Cyber Deception

1. Front Matter

   Pages i-x

   PDF

2. Diversifying Deception: Game-Theoretic Models for Two-Sided Deception and Initial Human Studies

   • Mohammad Sujan Miah, Palvi Aggarwal, Marcus Gutierrez, Omkar Thakoor, Yinuo Du, Oscar Veliz et al.

   Pages 1-23

3. Human-Subject Experiments on Risk-Based Cyber Camouflage Games

   • Palvi Aggarwal, Shahin Jabbari, Omkar Thakoor, Edward A. Cranford, Phebe Vayanos, Christian Lebiere et al.

   Pages 25-40

4. Adaptive Cyberdefense with Deception: A Human–AI Cognitive Approach

   • Cleotilde Gonzalez, Palvi Aggarwal, Edward A. Cranford, Christian Lebiere

   Pages 41-57

5. Cognitive Modeling for Personalized, Adaptive Signaling for Cyber Deception

   • Christian Lebiere, Edward A. Cranford, Palvi Aggarwal, Sarah Cooney, Milind Tambe, Cleotilde Gonzalez

   Pages 59-82

6. Deceptive Signaling: Understanding Human Behavior Against Signaling Algorithms

   • Palvi Aggarwal, Edward A. Cranford, Milind Tambe, Christian Lebiere, Cleotilde Gonzalez

   Pages 83-95

7. Optimizing Honey Traffic Using Game Theory and Adversarial Learning

   • Mohammad Sujan Miah, Mu Zhu, Alonso Granados, Nazia Sharmin, Iffat Anjum, Anthony Ortiz et al.

   Pages 97-124

8. Mee: Adaptive Honeyfile System for Insider Attacker Detection

   • Mu Zhu, Munindar P. Singh

   Pages 125-143

9. HoneyPLC: A Next-Generation Honeypot for Industrial Control Systems

   • Efrén López Morales, Carlos E. Rubio-Medrano, Adam Doupé, Ruoyu Wang, Yan Shoshitaishvili, Tiffany Bao et al.

   Pages 145-181

10. Using Amnesia to Detect Credential Database Breaches

    • Ke Coby Wang, Michael K. Reiter

    Pages 183-215Open Access

11. Deceiving ML-Based Friend-or-Foe Identification for Executables

    • Keane Lucas, Mahmood Sharif, Lujo Bauer, Michael K. Reiter, Saurabh Shintre

    Pages 217-249Open Access

This book introduces recent research results for cyber deception, a promising field for proactive cyber defense. The beauty and challenge of cyber deception is that it is an interdisciplinary research field requiring study from techniques and strategies to human aspects. 


This book covers a wide variety of cyber deception research, including game theory, artificial intelligence, cognitive science, and deception-related technology. Specifically, this book addresses three core elements regarding cyber deception: 
 

• Understanding human’s cognitive behaviors in decoyed network scenarios 
• Developing effective deceptive strategies based on human’s behaviors
• Designing deceptive techniques that supports the enforcement of deceptive strategies

The research introduced in this book identifies the scientific challenges, highlights the complexity and inspires the future research of cyber deception.


Researchers working in cybersecurity and advanced-level computer science students focused on cybersecurity will find this book useful as a reference. This book also targets professionals working in cybersecurity.


Chapter 'Using Amnesia to Detect Credential Database Breaches' and Chapter 'Deceiving ML-Based Friend-or-Foe Identification for Executables' are available open access under a Creative Commons Attribution 4.0 International License via link.springer.com.

• Cybersecurity
• Cyber deception
• Honeypots
• Human/Computer Interactions
• Cognitive model
• Game theory
• Security
• Uncertainty
• human cognition
• Asymmetric game
• Network security
• Dynamic decision making
• HackIT
• HoneyPLC
• Honeyflow
• ACT-R
• instance-based learning
• reconnaissance
• knowledge tracing

• Arizona State University, Tempe, USA

  Tiffany Bao

• Harvard University, Cambridge, USA

  Milind Tambe

• Army Research Office, Adelphi, USA

  Cliff Wang

Tiffany Bao: 
Dr. Tiffany Bao is an Assistant Professor at Arizona State University. Her research interest is aspects of software security, which spans binary analysis techniques, game-theoretical vulnerability miti­gation strategies, qualitative study on cybersecurity operations, and vulnerability risk assessment. Dr. Bao was the winner of the NSA’s Annual Best Scientific Cybersecurity Paper Award and IEEE Security and Privacy’s Best Student Paper Award. She has served as a program committee member in top­tier cybersecurity conferences, including IEEE Security and Privacy, USENIX Security, Computer and Communication Security, and Network & Distributed System Security Symposium. Her team has discovered and responsibly reported tens of zero-day vulnerabilities to the community. She received her Ph.D. from Carnegie Mellon University.


Milind Tambe: 
Dr. Milind Tambe is Gordon McKay Professor of Computer Scienceand Director of Center for Research in Computation and Society at Harvard University; concurrently, he is also Principal Scientist and Director "AI for Social Good" at Google Research. He is recipient ofMilind Tambe photo 2 the IJCAI (International Joint Conference on AI) John McCarthy Award, AAMAS ACM (Association for Computing Machinery) Autonomous Agents Research Award, AAAI (Association for Advancement of Artificial Intelligence)  Robert S. Engelmore Memorial Lecture Award, and he is a fellow of AAAI and ACM. He is also a recipient of the INFORMS Wagner prize for excellence in Operations Research practice and Rist Prize from MORS (Military Operations Research Society). For his work on AI and public safety, he has received Columbus Fellowship Foundation Homeland security award and commendations and certificates of appreciation from the US Coast Guard, the Federal Air Marshals Service and airport police at the city of Los Angeles.


Cliff Wang: 
Dr. Cliff Wang graduated from North Carolina State University with a PhD in computer engineering in 1996. He has been carrying out research in the area of computer vision, medical imaging, high speed networks, and most recently information security. He has authored 60 technical papers and 3 Internet standards RFCs. Dr. Wang also authored/edited for 20 books in the area of information security and hold 4 US patents on information security system development. 


Since 2003, Dr. Wang has been managing extramural research portfolio on information assurance at US Army Research Office. In 2007 he was selected as the director of the computing sciences division at ARO while in the same time managing his program in cyber security. For the past ten years, Dr. Wang managed over $250M research funding which led to significant technology breakthroughs. Dr. Wang also holds adjunct professor appointment at both Department of Computer Science and Department of Electrical and Computer Engineering at North Carolina State University. Dr. Wang is a Fellow of IEEE and AAAS.

Policies and ethics