Our latest episode features Kevin Conley, Team Lead and Principal Security Engineer of the Deception Technology team at Riot Games, who has built their canary program from the ground up over the past few years.

Kevin has spent years deploying and running deception at massive scale - protecting one of the world's largest gaming platforms with hundreds of millions of players. He brings practical experience from building the program and operating it day-to-day.

In this episode, Kevin breaks down why thinking like an attacker is fundamental to effective canary placement, how to measure deception program success, and the psychological impact of deception on attackers.

Timestamps:

00:00 Intro01:32 Defining terms: canaries, decoys, honeypots, and deception03:40 Kevin's journey to leading deception at Riot Games05:40 Adopting an attacker's perspective: the fundamental mindset shift07:46 Why benign positives validate your canary placement08:50 Catching malicious activity and discovering unexpected environment usage15:06 Measuring success: coverage and validation17:59 Blind red team exercises and attacker awareness20:02 The psychological power of deception on attackers24:29 Catching attackers early in the attack chain25:51 The ROI case: deploying where traditional tools can't reach29:57 What to communicate internally about your deception program38:35 Why the honeypots misconception hurts deception teams39:46 Making the case: why every security team should use canaries41:48 When to adopt deception in your security journey43:58 The future of deception: redefining it as active defense46:47 Closing

Aflevering-ID: 1000749074965

GUID: 68ec8ed8-d27c-41d7-8f39-d8b004cf229b

Releasedatum: 10-2-2026 12:30:00