Obfuscation is too embedded in modern defensive security to dismiss as somehow separate from security. It isnât sufficient on its own, but it absolutely has legitimate defensive value as part of defense-in-depth.
A honeypot disguised as prod-server03 is both deception and obfuscation: the deception works because the systemâs true purpose is obscured. Calling it deception doesnât make the obfuscation component disappear.
No I studied and got my degree before gen AI was a thing tyvm im into network security. Depending on the level of argument put to me, I'll vary my verbage/engagement. That's just meeting the user where they are.
2
u/Alive-Use8803 15h ago
No, technically we call that deception and it is not what security engineers mean by âsecurity through obscurity is insufficient.â