Advanced Persistent Threat Detection: A Survey
Adam Khalid, Anazida Zainal, Mohd Aizaini Maarof, Fuad A. Ghaleb
Abstract
Advanced Persistent Threat is a very sophisticated targeted attack aimed at organizations. Several approaches have been proposed to detect APT. This paper defines an APT as an attack that has certain objectives to be achieved, and are performed by well-funded organizations, and is long term campaign. In this paper we have identified APT as a threat that follows a kill chain process. Intrusion detection and intrusion detection methods are summarized in this paper. Detection of an APT is a challenge. In this paper various detection methods used by researchers and the challenges in detecting APT is highlighted.
Topics & Concepts
Intrusion detection systemComputer scienceComputer securityProcess (computing)Intrusion prevention systemOperating systemNetwork Security and Intrusion DetectionAdvanced Malware Detection TechniquesInformation and Cyber Security