The Cost of Deception
Primary Investigator:
Gene Spafford
Jeffrey Avery, Christopher N. Gutierrez
Abstract
Limited research has been done to incorporate deception into software where it executes and exists alongside legitimate programs and data In 2015, MITRE published a model representing the deceptive development process. We propose an analysis of the cost of deception using this model and Microsoft’s Security Development Lifecycle to show the effect of integrating deception, identify cost heuristics at each stage of the deceptive lifecycle and provide insight to the feasibility of injecting deception into the software development.