Hello and welcome we're going to

to malicious life. I'm Ran Levy and today we're going to talk about

deception in cybersecurity. security.

Deception is not something we usually think of when we think about defense in the information security world.

True, deception is one of the most common tools in an attacker's arsenal,

but when it comes to protection,

the first picture that comes to mind is often the small icon of an antivirus

software in the corner of your desktop.

For many years, the guiding method in the world of information security was detection by identifying

signature or unusual behavior patterns within a network.

But in recent years, deception, although not a new idea in the world of information security,

has experienced a kind of renaissance.

There has been a gradual but clear transition from defense through detection to defense in other ways.

Why? Because experience has repeatedly shown us that static defense is not enough.

Hackers and malicious software are getting more and more sophisticated and every week

we hear about a multi-million dollar company getting hacked despite all detection and prevention measures.

More and more people realize that we need to rethink our defenses.

And when deception is involved, you don't even need to think like an

information security professional. It can even be, say, an astronomer.

Dr Clifford Stahl looks like how you would expect an astronomer to look. His frame is lean and wiry, his hair long and wild, his clothes a bit crumpled, and when he speaks, he is bouncy, full of exuberant enthusiasm and exaggerated hand gestures.

In 1986, the year our story takes place, Stahl worked at Lawrence Berkeley Laboratory, LBL in short, a research institute that was one of the

handful of universities and commercial companies connected to Arpenet, the military

...