The Art of Cyber Self-Deception: Integrating Guidance-Informed Honeypots in Critical Infrastructure

In this talk, I will discuss what honeypots are and how to deploy them within a CNI environment, including a novel type of honeypot developed to obfuscate attackers. The deployment of honeypots will also be covered, focusing on investment and knowledge requirements without the need to rely on third-party vendors. Providing a number of ways honeypot deployments can be tailored to the requirements and investments set out by an organisation. I will also put significant focus on relevant standards and guidelines and how honeypots can help adherence to these regulations for critical infrastructure. These will flow into a framework we have developed for honeypot deployment and threat intelligence sharing between organisations.