  Deceptive elements, including honeypots and decoys, were incorporated into
the Microsoft CyberBattleSim experimentation and research platform. The
defensive capabilities of the deceptive elements were tested using
reinforcement learning based attackers in the provided capture the flag
environment. The attacker's progress was found to be dependent on the number
and location of the deceptive elements. This is a promising step toward
reproducibly testing attack and defense algorithms in a simulated enterprise
network with deceptive defensive elements.
