Overview

Founded by former nation-state attackers to stop other attackers, the mission of Illusive Networks is to deliver deception-based technology to detect and stop human-driven cyberattacks early in the breach process before they can do damage.

Insiders are potentially more dangerous than the outside attacker because they already have a degree of trusted access and direct insight into an organization’s crown jewels. But in most cases, the nefarious insider must first snoop around file systems and acquire credentials to connect to systems they aren’t authorized to access – just like an outside attacker. This lateral movement prevention is key to stopping any type of attacker.

Illusive’s inescapable deception technology is designed to directly address the “living off the land” tactics of today’s threat actors, who shroud their reconnaissance, lateral movement and activity in legitimate connectivity and credentials to evade detection. By detecting underlying attacker behavior through deceptive data meant to fool attackers into engagement, Illusive’s technology is not reliant on known threat signatures, nor does it have the potential to fall behind as new malware and attack tools evolve.

Instead of alerting on policy violations or relying on complex data analytics, a deception approach provides a very simple method to identify malicious behavior by detecting the actions attackers must use to find and move toward valuable assets. Once a bad actor engages with a deceptive file, they’ll trigger a notification filled with detail rich source forensics. Armed with this incontrovertible evidence, the organization will be well armed to take appropriate action.