Canary Token
A decoy marker used to detect data leakage, typically a unique string that appears sensitive but is in fact useless, placed in fabricated data so that an alert is triggered once it is stolen and exfiltrated.
Timeline (last 90 days)
A canary token is a decoy marker used to detect data leakage, typically a unique string that looks sensitive but is actually useless, placed in forged secret files or data stores; when an attacker steals and transmits it externally, it triggers a monitoring system alert.
In the video case, the synchronization log recorded only one canary token hit, indicating that the attacker did indeed read the forged secret file, but there were no other abnormal logs besides that.
Using canary tokens (uniquely identifiable sentinel values) rather than ordinary content allows security testing to distinguish between "the guard was truly bypassed" and "the model restrained itself".
All Facts (3)
A canary token is a decoy marker used to detect data leakage, typically a unique string that looks sensitive but is actually useless, placed in forged secret files or data stores; when an attacker steals and transmits it externally, it triggers a monitoring system alert.
50%UnverifiedIn the video case, the synchronization log recorded only one canary token hit, indicating that the attacker did indeed read the forged secret file, but there were no other abnormal logs besides that.
50%UnverifiedUsing canary tokens (uniquely identifiable sentinel values) rather than ordinary content allows security testing to distinguish between "the guard was truly bypassed" and "the model restrained itself".
50%