Defending against cyberattacks by giving attackers 'false hope'

With almost every online purchase, a person's personal information - name, date of birth and credit card number - is stored electronically often in the "cloud," which is a network of internet servers.

Now, as more people buy from online businesses, researchers at the University of Missouri hope to employ a new strategy in the ongoing struggle to protect digital information in the cloud from targeted cyberattacks. The strategy establishes a new artificial intelligence system to combat digital intrusions.

"We are interested in the targeted attacks where the attacker is trying to exploit data or critical infrastructure resources, such as blocking data access, tampering facts or stealing data," said Prasad Calyam, associate professor of electrical engineering and computer science and the director of Cyber Education and Research Initiative in the MU College of Engineering.

"Attackers are trying to use peoples' compromised resources to infiltrate their data without their knowledge, and these attacks are becoming increasingly significant because attackers are realizing they can make money in a big way like never before."

In this study, the researchers focused on two types of cyberattacks - those seeking customer data and those stealing resources such as bitcoins, a type of digital currency. Their strategy uses artificial intelligence techniques and psychology principles - giving the cyberattacker false hope that the attack is working.

"Our 'defense by pretense' system quarantines the attacker and allows the cloud operators to buy time and build a stronger defense for their systems," Calyam said.

"The quarantine is a decoy that behaves very similar to the real compromised target to keep the attacker assuming that the attack is still succeeding. In a typical cyberattack the more deeply attackers go in the system, the more they have the ability to go many directions. It becomes like a Whack-A-Mole game for those defending the system. Our strategy simply changes the game, but makes the attackers think they are being successful."

Researchers say buying time is important because it allows those directing the cyber resources to devise a more sophisticated defensive strategy to use at a later time when the cyber-attacker returns to make a more vigorous attack knowing that valuable assets are being defended.

Research Report: "Intelligent defense using pretense against targeted attacks in cloud platforms,"

Related Links
University of Missouri-Columbia
Cyberwar - Internet Security News - Systems and Policy Issues

Tweet

Thanks for being there;
We need your help. The SpaceDaily news network continues to grow but revenues have never been harder to maintain.

With the rise of Ad Blockers, and Facebook - our traditional revenue sources via quality network advertising continues to decline. And unlike so many other news sites, we don't have a paywall - with those annoying usernames and passwords.

Our news coverage takes time and effort to publish 365 days a year.

If you find our news sites informative and useful then please consider becoming a regular supporter or for now make a one off contribution.

SpaceDaily Monthly Supporter
$5+ Billed Monthly

paypal only

SpaceDaily Contributor
$5 Billed Once

credit card or paypal

China blasts US 'bullying' with Huawei CFO extradition bid
Beijing (AFP) Jan 23, 2019
China on Wednesday accused the United States of "bullying behaviour" after US authorities confirmed plans to seek the extradition of a top Chinese telecom executive detained in Canada. The United States faces a January 30 deadline to file an extradition request for Huawei chief financial officer Meng Wanzhou, whose arrest last month sparked diplomatic tensions. "We will continue to pursue the extradition of defendant Ms Meng Wanzhou, and will meet all deadlines set by the US/Canada Extradition T ... read more