CTU-HONEYEVAL-26: Infrastructure Deception Codebook, Decision Rules, and Per-Technique Assessments for MITRE ATT&CK v18.1
Year: 2026
Type: preprint
Abstract: A dataset assessing where passive infrastructure deception can be deployed across the MITRE ATT&CK® Enterprise matrix. Every technique/tactic entry in ATT&CK v18.1 is scored on four criteria (Feasibility, Interaction, Intelligence Yield, Malice Fidelity) against a frozen rubric, with a written rationale per entry. This archive accompanies the paper: Valeros, V., Catania, C., Lisý, V., Griffioen, H. *Decoys Cannot Go Everywhere: Mapping the Deception Surface in MITRE ATT&CK*. Headline finding: 80 of 250 technique/tactic entries (~32%) are feasible deception surfaces. For the remaining 170, no defender-controlled asset exists in the attacker's path that can be fabricated as a decoy.
Source: arXiv (Cornell University)
Author: Valeros, Veronica
Institution: Czech Technical University in Prague
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
OpenAlex ID: W7166902847
Cites:
Cited by:
Related to: