MITRE D3FENDdefensive technique
D3-DP Decoy Persona
- Tactic
- Deceive
Definition
Establishing a fake online identity to misdirect, deceive, and or interact with adversaries.
How it works
How it works
A false online identity is created for the purposes of interacting with adversaries in a direct or indirect manner. This includes the associated email addresses, social media accounts, and other online communication profiles.
Considerations
• Include phone numbers and online social profiles as well as automatically or manually responding to contact made to the persona to improve realism.
• Continuous updating and managing the decoy personas and online activity streams to ensure personas do not become stale and outdated.
Related
Child of · MITRE D3FEND (1)
- D3-DO Decoy Object defensive technique
References
- https://patents.google.com/patent/US20170134423A1 Decoy and deceptive data object technology
- https://web.archive.org/web/20180407204216/https://isc.sans.edu/diary/Decoy+Personas+for+Safeguarding+Online+Identity+Using+Deception/16159 Decoy Personas for Safeguarding Online Identity Using Deception