What is a Deterrent Cybersecurity Control?

Definition and Core Concept

Deterrent controls in cybersecurity are measures or tools designed to discourage potential attackers from targeting a system or network. Rather than actively preventing or detecting an attack, their main goal is to dissuade malicious actors by increasing the perceived risk or reducing the potential reward.

Role in a Layered Security Approach

Cybersecurity strategies often adopt a multi-layered approach:

• Preventive Controls: Actively block unauthorized activities.
• Detective Controls: Identify and alert about malicious activities.
• Corrective Controls: Rectify the impact of an incident.
• Deterrent Controls: Sit at the initial phase, aiming to discourage attackers even before they begin their malicious activities.

Examples of Deterrent Controls

A few common examples:

• Warning Banners: Messages displayed on login screens, warning unauthorized users of potential legal consequences.
• Fake Honey Tokens: Decoy data or traps that seem valuable but are set to detect unauthorized access.
• Visible Surveillance: Indicators that network activity is being monitored, like CCTV cameras or “Monitored by XYZ Security” signs.

Strengths and Limitations

Some points to consider:

• Strengths: By deterring a significant portion of potential attackers, especially less sophisticated ones, deterrent controls reduce the number of attacks that other security layers need to handle.
• Limitations: Deterrents may not be as effective against determined and highly skilled adversaries. They are best used in combination with other types of controls.

Importance in the Cybersecurity Landscape

In an environment where threats are increasing:

• Psychological Play: Deterrents play on the psychology of potential attackers, making them think twice before proceeding.
• Cost-Effective: While not foolproof, deterrent controls can be a cost-effective way to reduce the number of casual or opportunistic attacks.
• Supporting Role: They reinforce other cybersecurity controls by adding an additional layer that potential attackers have to consider.

Conclusion

Deterrent cybersecurity controls, while not the primary line of defense, play a pivotal role in a comprehensive security strategy. By increasing the perceived risks for attackers and making malicious activities seem less attractive, they contribute significantly to the overall cybersecurity posture of an organization.