This article features insights from eight Cisco Talos researchers on strategies to frustrate cyber adversaries throughout various stages of an operation. By implementing deception techniques like honeypots and tarpits, and enforcing unique configurations, defenders can force attackers into slower, more expensive, and more detectable paths. The focus is on shifting the economic balance against the adversary by taking away their common choices and making essential actions more difficult to execute.
The researchers highlight several key areas for defense: resilient behavioral detections that focus on objectives rather than specific tools, strict control over legitimate Remote Management and Monitoring (RMM) software, and the importance of resisting manufactured urgency in social engineering. Additionally, the article emphasizes the need for secure AI agent integration and breaking technical dependencies in the attack chain, such as blocking C2 dead-drop resolvers. Ultimately, consistent friction forces adversaries to expend more resources, potentially driving them toward easier targets.
Top comments (0)