# OSINT-Based LPC-MTD and HS-Decoy for Organizational Defensive Deception
## 3 Proposed Deception Models with Organizational OSINT, LPC-MTD and HS-Decoy
### Organizational Social Engineering Deception in the Proposed Model
#### 3.1.2 LPC-MTD
However, the limitations and related improvement plan are summarized, as follows:

* Reliability and practicality: to prevent legal disputes and comply with all research ethics, the presented comparative experiment results were constructed in a test bed using only public OSINT information that was provided by third parties as a public service. Because the experiment was conducted within a limited range of OSINT, the results of organizational deception in an actual environment may differ from those that were obtained in our experiment. In addition, since insertions and updates of OSINTs for major organizations within OSINT standardization modules have been performed for a long time, the availability problem will also remain in outlier adjustment and error reduction. * Scalability and operability: the proposed LPC-MTD and HS-Decoy-based applied deception research is based on the hierarchical OSINT complex module and CVE vulnerability module based on the social engineering OSINT information group. It only focused on the design, analysis, and optimization of a defendant superior information exposure type deception environment specialized in organizational traits, so domain scalability issues are likely to occur. Thus, it would be necessary to construct a formula and pseudo code unique to each organization, while also verifying the quantitative performance based on the organizational-specific attack-defense scenarios. Considerable targets include operating environments that are based on US Military and security standards. In addition, the OSINT and vulnerability DB for information exposure will also be customized according to the operating standards. * Strategicization: to advance the applied deception model in rapidly changing attack-defense scenarios and improve performance, the game theory strategy used in previous studies should be applied from the perspective of non-cooperative attack-defense competition relationships. To this end, it is necessary to consider the following: PBE-based Nash equilibrium, Stackelberg competition, asymmetric superiority and inferiority coordination signal strategy between the attacker and defender, Bayesian persuasion, FLIPT-based defender's strategy, and deceptive SIR. Moreover, the diversification of the organization surface to which the improved HS-Decoy and LPC-MTD were applied should also be performed quantitatively. * Surfaceization: because HS-Decoy and LPC-MTD have very high weights on the knowledge-based graph-based social engineering OSINT, a hierarchical weight subtraction and addition scheme will be needed according to the parameter trait in the OSINT. For this purpose, graph-based correlation analysis and information entropy analysis can also be considered. In addition, it is necessary to consider deception using detailed scenarios according to organizational goals as well as deception efficiency verification and optimization for a simple organizational operating environment. Therefore, the attack metrics in the CVE-based attack graph for the sensitivity analysis of each attack vector should be classified, as shown in Figures A3 and A4. ## 6 Conclusions

To improve and optimize the deception operation efficiency in the organizational environment, this study proposed an organizational OSINT-based HS-Decoy and a competitive exposure-based LPC-MTD. We also presented an integrated deception architecture combining the proposed concepts, multilayered processes, metrics, and variables. The experiments showed that the attack efficiency was 2.8 times less than that of existing MTD and decoys, while the artificial deception efficiency of the defender's superiority was 3.8 times better. We could also optimize the trade-off threshold while reducing the rate of increase of organizational overhead by 1.7 times. Consequently, we could derive the deceptive utilization of the OSINT concept, with LPC-MTD mutation cycle selectivity and error attenuation, and the practical reliability and operability improvement through the optimization of organizational HS-Decoy.