Project](https://www.honeynet.org/)

# Frameworks

- [MITRE Engage™](https://engage.mitre.org/resources/getting-started)

- [MITRE D3FEND™](https://d3fend.mitre.org/)

- [Deception-as-Detection](https://github.com/0x4D31/deception-as-detection)

# Guides

- [Birding Guide - Detect attackers without breaking the bank](http://canary-content.s3-website-us-east-1.amazonaws.com/documents/birding-guide.pdf)

- [OWASP AppSensor Guide - Application-Specific Real Time Attack Detection & Response](https://owasp.org/www-pdf-archive/Owasp-appsensor-guide-v2.pdf)

- [A Practical Guide to Honeypots](https://www.cse.wustl.edu/~jain/cse571-09/ftp/honey/)

# Related Lists

- [awesome-honeypots](https://github.com/paralax/awesome-honeypots)

# Research

### Groups and Laboratories

- [UK National Cyber Deception Laboratory](https://www.cyberdeception.org.uk/)

- [Purdue University - Deception Group](https://www.cerias.purdue.edu/site/deception/)

### Workshops

- [Active Defense & Deception (AD&D)](https://adnd.work/)

### Lecture Slides

- [University of New Haven - Deception in Defense of

Information Systems](http://all.net/courses.all.net/Deception/)

### Papers and Theses

- 2023

  - [HoneyKube: Designing and Deploying a Microservices-based Web Honeypot](https://ris.utwente.nl/ws/portalfiles/portal/303815192/main.pdf)

  - [An Empirical Analysis of Cyber Deception Systems](https://vbn.aau.dk/files/539415752/PHD_TECH_SS.pdf)

  - [SCANTRAP: Protecting Content Management Systems from Vulnerability Scanners with Cyber Deception and Obfuscation](https://arxiv.org/pdf/2301.10502)

- 2022

  - [An Approach to Generate Realistic HTTP Parameters for Application Layer Deception](https://link.springer.com/chapter/10.1007/978-3-031-09234-3_17)

  - [Honeyword-based Authentication Techniques for Protecting Passwords: A Survey](https://scholar.archive.org/work/byawhpnshvetfgr3vsolfurmiu/access/wayback/https://dl.acm.org/doi/pdf/10.1145/3552431)

  - [Multi-factor Authentication Mechanism Based on Browser Fingerprinting and Graphical HoneyTokens](https://www.diva-portal.org/smash/record.jsf?pid=diva2%3A1670220&dswid=-5847)

  - [Lethe: Practical Data Breach Detection with Zero Persistent Secret State](https://www.cs.ucy.ac.cy/~elathan/papers/eurosp22.pdf)

  - [Deceptive directories and “vulnerable” logs: a honeypot study of the LDAP and log4j attack landscape](https://www.researchgate.net/profile/Emmanouil-Vasilomanolakis/publication/360015240_Deceptive_directories_and_vulnerable_logs_a_honeypot_study_of_the_LDAP_and_log4j_attack_landscape/links/625d32f69be52845a90c238c/Deceptive-directories-and-vulnerable-logs-a-honeypot-study-of-the-LDAP-and-log4j-attack-landscape.pdf)

- 2021

  - [Examining the Efficacy of Decoy-based and Psychological Cyber Deception](https://www.usenix.org/system/files/sec21-ferguson-walter.pdf)

  - [Lamboozling Attackers: A New Generation of Deception](https://queue.acm.org/detail.cfm?id=3494836) 

  - [Click This, Not That:

Extending Web Authentication with Deception](https://www.researchgate.net/profile/Timothy-Barron/publication/352146997_Click_This_Not_That_Extending_Web_Authentication_with_Deception/links/60c2bf0aa6fdcc2e61317fbc/Click-This-Not-That-Extending-Web-Authentication-with-Deception.pdf)

  - [Angry Birding: Evaluating Application Exceptions as Attack Canaries](https://rke.abertay.ac.uk/en/publications/angry-birding-evaluating-application-exceptions-as-attack-canarie)

  - [Three Decades of Deception Techniques in Active Cyber Defense - Retrospect and Outlook](https://arxiv.org/pdf/2104.03594.pdf)

  - [A Comparative Analysis of Honeypots on Different Cloud Platforms](https://www.mdpi.com/1424-8220/21/7/2433/pdf)

  - [RIoTPot: a modular hybrid-interaction IoT/OT honeypot](https://www.researchgate.net/profile/Emmanouil-Vasilomanolakis/publication/353794760_RIoTPot_a_modular_hybrid-interaction_IoTOT_honeypot/links/6112479c169a1a0103ee1bd0/RIoTPot-a-modular-hybrid-interaction-IoT-OT-honeypot.pdf)

  - [GOTTA CATCH ’EM ALL: A MULTISTAGE FRAMEWORK FOR HONEYPOT FINGERPRINTING](https://arxiv.org/pdf/2109.10652.pdf)

- 2020

  - [Honeypots in the age of universal attacks and the Internet of Things](https://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-944.pdf)

  - [The Moonraker Study: An Experimental Evaluation of Host-Based Deception](https://www.researchgate.net/profile/Kimberly_Ferguson-Walter2/publication/337464633_The_Moonraker_Study_An_Experimental_Evaluation_of_Host-Based_Deception/links/5dd8cb5292851c1feda8e365/The-Moonraker-Study-An-Experimental-Evaluation-of-Host-Based-Deception.pdf)

  - [An Empirical Assessment of the Effectiveness of Deception for Cyber Defense](https://scholarworks.umass.edu/cgi/viewcontent.cgi?article=2890&context=dissertations_2)

  - [An Intelligent Deployment Policy for Deception Resources Based on Reinforcement Learning](https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=9001034)

  - [HoneyDetails: A prototype for ensuring patient’s information privacy and thwarting electronic health record threats based on decoys](https://journals.sagepub.com/doi/pdf/10.1177/1460458219894479)

  - [Towards systematic honeytoken fingerprinting](https://www.researchgate.net/profile/Emmanouil_Vasilomanolakis/publication/345007931_Towards_systematic_honeytoken_fingerprinting/links/5fa5217692851cc28698f588/Towards-systematic-honeytoken-fingerprinting.pdf)

  - [Role-Based Deception in Enterprise Networks](https://arxiv.org/pdf/2008.02979.pdf)

  - [DodgeTron: Towards Autonomous Cyber Deception Using Dynamic Hybrid Analysis of Malware](https://www.researchgate.net/profile/Md_Sajidul_Islam_Sajid/publication/341441341_DodgeTron_Towards_Autonomous_Cyber_Deception_Using_Dynamic_Hybrid_Analysis_of_Malware/links/5edc59c7299bf1c67d4ad02a/DodgeTron-Towards-Autonomous-Cyber-Deception-Using-Dynamic-Hybrid-Analysis-of-Malware.pdf)

  - [Cyber Deception for Computer and Network Security: Survey and Challenges](https://arxiv.org/pdf/2007.14497.pdf)

  - [HoneyBug: Personalized Cyber Deception for Web Applications](https://www.researchgate.net/publication/338501968_HoneyBug_Personalized_Cyber_Deception_for_Web_Applications)

  - [Towards Reconstructing Multi-Step Cyber Attacks in Modern Cloud Environments with Tripwires](https://arxiv.org/pdf/2009.12115.pdf)

  - [HoPLA: a Honeypot Platform to Lure Attackers](http://www.eurecom.fr/fr/publication/6366/download/sec-publi-6366.pdf)

  - [Towards Identifying Human Actions, Intent, and

Severity of APT Attacks Applying Deception

Techniques - An Experiment](https://arxiv.org/pdf/2006.01849.pdf)

  - [Lessons Learned from SunDEW: A Self Defense Environment for Web Applications](https://assets.cdn.sap.com/sapcom/docs/2020/02/bc375521-867d-0010-87a3-c30de2ffd8ff.pdf)

- 2019

  - [Honware: A Virtual Honeypot Framework for

Capturing CPE and IoT Zero Days](https://www.cl.cam.ac.uk/~amv42/papers/vetterl-clayton-honware-virtual-honeypot-framework-ecrime-19.pdf)

  - [Deploying a University Honeypot: A case study](http://ceur-ws.org/Vol-2443/paper03.pdf)

  - [The Art of The Scam: Demystifying Honeypots in Ethereum Smart Contracts](https://www.usenix.org/system/files/sec19-torres.pdf)

  - [General-Sum Cyber Deception Games under Partial AttackerValuation Information](https://www.cais.usc.edu/wp-content/uploads/2019/04/AAMAS2019.pdf)

  - [HackIT: A Human-in-the-loop Simulation Tool for Realistic Cyber Deception Experiments](https://www.researchgate.net/profile/Varun_Dutt/publication/331097800_HackIT_A_Human-in-the-Loop_Simulation_Tool_for_Realistic_Cyber_Deception_Experiments/links/5c78cb4ca6fdcc4715a3fd5c/HackIT-A-Human-in-the-Loop-Simulation-Tool-for-Realistic-Cyber-Deception-Experiments.pdf)

  - [Deception-As-Defense Framework for Cyber-Physical Systems](https://arxiv.org/pdf/1902.01364.pdf)

  - [Learning and Planning in Feature Deception Games](https://arxiv.org/pdf/1905.04833.pdf)

  - [HoneyDOC: An Efficient Honeypot Architecture Enabling All-Round Design](https://kar.kent.ac.uk/72626/1/po08311464.pdf)

  - [Using Camouflaged Cyber Simulationsas a Model to Ensure Validity in Cybersecurity Experimentation](https://arxiv.org/pdf/1905.07059.pdf)

  - [A Survey On Honeypots, Honeynets And Their Applications On Smart Grid](https://www.spear2020.eu/cmsMedia/Uploads/UserFiles/Publications/ASurveyOnHoneypotsHoneynetsAndTheirApplicationsOnSmartGrid.pdf)

  - [Analysis of threats on a VoIP Based PBX Honeypot](https://eprints.soton.ac.uk/429318/1/Analysis_of_threats_on_a_VoIP_Based_PBX_Honeypot_From_Proceedings.pdf)

  - [Prevalence of IoT Protocols in Telescope and Honeypot Measurements](https://www.riverpublishers.com/journal_read_html_article.php?j=JCSM/8/3/2)

  - [Counting Outdated Honeypots: Legal and Useful](https://www.cl.cam.ac.uk/~amv42/papers/vetterl-clayton-walden-counting-outdated-honeypots-wtmc-19.pdf)

  - [Game Theory for Adaptive Defensive Cyber Deception](https://www.researchgate.net/profile/Kimberly_Ferguson-Walter2/publication/331357854_Game_Theory_for_Adaptive_Defensive_Cyber_Deception/links/5c75b16e458515831f7297d2/Game-Theory-for-Adaptive-Defensive-Cyber-Deception.pdf)

  - [DorkPot: A Honeypot-based Analysis of GoogleDorks](https://www.ei.ruhr-uni-bochum.de/media/emma/veroeffentlichungen/2019/02/26/DorkPot-MADWeb2019.pdf)

  - [Buckler:Intrusion Detection and Prevention using Honeypot](https://www.ijresm.com/Vol.2_2019/Vol2_Iss1_January19/IJRESM_V2_I1_136.pdf)

  - [Detect Me If You... Oh Wait.An Internet-Wide View of Self-Revealing Honeypots](http://yoshioka.ynu.ac.jp/papers/IM2019-honeypot.pdf)

  - [From Cyber-Security Deception To Manipulation and Gratification Through Gamification](https://www.researchgate.net/publication/331949692_From_Cyber-Security_Deception_To_Manipulation_and_Gratification_Through_Gamification)

  - [Honeypot boulevard: understanding malicious activity via decoy accounts](http://discovery.ucl.ac.uk/10066774/)

  - [The Tularosa Study: An Experimental Design and Implementation to

Quantify the Effectiveness of Cyber Deception](https://scholarspace.manoa.hawaii.edu/bitstream/10125/60164/0724.pdf)

  - [How deception can change cyber security defences](https://www.sciencedirect.com/science/article/pii/S1361372319300089)

  - [VIRTUALIZED INTELLIGENT HONEYPOT AGENT](https://www.tdcommons.org/dpubs_series/1928/)

  - [Game Theory for Cyber Deception: A Tutorial](https://www.researchgate.net/publication/331543976_Game_Theory_for_Cyber_Deception_A_Tutorial)

- 2018

  - [Adaptive Containerised Honeypots for Cyber-Incident Monitoring](https://www.scss.tcd.ie/Stefan.Weber/PDFs/Amber%20Higgins%20-%20MAI%20Dissertation%202018.pdf)

  - [Towards an Automatic Generation of Low-Interaction Web Application Honeypots](https://www.tu-braunschweig.de/Medien-DB/ias/pubs/2018-ares.pdf) 

  - [Cloxy: A Context-aware Deception-as-a-ServiceReverse Proxy for Web Services](https://www.researchgate.net/publication/327034328_Cloxy_A_Context-aware_Deception-as-a-Service_Reverse_Proxy_for_Web_Services)

  - [Deception Techniques in Computer Security: A Research Perspective](https://dl.acm.org/citation.cfm?doid=3236632.3214305)

  - [Demystifying Deception Technology:A Survey](https://arxiv.org/abs/1804.06196)

  - [Defending Web Servers with Feints, Distraction and Obfuscation](https://www.researchgate.net/publication/321319199_Defending_Web_Servers_with_Feints_Distraction_and_Obfuscation)

  - [Strategic Defense and Attack in Deception Based Network Security](https://www.researchgate.net/publication/321319096_Strategic_Defense_and_Attack_in_Deception_Based_Network_Security)

  - [Bitter Harvest: Systematically Fingerprinting Low- and Medium-interaction Honeypots at Internet Scale](https://www.usenix.org/conference/woot18/presentation/vetterl)

  - [A SPL Framework for Adaptive Deception-based Defense](https://core.ac.uk/download/pdf/143481525.pdf)

  - [Chaff Bugs: Deterring Attackers by Making Software Buggier](https://arxiv.org/abs/1808.00659)

  - [U-PoT: A Honeypot Framework for UPnP-Based

IoT Devices](https://arxiv.org/pdf/1812.05558.pdf)

  - [HoneyThing: A New Honeypot Design for CPE Devices](http://itiis.org/digital-library/manuscript/2130)

  - [Efficiency and Security of Docker Based Honeypot Systems](http://docs.mipro-proceedings.com/iss/iss_07_5091.pdf)

  - [An Application of Jeeves for Honeypot Sanitization](http://www.cs.umd.edu/sites/default/files/scholarly_papers/Webster%2C%20Ashton_1801.pdf)

  - [Cloud security using self-acting spontaneous honeypots](https://pdfs.semanticscholar.org/d309/ee0479aad76a0e74106c225e6cf0263388b6.pdf)

  - [HONEY POT AS A SERVICE IN CLOUD ](https://acadpubl.eu/hub/2018-118-21/articles/21c/99.pdf)

  - [A Survey of Game-Theoretic Approaches to

Modeling Honeypots](http://ceur-ws.org/Vol-2081/paper29.pdf)

  - [Web Deception towards Moving Target Defense](https://www.researchgate.net/publication/328542218_Web_Deception_towards_Moving_Target_Defense)

  - [Mitigating Computer Attacks in a Corporate Network using Honeypots: A Case Study of Ghana Education Service](https://www.ijcaonline.org/archives/volume180/number32/agbedanu-2018-ijca-916836.pdf)

  - [Using Reinforcement Learning to Conceal Honeypot Functionality](http://www.ecmlpkdd2018.org/wp-content/uploads/2018/09/262.pdf)

- 2017

  - [Lure Box Using Honeytokens for Detecting Cyberattacks](https://github.com/LureBox/LureBox/blob/master/master_thesis/Lure-Box_Using-Honeytokens-for-Detecting-Cyberattacks.pdf)

  - [Adapting Honeypot Configurations to Detect Evolving Exploits](http://teamcore.usc.edu/people/haifeng/Adverse17/papers/8.pdf)

  - [A New Approach to Detecting Ransomware

with Deception](https://www.ieee-security.org/TC/SP2017/poster-abstracts/IEEE-SP17_Posters_paper_26.pdf)

  - [Active defence through deceptive IPS](https://www.semanticscholar.org/paper/Active-defence-through-deceptive-IPS-Machas/f1130c28890ddcf147d1ed3476ebb06b4ea2b494)

  - [Deception strategies for web

application security: application-layer

approaches and a testing platform](https://ltu.diva-portal.org/smash/get/diva2:1114330/FULLTEXT02.pdf)

  - [Evaluation of Deception-Based Web Attacks Detection

](http://s3.eurecom.fr/docs/mtd17_han_deception.pdf)

  - [HoneyIo4: the construction of a virtual, low-interaction IoT Honeypot](https://upcommons.upc.edu/bitstream/handle/2117/108166/Alejandro_Guerra_Manzanares.pdf)

  - [Honey-Copy-A Concept and Prototype of a Generic Honeypot System](https://www.researchgate.net/publication/321805754_Honey-Copy-A_Concept_and_Prototype_of_a_Generic_Honeypot_System)

  - [Deception using an SSH honeypot](https://calhoun.nps.edu/bitstream/handle/10945/56156/17Sep_McCaughey_Ryan.pdf)

  - [Picky Attackers: Quantifying the Role of System Properties on

Intruder Behavior](https://www.securitee.org/files/pickyattackers_acsac2017.pdf)

  - [Weems: An extensible HTTP honeypot](https://researchspace.csir.co.za/dspace/bitstream/handle/10204/9691/Pearson_19652_2017.pdf)

  - [Understanding Security Flaws of IoT Protocols through Honeypot Technologies](https://repository.tudelft.nl/islandora/object/uuid:f4be5514-e9df-499a-8eea-f78c510d3346?collection=education)

  - [HONEYPHY: A PHYSICS-AWARE CPS HONEYPOT FRAMEWORK

](https://smartech.gatech.edu/bitstream/handle/1853/58329/LITCHFIELD-THESIS-2017.pdf)

  - [Designing a smartphone honeypot system using performance counters](https://www.sciencedirect.com/science/article/pii/S2405609X16304225)

  - [Enhancing Honeypot Deception Capability

Through Network Service Fingerprinting

](http://iopscience.iop.org/article/10.1088/1742-6596/801/1/012057/pdf)

  - [Enabling an Anatomic View to Investigate

Honeypot Systems: A Survey](https://arxiv.org/ftp/arxiv/papers/1704/1704.05357.pdf)

  - [Review on Honeypot Security](https://www.irjet.net/archives/V4/i6/IRJET-V4I6221.pdf)

  - [A Virtual Honeypot Framework for Server Configuration Using IDS

For Login Authentications](https://www.ijrter.com/papers/volume-3/issue-5/a-virtual-honeypot-framework-for-server-configuration-using-ids-for-login-authentications.pdf)

  - [Automating the Generation of Enticing Text Content for High-Interaction

Honeyfiles](https://core.ac.uk/download/pdf/77240199.pdf)

  - [Towards Deployment Strategies for Deception Systems](https://www.researchgate.net/profile/Daniel_Fraunholz/publication/319865512_Towards_Deployment_Strategies_for_Deception_Systems/links/5a1c657b45851537318902db/Towards-Deployment-Strategies-for-Deception-Systems.pdf)

  - [Outlier Detection in Secure Shell Honeypot using

Particle Swarm Optimization Technique](http://www.ijana.in/papers/V9I3-6.pdf)

  - [Evaluation of Low-Interaction

Honeypots on the University

Network](http://lnu.diva-portal.org/smash/get/diva2:1121560/FULLTEXT01.pdf)

  - [Poster: HoneyBot - A Honeypot for Robotic Systems](https://www.ieee-security.org/TC/SP2017/poster-abstracts/IEEE-SP17_Posters_paper_3.pdf)

  - [A security approach based on honeypots: Protecting Online Social network from malicious profiles](https://www.astesj.com/publications/ASTESJ_020326.pdf)

- 2016

  - [SSH Honeypot: Building, Deploying and Analysis](https://www.researchgate.net/publication/303020547_SSH_Honeypot_Building_Deploying_and_Analysis)

  - [Designing Adaptive Deception Strategies](http://nova-lincs.di.fct.unl.pt/system/publication_files/files/000/000/645/original/DesigningAdaptiveDeceptionStrategies.pdf?1469118788)

  - [Design and Implementation of a Real-Time

Honeypot System for the Detection and

Prevention of Systems Attacks](https://repository.stcloudstate.edu/cgi/viewcontent.cgi?referer=&httpsredir=1&article=1011&context=msia_etds)

  - [Active defence using an operational technology honeypot](https://www.atkinsglobal.com/~/media/Files/A/Atkins-Corporate/uk-and-europe/services-documents/cyber/Active%20defence%20with%20an%20OT%20honeypot.pdf)

  - [SIMULATION OF INDUSTRIAL CONTROL SYSTEM

FIELD DEVICES FOR CYBER SECURITY](http://www.diva-portal.org/smash/get/diva2:1076710/FULLTEXT01.pdf)

  - [Deception-Based Game Theoretical Approach to Mitigate DoS Attacks](https://www.researchgate.net/publication/313076022_Deception-Based_Game_Theoretical_Approach_to_Mitigate_DoS_Attacks)

  - [MobiPot: Understanding Mobile

Telephony Threats with Honeycards](http://www.madlab.it/papers/mobipot.pdf)

  - [Gathering threat intelligence through computer network

deception](https://www.osti.gov/servlets/purl/1368844)

  - [An improved tarpit for network deception](https://calhoun.nps.edu/handle/10945/48595)

  - [Bandits for Cybersecurity: Adaptive

Intrusion Detection Using Honeypots](https://www.aaai.org/ocs/index.php/WS/AAAIW16/paper/download/12655/12359)

  - [Honeypot Architectures for IPv6 Networks](https://www.cs.uni-potsdam.de/bs/research/docs/thesis/2016/schindler.pdf)

  - [Deceptive Cyber Defense for IIoT](https://ipsj.ixsq.nii.ac.jp/ej/?action=repository_action_common_download&item_id=174833&item_no=1&attribute_id=1&file_no=1)

  - [A Survey on Honeypot Software and Data Analysis](https://arxiv.org/pdf/1608.06249.pdf)

  - [Goal-driven deception tactics design](http://nova-lincs.di.fct.unl.pt/system/publication_files/files/000/000/644/original/issre2016-goal-driven-deception-pre-cameraready.pdf?1469542781)

  - [SCADA Honeypots – An In-depth Analysis of Conpot](https://eller.arizona.edu/sites/default/files/arthur_jicha_masters_paper.pdf)

  - [Graph-based Forensic Analysis of Web Honeypot](https://www.itl.waw.pl/czasopisma/JTIT/2016/2/60.pdf)

  - [Poster: Re-thinking the Honeypot for Cyber-Physical Systems](https://www.ieee-security.org/TC/SP2016/poster-abstracts/20-poster_abstract.pdf)

  - [Characterizing Honeypot-Captured Cyber Attacks: Statistical Framework and Case Study](http://www.cs.utsa.edu/~shxu/socs/tifs-final.pdf)

- 2015

  - [Deception by Design: Evidence-Based

Signaling Games for Network Defense](https://arxiv.org/pdf/1503.05458.pdf)

  - [Experiences with Honey-Patching in Active Cyber Security Education](https://www.usenix.org/system/files/conference/cset15/cset15-araujo.pdf)

  - [Using Deception to Enhance Security: A Taxonomy, Model, and Novel Uses](https://www.meshekah.com/publication/reports/phd_thesis_using-deception-to-enhance-security.pdf)

  - [Toward an Insider Threat Detection Framework

Using Honey Permissions](http://people.tamu.edu/~kaghazgaran/papers/JISIS-15.pdf)

  - [Weaving Tangled Webs: Offense, Defense, and

Deception in Cyberspace](http://deterrence.ucsd.edu/_files/Weaving%20Tangled%20Webs_%20Offense%20Defense%20and%20Deception%20in%20Cyberspace.pdf)

  - [Denial and Deception in Cyber Defense](https://www.researchgate.net/publication/275270540_Denial_and_Deception_in_Cyber_Defense)

  - [Fox in the Trap: Thwarting Masqueraders via Automated

Decoy Document Deployment](http://ids.cs.columbia.edu/sites/default/files/eurosec_15_0.pdf)

  - [Hyhoneydv6: A hybrid Honeypot Architecture for IPv6 Networks](https://pdfs.semanticscholar.org/c64d/a666144c84ac246f060bfc2d58ea7365886f.pdf)

  - [Deception in Dynamic Web Application Honeypots: Case of

Glastopf](https://www.researchgate.net/profile/Ontiretse_Bagwasi/publication/281063918_Deception_in_Dynamic_Web_Application_Honeypots_Case_of_Glastopf/links/5666ac9508ae192bbf928baf/Deception-in-Dynamic-Web-Application-Honeypots-Case-of-Glastopf.pdf)

  - [IoTPOT: Analysing the Rise of IoT Compromises](https://christian-rossow.de/publications/iotpot-woot2015.pdf)

  - [Survey on Security Using Honeypot](http://iosrjen.org/Papers/Conf.ICIATE-2018/Volume-12/11-41-44.pdf)

- 2014

  - [Aggressive Web Application Honeypot for Exposing Attacker‟s Identity](https://www.researchgate.net/profile/Hudan_Studiawan2/publication/301408199_Aggressive_web_application_honeypot_for_exposing_attacker%27s_identity/links/5aec4e00458515f599820ac7/Aggressive-web-application-honeypot-for-exposing-attackers-identity.pdf)

  - [From Patches to Honey-Patches: Lightweight

Attacker Misdirection, Deception, and Disinformation](https://www.utd.edu/~kxh060100/araujo14ccs.pdf)

  - [Changing the game: The art of deceiving sophisticated

attackers](https://ccdcoe.org/cycon/2014/proceedings/d2r2s6_serrano.pdf)

  - [Implementing a CBR Recommender for Honeypot

Configuration using jCOLIBRI](https://www.researchgate.net/profile/Wira_Zakaria/publication/262689112_Implementing_a_CBR_Recommender_for_Honeypot_Configuration_using_jCOLIBRI/links/0f3175387eba370d9f000000.pdf)

  - [INTERCEPT: High-interaction Server-type Honeypot basedon Live Migration](http://www.necoma-project.eu/m/filer_public/8c/30/8c3011e1-a8a8-4ec6-b055-a12a7f621043/miyamoto-emu2014.pdf)

  - [Building a Honeypot to Research

Cyber-Attack Techniques](https://securehoney.net/dissertation.pdf)

- 2013

  - [Detecting Targeted Attacks by Multilayer

Deception](https://www.riverpublishers.com/journal/journal_articles/RP_Journal_2245-1439_224.pdf)

  - [Improving Security Using Deception](https://www.meshekah.com/publication/reports/improving_security_using_deception.pdf)

  - [Bait and Snitch: Defending Computer Systems with

Decoys

](http://www.cs.columbia.edu/nsl/papers/2012/baitsnitch.cip12.pdf)

  - [Canary Files: Generating Fake Files to Detect Critical Data Loss from Complex Computer Networks](http://sdiwc.net/digital-library/canary-files-generating-fake-files-to-detect-critical-data-loss-from-complex-computer-networks.html)

  - [Honeywords: Making Password-Cracking Detectable](https://people.csail.mit.edu/rivest/pubs/JR13.pdf)

  - [A Technique for Presenting a Deceptive

Dynamic Network Topology](https://calhoun.nps.edu/bitstream/handle/10945/32911/13Mar_Trassare_Samuel.pdf?sequence=1&isAllowed=y)

  - [Self-adaptive SSH Honeypot Model Capable of Reasoning](https://pdfs.semanticscholar.org/1d13/aaf110c9b4555c6988d85f6450ffde5b6123.pdf)

  - [Design and Implementation of a Medium

Interaction Honeypot](https://pdfs.semanticscholar.org/07c9/6df6df591b8d667775300fe6e47a9b93ac25.pdf)

  - [A Framework for Intrusion Deception on Web Servers](https://worldcomp-proceedings.com/proc/p2013/ICM2762.pdf)

  - [Patterns and Patter - An Investigation into SSH

Activity Using Kippo Honeypots](https://core.ac.uk/download/pdf/41530408.pdf)

  - [A review of dynamic and intelligent honeypots](http://scienceasia.org/2013.39S.n1/scias39S_1.pdf)

- 2012

  - [A Deception Framework for Survivability Against Next Generation

Cyber Attacks](http://worldcomp-proceedings.com/proc/p2012/SAM9787.pdf)

  - [A Security Mechanism for Web Servers Based on

Deception](http://worldcomp-proceedings.com/proc/p2012/ICM2321.pdf)

  - [A Survey: Recent Advances and Future Trends in

Honeypot Research](http://www.mecs-press.org/ijcnis/ijcnis-v4-n10/IJCNIS-V4-N10-7.pdf)

  - [CAMPUS SECURITY USING HONEYPOT](http://psrcentre.org/images/extraimages/15.%201112105.pdf)

  - [Set-up and deployment of a high-interaction honeypot:experiment and lessons learned](https://hal.archives-ouvertes.fr/hal-00762596/document)

- 2011

  - [DarkNOC: Dashboard for Honeypot Management](https://www.usenix.org/legacy/event/lisa11/tech/full_papers/Sobesto.pdf)

  - [Heat-seeking honeypots: design and experience](https://homes.cs.washington.edu/~arvind/papers/hshoneypots.pdf)

  - [Time-traveling Forensic Analysis of VM-basedHigh-interaction Honeypots](https://www.csc2.ncsu.edu/faculty/xjiang4/pubs/SECURECOMM11.pdf)

  - [SCADA Honeynets: The attractiveness of honeypots as critical infrastructure security tools for the detection and analysis of advanced threats](http://lib.dr.iastate.edu/cgi/viewcontent.cgi?article=3130&context=etd)

- 2010

  - [AHA - Adaptive Honeypot Alternative](http://eah.es/Wagener-AHA-Adaptive-Honeypot-Alternative-slides.pdf)

  - [Honeyware: a web-based low interaction client honeypot](https://www.researchgate.net/publication/220719975_Honeyware_A_Web-Based_Low_Interaction_Client_Honeypot)

- 2009

  - [Using Honeypots to Analyse Anomalous Internet Activities](https://eprints.qut.edu.au/31833/1/Saleh_Almotairi_Thesis.pdf)

  - [Deception used for Cyber Defense of

Control Systems](https://www.researchgate.net/profile/Wayne_Boyer/publication/224517314_Deception_used_for_cyber_defense_of_control_systems/links/02e7e53bbf9430ebba000000/Deception-used-for-cyber-defense-of-control-systems.pdf)

  - [ADVANCED HONEYPOT ARCHITECTURE FOR NETWORK THREATS QUANTIFICATION](https://drum.lib.umd.edu/bitstream/handle/1903/9204/Berthier_umd_0117E_10310.pdf?sequence=1&isAllowed=y)

- 2008

  - [Virtual honeynet with simulated user activity

](https://dspace.cuni.cz/bitstream/handle/20.500.11956/18926/DPTX_0_0_11320_0_211885_0_41221.pdf)

  - [An Integrated Honeypot Framework for Proactive

Detection, Characterization and Redirection of

DDoS Attacks at ISP level ](https://pdfs.semanticscholar.org/82fa/427d32c6f8ee4730d95cc131f7434b4e138a.pdf)

- 2007

  - [Intrusion deception in defense of computer systems](https://calhoun.nps.edu/bitstream/handle/10945/3534/07Mar_Goh.pdf?sequence=1&isAllowed=y)

  - [Collecting Autonomous Spreading Malware Using High-Interaction Honeypots](http://www.cs.ucr.edu/~csong/icics07.pdf)

- 2006

  - [Defensive Computer-Security Deception Operations: Processes, Principles and Techniques](https://repository.lib.ncsu.edu/bitstream/handle/1840.16/5648/etd.pdf?sequence=1&isAllowed=y)

  - [Using deception to hide things from hackers: Processes, principles, and

techniques](https://pdfs.semanticscholar.org/d6ea/917966221a7bccc9a74418582f2cb1b6e497.pdf)

  - [Testing and validation of a dynamic honeypot

system](http://www.sislab.no/jantore_project.pdf)

  - [Advanced Honeypot-based Intrusion

Detection](https://www.usenix.org/system/files/login/articles/822/goebel.pdf)

  - [Honeypots: How do you know when you are inside one?](https://ro.ecu.edu.au/cgi/viewcontent.cgi?article=1027&context=adf)

  - [Lessons learned from the deployment of a high-interaction honeypot](https://arxiv.org/ftp/arxiv/papers/0704/0704.0858.pdf)

- 2005

  - [Detecting Targeted Attacks Using Shadow Honeypots](https://www.usenix.org/legacy/events/sec05/tech/full_papers/anagnostakis/anagnostakis.pdf)

  - [A Honeypot Architecture for Detecting and Analyzing Unknown Network Attacks](https://www.eecs.tu-berlin.de/fileadmin/fg112/Papers/kivs05.pdf)

- 2004

  - [Honeyfiles: Deceptive files for intrusion detection](https://www.researchgate.net/publication/4147587_Honeyfiles_Deceptive_files_for_intrusion_detection)

  - [Honeynets: An Educational Resource for IT Security](http://www.cs.potsdam.edu/faculty/laddbc/Teaching/Ethics/StudentPapers/2004Jones-HoneynetsAnEducationalResourceForITSecurity.pdf)

  - [A Dynamic Honeypot Design for Intrusion Detection](http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.97.1766&rep=rep1&type=pdf)

- 2003

  - [How intrusion detection can improve software decoy applications](https://core.ac.uk/download/pdf/36694822.pdf)

  - [Honeytokens: The Other Honeypot](https://www.symantec.com/connect/articles/honeytokens-other-honeypot)

  - [Honeypots: Catching the

Insider Threat](https://www.acsac.org/2003/papers/spitzner-slides.pdf)

  - [Deception Techniques

Using Honeypots](http://www.isg.rhul.ac.uk/~pnai166/thesis.pdf)

  - [Honeypot: a Supplemented Active Defense System for Network Security](http://folk.uio.no/ingardm/sysarp/honeypot-a_supplemented_active_defense_for_network_security.pdf)

- 2002

  - [Delaying-type responses for use by software decoys

](https://core.ac.uk/download/pdf/36698753.pdf)

  - [Software Decoys: Intrusion Detection and Countermeasures](https://www.researchgate.net/publication/242426017_Software_Decoys_Intrusion_Detection_and_Countermeasures)

- 2001

  - [A Framework for Deception](http://all.net/journal/deception/DeceptionFramework.pdf) 

- 1994

  - [Experiences with Tripwire: Using Integrity Checkers for Intrusion

Detection](https://docs.lib.purdue.edu/cgi/viewcontent.cgi?article=2114&context=cstech)

# Podcasts

- [Origins of Deception Technology with Haroon Meer](https://hackervalley.com/e/episode-74-origins-of-deception-technology-with-haroon-meer/)

- [Active Deception as a Methodology for Cybersecurity](https://soundcloud.com/owasp-podcast/active-deception-as-a-methodology-for-cybersecurity-w-lawrence-pingree)

# Presentations

- [Modelling and Generating Fake Websites for Cyber Deception](http://courses.cecs.anu.edu.au/courses/CSPROJECTS/20S1/finalTalks/u5352303.pdf)

- [Detecting Reverse Engineering with Canaries](https://www.mulliner.org/collin/publications/Detecting_Reverse_Engineering_with_Canaries.pdf)

- [Lure Box Using Honeytokens for Detecting Cyberattacks](https://itsecx.fhstp.ac.at/wp-content/uploads/2017/11/07_Malin_LureBox_Presentation_ITSECX-2017.pdf)

- [The smartest way to protect Websites and Web Apps from Attacks](https://www.blackhat.com/docs/webcast/April_Black_Hat_Webcast_Mykonos.pdf)

- [Sorry Your Princess is in Another Castle: Intrusion Deception to Protect the Web](https://slideum.com/doc/1172550/intrusion-deception-kyle-adams-%E2%80%93-chief-software-architect...)

# Videos

- [Advanced Deception Technology Through Behavioral Biometrics](https://www.youtube.com/watch?v=CkFEDPPg9L0)

- [Applied Deception Beyond the Honeypot: Moving Past 101](https://www.youtube.com/watch?v=ctrHLkpzoMk)

- [Honeypots, Deception, and Frankenstein](https://www.youtube.com/watch?v=k81xKjCEeqE)

- [Honeypots 2.0: A New ‘Twist’ on Defending Enterprise Networks with Dynamic Deception at Scale](https://www.youtube.com/watch?v=0lVqOsPmr6c)

- [SANS Webcast: Opening a can of Active Defense and Cyber Deception to confuse and frustrate attackers](https://www.youtube.com/watch?v=bQH1XEPiykM)

- [Deceptive Defense: Beyond Honeypots](https://youtu.be/ZxbtFJBpKGg)

- [Honeypots for Active Defense A Practical Guide to Deploying Honeynets Within the Enterprise](https://youtu.be/zDTqY3ehA74)

- [The matrix has you: Protecting Linux using deception](https://youtu.be/abamlxFHElw)

- [Using Honeypots for Network Security Monitoring](https://youtu.be/T3x4FDYdr14)

- [Remote detection of low & medium interaction honeypots](https://youtu.be/9qw-DichVGg)

- [honeyHoax - A Centralised Honeypot](https://youtu.be/sYRBPkTErYo)

- [Deception for the Cyber Defender: To Err is Human; to Deceive, Divine](https://youtu.be/nCYnTXCfb1o)

- [Paravirtualized Honeypot Deployment for the Analysis of Malicious Activity](https://youtu.be/vpjQeyXfByY)

- [Deploying Honeypots To Gather Actionable Threat Intelligence](https://youtu.be/xC9wJOwqxis)

- [Honeypot Your Database](https://youtu.be/h91Lja1Lo1M)

- [Forging Trusts for Deception in Active Directory](https://youtu.be/EEceX5x2JY8)

- [HoneyPy & HoneyDB](https://youtu.be/k9O1Y9N3bvU)

- [Leveraging Deception Techniques for Strong Detection](https://youtu.be/447MiGxPnfQ)

- [Breaking Honeypots for Fun & Profit](https://youtu.be/HiZdkBAFp7Q)

- [Honeywords - Detectable Password Theft](https://youtu.be/u0DaVve_v5A)

- [IoT Honeypots](https://youtu.be/YAzaITDt_Ac)

- [IoTCandyJar: Towards an Intelligent-Interaction Honeypot for IoT Devices](https://youtu.be/r6Ymr0yR_EY)

- [The KGB, the Computer, and Me (Complete)](https://www.youtube.com/watch?v=EcKxaq1FTac)

- [No Budget Threat Intelligence - Tracking Malware Campaigns on the Cheap](https://www.youtube.com/watch?v=DKfWukYffsE)

- [Running a SCADA honeypot](https://vimeo.com/3178442)

- [Visibility, Control, and Containment: Hunting Maturity through Cyber Deception](https://youtu.be/OvFfVDjGdtI)

- [Drawing the Foul: Operation of a DDoS Honeypot](https://youtu.be/ifp8l2yx7JA)

- [GlastopfNG - A web attack honeypot](https://youtu.be/rO8ofPV_5k8)

- [A Framework For Fingerprinting ICS Honeypot](https://youtu.be/7EWSrGnFEEM)

- [Building a Better Honeypot Network ](https://youtu.be/g1WXml_6NOE)

- [Global Honeypot Trends - Adventures with Kippo!](https://youtu.be/rjd-r4WA0PU)

- [Learning How To Smurf With Honeypots](https://youtu.be/g3qDCv0Hy50)

- [Powergrid Honeypot](https://youtu.be/bkNaj1KnLA8)

- [Stories from a 15 days SMB Honeypot](https://youtu.be/z8vPrXFa3Ws)

- [Medical Devices: Pwnage and Honeypots](https://youtu.be/pd91c5ZwSf0)

- [Honeypots and tokens in modern networks](https://youtu.be/BRsrK3hNAXo)

- [Honey(pot) flavored hunt for cyber enemy ](https://youtu.be/TfkECJhal-o)

- [Hey, You Got Your SQL In My Honeypot!](https://youtu.be/bSUwIBog298)

- [AT&T ThreatTraq: Passwords in the Honeypot](https://youtu.be/1SJJuMDIQGE)

- [Low-Interaction Virtual Honeypot Fingerprinting](https://youtu.be/9zhnlTHtwKM)

- [Smart Contract Honeypots for Profit (and probably fun)](https://youtu.be/Lj0J7_a1AVQ)

- [Deceptacon: Wi-Fi Deception < $5](https://youtu.be/pA4MuhebEwA)

- [Application Honeypot Threat Intelligence](https://youtu.be/qqeWNWKwX20)

- [Deploying ICS Honeypots to Deceive and Thwart Adversaries](https://youtu.be/43IMRroL1tA)

- [Where Do The Phishers Live:Collecting Phishers' Geographic Locations from Honeypots](https://youtu.be/4RxO8uxt6Yo)

- [PLC for Home Automation and How It Is as Hackable as a Honeypot](https://youtu.be/YZEAfHD98wQ)

- [How to Build SPAM Honeypots](https://youtu.be/xOK4SPBzMLE)

- [Bring Back the Honeypots](https://youtu.be/W7U2u-qLAB8)

- [Vaccination - An Anti-Honeypot Approach](https://youtu.be/LH4zoTTHmjM)

- [T-Pot: Automated Honeypot Deployment](https://youtu.be/Hj5f-FezW3Q)

- [Running a Honeypot | AT&T ThreatTraq Bits](https://youtu.be/exPzqr1ka4Q)

- [Ghetto IDS and Honeypots for the Home User](https://youtu.be/1hXkgepG67I)

- [Honeypot That Can Bite: Reverse Penetration](https://youtu.be/UxARvQstVRg)

- [Thug: a new low-interaction honeyclient](https://youtu.be/nU-hr4oQ_bA)

- [Hacking Back: Proactive Threat Intelligence With Honeypots For Active Defense](https://youtu.be/5Z50Nh7rNIs)

- [Honey Haven: Creating Research HoneyPots In the Cloud](https://youtu.be/GdVMIgijwvU)

- [Lessons Learned from Building and Running MHN the Worlds Largest Crowdsourced Honeynet](https://youtu.be/Zd1Br8TW1mk)

- [Would You Like Some Honey With That?](https://youtu.be/3PDnVw32PNQ)

- [Honey In The Age Of Cyber](https://youtu.be/OCuOsOYwc8g)

- [Wolves amongst Sheep - Defeating Targeted Attacks with Deception](https://youtu.be/bJPTeDAWiCo)

- [Bringing PWNED To You Interesting Honeypot Trends](https://youtu.be/iGKBnn2lCvM)

- [ICS Honeypot Deployment Strategies and Technologies](https://youtu.be/2pwhOXUGr8s)

- [Security Onions and Honey Potz](https://youtu.be/1Jbm1zwiGTM)

- [Cyber Counter Intelligence: An attacker-based approach](https://youtu.be/lJC3c-jMALU)

- [Real Eyes, Realize, Real Lies: Beating Deception Technologies](https://youtu.be/-6ZlwPDpbQw)

- [Whiteboard Wednesday: Attacker Deception - Honeypots](https://youtu.be/dHTU-iIRSPE)

- [The Devil Does Not Exist - The Role of Deception in Cyber](https://youtu.be/PpFpOnviDSY)

- [Bitcoin Honeypots](https://youtu.be/HynbkRC889s)

- [Your Active Directory Active Defense ADAD Primer](https://youtu.be/TA5G2tOrVAo)

- [Tangled Web: Defense in Deception](https://youtu.be/Cf_XXmRLnRQ)

- [BHIS Webcast: Tracking attackers. Why attribution matters and how to do it](https://youtu.be/ICwmK0OvHNc)

- [Active Cyber Network Defense with Denial and Deception](https://youtu.be/9g_HLNXiLto)

- [Traps of Gold](https://youtu.be/Qn6XRuNoixM)

- [Live Coding: Python Honeypot](https://youtu.be/77qj9o9pmek)

- [Building a Web Attacker Dashboard with ModSecurity and BeEF](https://vimeo.com/54087884)

- [OpenCanary: a new Python-based honeypot](https://youtu.be/lXhypJUbxVM)

- [Randori, a low interaction honeypot with a vengeance](https://youtu.be/-i1cyxTa8AM)

- [Canarytokens - Honeypots Made Easy](https://youtu.be/14YuyMkfB9Q)

- [Coding Live Stream 2: Let's Deploy an SSH Honeypot](https://youtu.be/Xf9g7npdHAY)

- [Coding Live Stream 5: Let's Analyze Our Honeypot Traffic With PacketTotal](https://youtu.be/T5IRXCx2y14)

- [Building Honeypots to Monitor DDoS](https://youtu.be/jlWCAASdc2Y)

- [Cymmetria: Writing honeypots](https://youtu.be/Wj5u8nQ3MHY)

- [Honeypot project - Kippo Setup and walk-through](https://youtu.be/Yp_WwL_DpPk)

- [Game of Hacks: The Mother of All Honeypots](https://youtu.be/aIvgjJSzPpI)

- [Effortless, Agentless Breach Detection in the Enterprise: Token all the Things!](https://youtu.be/-g2AeLyTUbs)

- [Watching the attackers with a web honeypot](https://youtu.be/e-Egd2RJbvc)

- [Drupot - A drupal honeypot solution by Glasswall](https://youtu.be/1sZMsj2vZ0I)

- [HoneyJax (AKA Web Security Monitoring and Intelligence 2.0)](https://youtu.be/fiFOAitV6GU)

- [Honeypots and the evolution of botnets](https://youtu.be/Oi8vry6PwdM)

- [Improve DDoS Botnet Tracking With Honeypots](https://youtu.be/ej6Z6CavsRs)

- [Ghast04 You Got Your SQL Attacks In My Honeypot](https://youtu.be/Z7bM7MvUpS4)

- [The Future of Honeypots](https://youtu.be/E2w3Z3ZPw8o)

- [sshesame is an easy to setup fake SSH server / HoneyPot](https://youtu.be/aUHxc5eW3Ko)

- [Countering the removable device threat with USB honeypots](https://youtu.be/9G9oo3b9qR4)

- [Hack Yeah - Simple PHP Honeypot](https://youtu.be/o6dtMdIKZSk)

- [Trapping Hacks with Ensnare](https://youtu.be/XHeM_OizkoQ)

- [Continuous Security: Monitoring & Active Defense in the Cloud](https://youtu.be/KE80hN5kV6w)

- [DECEPTICON OPSEC to Slow the OSINT](https://youtu.be/nB6XFIYGg5o)

- [Getting Started in Cyber Deception](https://youtu.be/cCxbBz1UbnA)

- [Messing with Portscans with Honeyports (Cyber Deception)](https://youtu.be/hMLStJuNUT0)

- [Deception Fundamentals](https://youtu.be/YIiCK_7__to)

- [Deception Modeling Language (DML): Tutorial - Part I](https://youtu.be/5KJZ75IePt4)

- [Deception Modeling Language (DML): Tutorial - Part II](https://youtu.be/JijdRZviUI0)

- [ShellCon 2018 Keynote - DIY Blue Teaming](https://youtu.be/9i7GA4Z2vcM)

- [Black Hat USA 1999 - Burglar alarms and Booby Traps](https://youtu.be/jNDNuoYMIAI)

- [When the Tables Turn](https://www.youtube.com/watch?v=GoxRlMHeO4M)

- [Hackers Want Passwords](https://www.youtube.com/watch?v=zatXHKgPnec)

- [Honeytokens: Detecting Attacks to Your Web Apps Using Decoys and Deception](https://youtu.be/5dukn9hcy_Q)

- [Web Application Honeypot Threat Intelligence](https://www.youtube.com/watch?v=Pr43GUdkxHU)

- [Faking a Factory: Creating and Operating a Realistic Honeypot](https://www.youtube.com/watch?v=4y7JJoZd0ic)

- [Active Defense Web Edition: Web Apps Dripping with Honey!](https://www.youtube.com/watch?v=iX9Q21LEtZY)

- [Examining the Efficacy of Decoy-based and Psychological Cyber Deception](https://youtu.be/FgXLRnvC4MI)

- [Detecting Responder via LLMNR Honey Tasks on User Workstations](https://www.youtube.com/watch?v=h_cWWL-yyb0)

- [Monitoring Sensitive Windows Commands via CanaryTokens - Deploying Registry Entries via Group Policy](https://www.youtube.com/watch?v=xFlH3DV0J7I)

- [Combining AD Honey Pot Accounts with Canaries to Detect Password Sprays and Kerberoasting for free!](https://www.youtube.com/watch?v=BT9pT1tAmX8)

- [Hacker Interrupted: Detecting and Preventing Hackers on Your Website Using Deception](https://www.youtube.com/watch?v=jKKh4n5Klps)