Esc

Decoy Persona

Definition

Establishing a fake online identity to misdirect, deceive, and or interact with adversaries.

How it works

A false online identity is created for the purposes of interacting with adversaries in a direct or indirect manner. This includes the associated email addresses, social media accounts, and other online communication profiles.

Considerations

Include phone numbers and online social profiles as well as automatically or manually responding to contact made to the persona to improve realism.
Continuous updating and managing the decoy personas and online activity streams to ensure personas do not become stale and outdated.

json

References

All

Patent

Internet Article

The following references were used to develop the Decoy Persona knowledge-base article.

(Note: the consideration of references does not imply specific functionality exists in an offering.)

Decoy and deceptive data object technology

Reference Type: Patent Organization: Cymmetria, Inc. Author: Dean Sysman, Gadi Evron, Imri Goldberg, Itamar Sher, Shmuel Ur

Source: https://patents.google.com/patent/US20170134423A1

Decoy Personas for Safeguarding Online Identity Using Deception

Reference Type: Internet Article Organization: SANS Author: Lenny Zeltser

Source: https://web.archive.org/web/20180407204216/https://isc.sans.edu/diary/Decoy+Personas+for+Safeguarding+Online+Identity+Using+Deception/16159

D3FEND^™

A knowledge graph of cybersecurity countermeasures