Network level

• Several effective technologies

  • Early (1990+ AT&T), DWall (1999 UNH/SNL)
    • Single computer for single/small # of IPs
    • 20 computers for 40,000 IPs
    • Reasonably good quality deceptions
  • IR, Responder (2001, 2002 SNL/FCA)
    • 1 Computer, Unlimited Ips
    • Complex time/situation dependent, adaptive
    • Complex control of multiple interfaces
    • Extremely precise deceptions
      • Fool automated tools and humans under detailed examination for long periods (8 hours+)

Notes: