paperJuly 2026Unreviewed

Agentic Cloud Decoys: A Deception-Driven Framework for Autonomous Intrusion Investigation

Mohan Manivannan, Dalal Alharthi

Abstract

Cloud telemetry arrives at a scale that, paradoxically, makes intrusion understanding harder rather than easier. Attackers operate through legitimate identity, federated session tokens, and cloud native APIs indistinguishable from routine administration, and analysts spend an incident reconstructing context the logs already contain. We present Cloud Decoy AI Agent, a framework pairing a high fidelity cloud decoy with an autonomous language model agent that compresses the path from suspicious act

Cite

@misc{manivannan2026agentic,
  title = {{Agentic Cloud Decoys: A Deception-Driven Framework for Autonomous Intrusion Investigation}},
  author = {Mohan Manivannan and Dalal Alharthi},
  year = {2026},
  month = jul,
  eprint = {2607.24006},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2607.24006}
}