The Use and Legality of Honeypots, Tracers and Trackers in Active Cyber Defence

Australia, as an open market economy and democracy, is both dependent and reliant on the internet and online security for its prosperity, way of life and the functioning of our democracy. Cybersecurity, as a prerequisite for ever-increasing interconnectivity, is under assault from cyber-attacks and malicious cyberactivity being conducted by states and ‘hybrid actors’, such as cybercriminals and syndicates.

Cyber-attacks pose a serious threat to the security and integrity of entities, especially when they involve trusted insiders who have access to sensitive data and systems. To counter this threat, this paper proposes that use of active cyber defence (ACD) – such as fake files and credentials that alert the security team when accessed by unauthorised users or tracking devices that report the network activity and location of genuine trading information – can deter and detect malicious actors, often more efficiently and effectively than other methods alone.