>I think camouflage and decoys are useful analogies. Indeed I've found that most military analogies work quite well for infosec! >Not because I think it makes

>I think camouflage and decoys are useful analogies. Indeed I've found that most military analogies work quite well for infosec! >Not because I think it makes me any more secure, but because it allows me to either ignore all the automated scans/connections to port 22 altogether, or to proactively blackhole any ip address who attempts to connect to a decoy port 22... This is another excellent point. Not only are we fuzzing the signal with respect to automated attacks, we're also improving the signal-to-noise ratio in our own security analyses.