Advanced persistent threat detection: a survey

• Main Authors: Khalid, A., Zainal, A., Maarof, M. A., Ghaleb, F. A.
• Format: Conference or Workshop Item
• Language: English
• Published: 2021
• Subjects: QA75 Electronic computers. Computer science
• Online Access: http://eprints.utm.my/id/eprint/96029/1/AdamKhalid2021_AdvancedPersistentThreatDetection.pdf; http://eprints.utm.my/id/eprint/96029/; http://dx.doi.org/10.1109/CRC50527.2021.9392626

Advanced Persistent Threat is a very sophisticated targeted attack aimed at organizations. Several approaches have been proposed to detect APT. This paper defines an APT as an attack that has certain objectives to be achieved, and are performed by well-funded organizations, and is long term campaign. In this paper we have identified APT as a threat that follows a kill chain process. Intrusion detection and intrusion detection methods are summarized in this paper. Detection of an APT is a challenge. In this paper various detection methods used by researchers and the challenges in detecting APT is highlighted.