Active cyber defense techniques and performance analysis

In this study, cyber-attacks that it increases in direct proportion with the areas of information systems and depending on their importance have been studied. Phases of advanced persistent threat (APT) have been examined within cyber kill chain. Examples of advanced persistent threat are given. Moreover, the idea that active cyber defense methods can be used in addition to traditional security solutions that have been inadequate against to APT has been advocated under cover of literature. Deception, slow down and counter attack techniques can be used within the scope of active cyber defense, has explained. To show counter attack and slow down effects of active cyber defense in the laboratory was established in project has tried. In addition, examples of Active Defense Harbinger Distribution (ADHD) virtual machine, equipped with tools for active cyber defense, how to use for active defense have attempted in laboratory. Positive effects of the experiments conducted in the laboratory against to cyber-attacks has been observed. As a result, active cyber defense techniques how it can be used in public institutions to improve national security has been discussed. Legal risks of implementation of active cyber defense has been mentioned.