Propositions on Military Deception

Daniel, Donald C.; Herbig, Katherine L.

doi:10.1016/b978-0-08-027219-1.50006-8

Cited by 29 publications

(9 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Similarly, Daniel and Herbig 11 introduce ambiguity increasing to increase uncertainty or confusion to attackers and misleading variety to mislead the attackers, corresponding to the above categories, respectively. The ambiguity increasing resembles the underlying idea of MTD.…”

Section: Related Workmentioning

confidence: 99%

Cyber defense in breadth: Modeling and analysis of integrated defense systems

Cho

Ben-Asher

2017

Journal of Defense Modeling & Simulation

View full text Add to dashboard Cite

Cybersecurity is one of most critical concerns for any organization, as frequency and severity of cyber attacks constantly increase, resulting in loss of vital assets and/or services. To preserve key security goals such as confidentiality, integrity, and availability, a variety of defense techniques have been introduced. While intrusion detection system (IDS) has played a key role in cybersecurity for a long time, recently new proactive defense techniques, called intrusion prevention techniques, have emerged, aiming to resolve the known IDS limitations. The intrusion prevention techniques have been introduced to control actions of attackers as a proactive defense that can be deployed independently or combined with other defense techniques that have the purpose of achieving ''Defense in Breadth.'' In this work, we develop a probability model using Stochastic Petri Nets that describes an integrated defense system with the defense techniques of both intrusion detection (i.e., IDS) and intrusion prevention (i.e., honeypots and platform migration) and analyze its performance compared to single defense or partially integrated defense approaches. Our result shows that the integrated defense system outperforms the compared approaches by minimizing attack success while maximizing system lifetime (i.e., mean time to security failure). Further, we investigate the effect of the interplay between different defense techniques in terms of the defense cost and attack cost. Keywords Defense in breadth, integrated defense systems, moving target defense, deception, intrusion detection, intrusion prevention, attack, defense, mean time to security failure proactive approach aiming to prevent intrusions by controlling the courses of an attacker's actions before the attacker performs any malicious activities. Cybersecurity cannot be achieved or maintained by a single, silver-bullet solution. Instead, there is a need for a collection of defense techniques that can work together and complete one another to deal with sophisticated attacks. This type of defense is termed as Defense in Breadth, which refers to the defense based on multiple mechanisms across sophisticated multiple attack classes.

show abstract

Section: Related Workmentioning

confidence: 99%

Cyber defense in breadth: Modeling and analysis of integrated defense systems

Cho

Ben-Asher

2017

Journal of Defense Modeling & Simulation

View full text Add to dashboard Cite

show abstract

“…The former focuses on only one side of the communicated message; namely the liar [12]. The latter adds to that the other side on the message, namely the receiver, and how this lie affects his perception and/or actions [12].…”

Section: Deception Maximsmentioning

confidence: 99%

Planning and Integrating Deception into Computer Security Defenses

Almeshekah

Spafford

2014

Proceedings of the 2014 New Security Paradigms Workshop

View full text Add to dashboard Cite

Deceptive techniques played a prominent role in many human conflicts throughout history. Digital conflicts are no different as the use of deception has found its way to computing since at least the 1980s. However, many computer defenses that use deception were ad-hoc attempts to incorporate deceptive elements. In this paper, we present a model that can be used to plan and integrate deception in computer security defenses. We present an overview of fundamental reasons why deception works and the essential principles involved in using such techniques. We investigate the unique advantages deception-based mechanisms bring to traditional computer security defenses. Furthermore, we show how our model can be used to incorporate deception in many part of computer systems and discuss how we can use such techniques effectively. A successful deception should present plausible alternative(s) to the truth and these should be designed to exploit specific adversaries' biases. We investigate these biases and discuss how can they be used by presenting a number of examples.

show abstract

“…Furthermore, they note that the stronger a target's predispositions, the "more a target will ignore information inconsistent with them." 98 World War II showed their analysis to be accurate. Hitler feared Allied attacks on Norway, Greece, and the Pas de Calais region, and Allied deception efforts involving these areas were most effective.…”

Section: Potential Areas For Improvementmentioning

confidence: 99%

Second world War Deception. Lessons Learned for Today's Joint Planner

Bacon¹

1998

View full text Add to dashboard Cite

It is my great pleasure to present another of the Wright Flyer Papers series. In this series, Air Command and Staff College (ACSC) recognizes and publishes the "best of the best" student research projects from the prior academic year. The ACSC research program encourages our students to move beyond the school's core curriculum in their own professional development and in "advancing aerospace power." The series title reflects our desire to perpetuate the pioneering spirit embodied in earlier generations of airmen. Projects selected for publication combine solid research, innovative thought, and lucid presentation in exploring war at the operational level. With this broad perspective, the Wright Flyer Papers engage an eclectic range of doctrinal, technological, organizational, and operational questions. Some of these studies provide new solutions to familiar problems. Others encourage us to leave the familiar behind in pursuing new possibilities. By making these research studies available in the Wright Flyer Papers, ACSC hopes to encourage critical examination of the findings and to stimulate further research in these areas. AbstractSecond World War history offers the military strategist a cornucopia of lessons learned on how to apply the art of military deception. This paper analyzed six Allied deception operations to identify the fundamental reasons why Allied deception efforts were the most successful in history. The six deception operations reviewed were Barclay, Cockade, and Bodyguard as well as the Soviet deception operations at Stalingrad, Kursk, and White Russia. A critical analysis of these six operations identified seven major factors that made Allied deception efforts extremely effective. These seven factors were that the Allies controlled all key channels of information, had great intelligence "feedback" on their deception operations, had high-level and centralized control over deception planning, practiced sound deception techniques, subordinated deception to strategic and operational objectives, maintained adequate secrecy, and provided sufficient time for deception execution. These factors are relevant for today's operations and should be imbedded within US doctrine.This study then examined Joint Publication 3-58, Joint Doctrine for Military Deception, and determined it could better incorporate the lessons learned from World War II. Current joint doctrine could be improved by underscoring the contribution that deception provides to surprise, the importance of integrating deception within all three levels of war, and the importance of exploiting an adversary's preexisting beliefs when creating a deception story. Applying these World War II lessons will bolster US deception capabilities.

show abstract

Propositions on Military Deception

Cited by 29 publications

References 0 publications

Cyber defense in breadth: Modeling and analysis of integrated defense systems

Cyber defense in breadth: Modeling and analysis of integrated defense systems

Planning and Integrating Deception into Computer Security Defenses

Second world War Deception. Lessons Learned for Today's Joint Planner

Contact Info

Product

Resources

About