"All warfare is based on deception. Hence when able to attack, we must seem unable; when using our force, we must seem inactive..." Sun Tsu Our adversaries are skilled in deception -- we as defenders must become skilled as well. This talk will provide information to defenders on the importance of deception as part of our defense in depth strategy. Why should the Red Team have all the fun? Let's explore the tools, techniques, and processes that Blue Team can utilize to detect, deceive, detour, confound, confuse, and corral our attackers. Topics we will discuss will include the goals of deception from the perspective of both the attacker and defender. Defenders will learn the elements, and processes needed to plan, prepare, execute, and monitor effective deception. We will discuss the types of deception techniques that are effective and how they translate into actual web application capabilities. You will learn how to identify and respond to various types of attackers. Finally, we will walk through an example of a deceptive web application that will detect our attacker and sideline them in defense of our web application.