Core Security & AI Solutions

Products

Next-Generation Attack Deception Defense and Traceback System (DecoyPro)

Introduction

The Attack Deception Defense and Traceback System (DecoyPro) is an intelligent deception defense product built upon NEXCORE's self-innovated Twin Deception Network technology. It can rapidly generate highly realistic decoy environments closely aligned with the user's actual infrastructure. Featuring high-fidelity simulation, adaptive deception, comprehensive analysis, and multi-method traceback capabilities, DecoyPro is widely applicable for network security detection and defense in enterprises, institutions, and organizations.

This product effectively addresses the weaknesses of traditional network security defense solutions, changes the asymmetric nature of attack and defense, shifts from passive to active defense, and enhances proactive network security protection capabilities.

System Architecture

Features

Computing Environment Emulation: Full-scenario simulation of networks, devices, systems, software, services, and middleware.
Attack Behavior Deception: Virtual IPs, traffic forwarding, Trunk deployment, and auto decoy creation.
Attack Detection & Analysis: Multi-engine analysis with behavior baselining, correlation, signatures, and threat intelligence.
Attack Traceback & Forensics: Profiling with browser fingerprints, virtual identities, attack methods, and honeytoken countermeasures.
Attack Response & Handling: Multi-channel alerts, intelligent output, API integration for defense collaboration.
Centralized Management Center: Unified node and event management with 3D visualization.

Advantages

Twin Deception Network Technology: Built on heterogeneous honeynets, SDN, simulation, deception twins, and automation.
High-Fidelity Simulation: Distributed simulation with VM, container, software clones, web mirroring, and visual orchestration.
Adaptive Deception: Automatically updates deception network based on asset mapping, XDR alerts, and attack trends.
Comprehensive Analysis: Multi-dimensional monitoring and analysis of system and attack behavior.