Скачать или смотреть BSidesCharm 2025 - Cyber Deception in GCP with Generative Traps - Matt Maisel

Cyber deception is a ruse to mislead or disrupt adversaries by exploiting their cognitive biases. Traps— lures that detect adversary interaction— reinforce the seams in detection surfaces monitored by security operations teams. But deception management and orchestration is painful in practice. Cloud environments provide an opportunity to overcome some of these pitfalls. This talk defines cloud deception stratagems for the Google Cloud Platform. Each stratagem is motivated with the release of an open-source, deception management tool that programmatically generates cloud-native traps tailored to an organization’s target personas, orchestrates engagements with specific stratagems, and sets up observability for detections.

Matt Maisel is a cybersecurity builder with over fourteen years in security operations, software engineering, and machine learning. His work spans data science and product development roles in cybersecurity startups. He’s currently the Head of Research at Reach Security.