In cybersecurity, a dead end is a path, clue, or resource that consumes an attacker’s time or effort without advancing them toward their objective. It may be an accidental obstacle or a deliberately planted decoy, such as misleading content designed to divert an AI agent exploring an environment.
Dead ends can delay an attack and give defenders more time to detect suspicious activity, but they do not block access or fix vulnerabilities. Their effectiveness depends on whether an attacker follows the false trail and whether the distraction is monitored. Defenders should use decoys alongside controls such as least privilege, logging, and network restrictions-not as a substitute for them.