Advanced persistent threat detection: a survey

Advanced Persistent Threat is a very sophisticated targeted attack aimed at organizations. Several approaches have been proposed to detect APT. This paper defines an APT as an attack that has certain objectives to be achieved, and are performed by well-funded organizations, and is long term campaign...

Full description

Saved in:
Bibliographic Details
Main Authors: Khalid, A., Zainal, A., Maarof, M. A., Ghaleb, F. A.
Format: Conference or Workshop Item
Language:English
Published: 2021
Subjects:
Online Access:http://eprints.utm.my/id/eprint/96029/1/AdamKhalid2021_AdvancedPersistentThreatDetection.pdf
http://eprints.utm.my/id/eprint/96029/
http://dx.doi.org/10.1109/CRC50527.2021.9392626
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Advanced Persistent Threat is a very sophisticated targeted attack aimed at organizations. Several approaches have been proposed to detect APT. This paper defines an APT as an attack that has certain objectives to be achieved, and are performed by well-funded organizations, and is long term campaign. In this paper we have identified APT as a threat that follows a kill chain process. Intrusion detection and intrusion detection methods are summarized in this paper. Detection of an APT is a challenge. In this paper various detection methods used by researchers and the challenges in detecting APT is highlighted.