Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Role-Based Deception in Enterprise Networks   Historically, enterprise network reconnaissance is an active process, often
involving port scanning. However, as routers and switches become more complex,
they also become more susceptible to compromise. From this vantage point, an
attacker can passively identify high-value hosts such as the workstations of IT
administrators, C-suite executives, and finance personnel. The goal of this
paper is to develop a technique to deceive and dissuade such adversaries. We
propose HoneyRoles, which uses honey connections to build metaphorical
haystacks around the network traffic of client hosts belonging to high-value
organizational roles. The honey connections also act as network canaries to
signal network compromise, thereby dissuading the adversary from acting on
information observed in network flows. We design a prototype implementation of
HoneyRoles using an OpenFlow SDN controller and evaluate its security using the
PRISM probabilistic model checker. Our performance evaluation shows that
HoneyRoles has a small effect on network request completion time and our
security analysis demonstrates that once an alert is raised, HoneyRoles can
quickly identify the compromised switch with high probability. In doing so, we
show that a role-based network deception is a promising approach for defending
against adversaries that have compromised network devices.

30
The categories of this paper are: q-alg
10
The categories of this paper are: q-bio
14
The categories of this paper are: math-ph
21
The categories of this paper are: adap-org
8
The categories of this paper are: hep-ex
33
The categories of this paper are: plasm-ph
37
The categories of this paper are: supr-con
29
The categories of this paper are: funct-an
20
The categories of this paper are: acc-phys
9
The categories of this paper are: nlin
28
The categories of this paper are: alg-geom
0
The categories of this paper are: hep-ph
36
The categories of this paper are: cmp-lg
17
The categories of this paper are: q-fin
35
The categories of this paper are: mtrl-th
24
The categories of this paper are: dg-ga