{"id":265348,"date":"2021-06-02T22:22:21","date_gmt":"2021-06-02T19:22:21","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/shadow-figment-technology-foils-cyberattacks\/"},"modified":"2021-06-02T22:22:21","modified_gmt":"2021-06-02T19:22:21","slug":"shadow-figment-technology-foils-cyberattacks","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/shadow-figment-technology-foils-cyberattacks\/","title":{"rendered":"#Shadow Figment technology foils cyberattacks"},"content":{"rendered":"

“#Shadow Figment technology<\/a> foils cyberattacks<\/strong>”<\/p>\n

\n
\n
\n
\"Pacific
\n Keeping electricity flowing without disruption from a cyber attack is one aim of Shadow Figment. Credit: Urbans | Shutterstock.com
\n <\/figcaption><\/figure>\n<\/div>\n<\/div>\n

Scientists have created a cybersecurity technology called Shadow Figment that is designed to lure hackers into an artificial world, then stop them from doing damage by feeding them illusory tidbits of success.<\/p>\n

The aim is to sequester bad actors by captivating them with an attractive\u2014but imaginary\u2014world.<\/p>\n

The technology is aimed at protecting physical targets\u2014infrastructure such as buildings, the electric grid, water and sewage systems, and even pipelines. The technology was developed by scientists at the U.S. Department of Energy’s Pacific Northwest National Laboratory.<\/p>\n

The starting point for Shadow Figment is an oft-deployed technology called a honeypot\u2014something attractive to lure an attacker, perhaps a desirable target with the app<\/a>earance of easy access.<\/p>\n

But while most honeypots are used to lure attackers and study their methods, Shadow Figment goes much further. The technology uses artificial intelligence to deploy elaborate deception to keep attackers engaged in a pretend world\u2014the figment\u2014that mirrors the real world. The decoy interacts with users in real time, responding in realistic ways to commands.<\/p>\n

“Our intention is to make interactions seem realistic, so that if someone is interacting with our decoy, we keep them involved, giving our defenders extra time to respond,” said Thomas Edgar, a PNNL cybersecurity researcher who led the development of Shadow Figment.<\/p>\n

Exploiting attackers’ ‘success’<\/b><\/p>\n

The system rewards hackers with false signals of success, keeping them occupied while defenders learn about the attackers’ methods and take actions to protect the real system.<\/p>\n

The credibility of the deception relies on a machine learning program that learns from observing the real-world system where it is installed. The program responds to an attack by sending signals that illustrate that the system under attack is responding in plausible ways. This “model-driven dynamic deception” is much more realistic than a static decoy, a more common tool that is quickly recognized by experienced cyberattackers.<\/p>\n


\n