Incident Response: A Strategic Guide to Handling System and Network Security Breaches

Advantages and Limitations of Traps and Deceptive Measures

Regardless of the particular instantiation, traps and deceptive measures offer both advantages and disadvantages. This section of the chapter considers both.

Advantages

In the broadest sense, traps and deceptive measures deserve consideration because they represent a departure from traditional information and computer/information security countermeasures. Many security professionals are convinced that these traditional measures, such as password policies, password filters, system auditing, and so on, have lost much of their luster and effectiveness over time. Too often, attackers’ strategies for attacking systems and networks are successful on the first try. If we could understand the ...