Most security experts advise against offensive tactics, or hack-back strategies, to deter malicious actors. But what businesses can do through select product offerings is lure those malicious actors away from valuable assets through technological trickery.Products recognized in this category automate the creation, deployment, and management of digital traps (decoys), lures and deceits, which are blended among existing IT resources. Hidden in plain sight, these tools are intended to engage and prompt the attacker into revealing their trade craft, tools and techniques, in real-time, which provides the enterprise security teams with the facts to preemptively launch effective counter measures.
FINALIST | BEST DECEPTION TECHNOLOGY
CYBER DECEPTION PLATFORM Company: CounterCraft Noteworthy: Allows organizations to detect adversary activity early (even during "pre-attack phases") by generating high-quality alerts of adversary activity, collecting enriched threat data in real time and managing adversaries by allowing the organization to interact directly in real time with them.
FINALIST | BEST DECEPTION TECHNOLOGY
THREATDEFEND PLATFORM Company: Attivo Networks Noteworthy: Protects against Active Directory enumeration and ransomware by hiding files, AD objects, folders, mapped network and cloud shares, and removable drives so attackers can’t find the data or access it for encryption.
No matter how much security training an organization conducts for its staff, if your plan involves people not failing, then your plan is going to fail, said Portnox CEO Denny LeCompte.
