D3-DPR

Deceive
Decoy Public Release

Definition

Issuing publicly released media to deceive adversaries.

How it works

Publicly released media includes press release, videos, or other marketing collateral. The media may include URLs, points of contact, or other identifiers to entice interaction from adversaries.

Considerations

Information used in decoy public released media must contain enough realism to deceive and provide interaction from adversaries.

Continuous development, creation, and distribution of media and identifiers are needed to ensure adversary interaction continues over time.

Decoy public releases could be placed on platforms with different degrees of ownership, including entirely enterprise-owned infrastructure, IaaS, and SaaS (including social applications). Platforms that are not entirely enterprise-owned may be more likely to gather information

References

Reference - Mock attack cybersecurity training system and methods - WOMBAT SECURITY TECHNOLOGIES Inc