Deception
Luring attackers into a trap with honeypots, canarytokens and other lures. Nobody touches these lures in normal operation, so an alert almost always points to an intruder. In 2021 my article on the subject concluded the Active Directory series in iX, and in 2025 I followed up with a piece in the iX special issue on security tools. Since late 2025 I have been teaching the workshop “Cyber Deception,” and in 2026 I gave talks at secIT in Hanover and on the heise security Tour.
Articles appear in German, as do most events.
Articles
Angreifer täuschen: Honeypots und Co.iX Special 13/2025 · heise+ · Read as PDF
Active Directory: Wie Angreifer mit Deception in die Falle gelockt werdeniX 11/2021 · Active Directory series, part 11/11 · heise+ · Read as PDF
Workshops and webinars
Cyber Deception: Angreifer mit Honeypots gezielt in die Falle lockenWorkshop · heise conferences · next date 2026-10-22–23
Talks and panels
Fallen stellen: Wie Honeypots und Canarytokens Angreifer verratenTalk · heise security · heise conferences · 2026-09-24
Die Kunst der Täuschung: Angreifer mit Honeytoken und anderen Honigtöpfen rechtzeitig entlarvenTalk · secIT by heise · 2026-03-18