Leveraging generative AI for dynamic file honeypots: Insights and implementation

In the field of cyber security, dynamic file honeypots serve as critical tools for detecting and analysing malicious activities, especially zero-day ransomware attacks. This paper explores the integration of generative AI (GenAI) with file honeypots to enhance their effectiveness. By dynamically generating virtual decoy content, these advanced honeypots deceive attackers and protect real data. The discussion includes technical aspects of implementing file honeypots, focusing on two primary cases: dynamically inserted virtual honeypot files and honeypot files wrapped around real protected files. The paper also outlines the benefits of using GenAI for realistic content generation, continuous adaptation and enhanced threat intelligence. This approach not only bolsters security measures but also reduces storage footprints and improves overall cyber security resilience.