Prevent irreparable damage? New options for protecting sensitive data are offered by the Decor project - an award-winning innovation from experts from the Electrical Engineering Faculty). The project won the Get Spin-off/Start-up Ready! program, which helps students and researchers turn their ideas into promising startups. According to the organizers, the quality of the submitted projects confirms that the metropolis has transformed into a significant Central European scientific center in this sphere.
The principle of the Decor project is that it uses artificial intelligence (AI) together with cyber deception defense procedures to detect, confuse and detain attackers in corporate networks. It provides defenders with a more timely overview of the attackers' activities, giving them more time to react adequately. According to experts, current protection is very reliable in defending against attacks from the outside, but the problem arises when the attacker already gets inside the network using stolen login data.
“Our goal is to create an environment that looks like a real company infrastructure, but is actually a controlled trap that will detect and detain the attacker,” explained one of the creators of Decor, Muris Sladić, a doctoral student at the Czech Technical University.
Trapped Intruder
The inspiration comes from traditional real-world conflicts, where deceiving the adversary has been part of defense for thousands of years. “This approach is just beginning to gain traction in cybersecurity. Our goal is to help organizations take control of what the attacker sees and believes,” explained Sebastian Garcia, head of Stratosphere Lab, another of the project’s authors.
According to specialists, time determines whether an attack ends in a minor incident or serious damage. “If we keep the attacker busy for two or three hours in a controlled environment, it can be the difference between a successful defense and a large-scale data leak,” summarized the two researchers.
The “artist” plays a significant role in a sophisticated solution. While AI helps defenders create convincing deception environments, the technology is increasingly being used by attackers. “AI significantly increases the capabilities of both defenders and attackers. Attacks are faster and more sophisticated than before. That’s why we believe AI must be part of the defense. Human teams alone can no longer respond quickly enough to everything that’s happening in networks,” said Sebastian Garcia.
His research group is currently finalizing a so-called minimum viable product, an initial version of the program with the most necessary functions, which serves as a basis for negotiations with potential customers. “The technology already works and has been tested both in laboratory conditions and in a limited real-world environment,” said Sladić.
Before deploying it in real-world situations, companies need to be sure that the solution will not pose any additional risks. That’s why the experts designed the system so that it doesn’t require the installation of additional hardware or software elements inside the protected organization. “According to the team, the first pilot deployment and verification in production environments could begin in the next few months,” said Radovan Suk from CTU.
The aforementioned Get Spin-off/Start-up Ready! program helps turn a student program into a successful startup – it offers participants cooperation with entrepreneurs, workshops and consultations. Applications for the next round can be submitted until September 8.
A sophisticated metropolis
Similar programs help experts no longer perceive us as providers of cheap projects, but rather as partners for technological development.
“Thanks to the dynamic startup system and the success stories of local technology companies and research projects, Prague has established itself among the fastest growing centers,” confirms Lenka Kučerová, director of the prg. ai organization, which operates in the field of research, education and use of AI in cooperation with academic, public and private companies.
The capital benefits from a unique combination of technical universities and a strong economic background. The technology sector here accounts for approximately 20 percent of Czech GDP and the IT industry is growing at a rate of over seven percent per year. According to experts, the key pillar is the Faculty of Czech Technical University, which produces approximately 30 percent of the research results of the entire Czech Technical University. 55 billion crowns are spent on research and science in Prague. 44 thousand people: Approximately that many people work in the field of science and research. 100 thousand crowns: Average gross monthly salary in the ICT sector.