Active Cyber Defense

Active cyber defenses (ACD) can help address the attacker's asymmetric advantage. ACD emphasizes proactive countermeasures aimed at counteracting the immediate effects of incidents. The ACD approach combines countermeasures designed for real-time threat detection and mitigation with the capability of taking offensive actions against threats. Defenders can take these offensive actions within or outside of their network. Organizations can use ACD tactics to counter attacks by detecting and stopping attacks or concealing target devices to counter espionage. ACD covers a broad spectrum of tactics and techniques, ranging from ones that raise little or no legal or ethical issues to ones that organizations must avoid.