  Cyber deception has recently received increasing attentions as a promising
mechanism for proactive cyber defense. Cyber deception strategies aim at
injecting intentionally falsified information to sabotage the early stage of
attack reconnaissance and planning in order to render the final attack action
harmless or ineffective. Motivated by recent advances in cyber deception
research, we in this paper provide a formal view of cyber deception, and review
high-level deception schemes and actions. We also summarize and classify recent
research results of cyber defense techniques built upon the concept of cyber
deception, including game-theoretic modeling at the strategic level,
network-level deception, in-host-system deception and cryptography based
deception. Finally, we lay out and discuss in detail the research challenges
towards developing full-fledged cyber deception frameworks and mechanisms.
