Deceptive Authentication Framework Using Honeyuser Accounts for Proactive Intrusion Detection in Web Applications

Today, web application authentication has become a prime target of brute force attacks (e.g. brute-forcing, credential stuffing, and guessing passwords); traditional security measures such as CAPTCHA, account lockouts, and rate-limiting typically respond only after some suspicious activity has been detected. This allows an attacker the opportunity to continue attempting to 'probe' the target login system before any form of defense can be enacted against them. This paper discusses LoginHive, a deception-based solution for authentication built using Django as the web environment/framework to implement the authentication service. By utilizing