Honeywords: Making Password-Cracking Detectable

http://people.csail.mit.edu/rivest/pubs.html#JR13

Article from Forbes on deceptive defenses

A Different Approach To Foiling Hackers? Let Them In, Then Lie To Them.

Good ideas on booby traps from an old talk by MJR

Recently I was re-reading some of Marcus Ranum's old stuff (hint: it's still relevant and prescient) and came across:

"Tutorial notes for a briefing on the IDS approach of using policy-centric detectors (AKA "production honeypots")"

 It's got awesome great ideas on setting up improvised deceptive traps for attackers.