Cyber deception allows firms to play adversaries at their own game – but how is it achieved?