Understanding APT detection using Machine learning algorithms: Is superior accuracy a thing?
Sydul Arefin, Md Minhaz Chowdhury, Rezwanul Parvez, Tanvir Ahmed, Abid Abrar, FNU Sumaiya
Abstract
In the evolving landscape of cybersecurity, the detection of Advanced Persistent Threats (APTs) remains a formidable challenge, where conventional methods often falter in the noise of ever-advancing evasion techniques. This study introduces a groundbreaking model poised at the vanguard of APT detection, leveraging the synergy of sophisticated machine learning algorithms to outperform traditional classifiers. By meticulously engineering features and employing state-of-the-art neural architectures, our proposed model demonstrates superior proficiency, evidenced by a remarkable accuracy of 96.9%. This performance eclipses the notable yet lower accuracies of established contenders, such as MLPClassifier (94.5%) and Gradient Boosting (92.3%), and significantly outstrips the baseline KNN model’s 76.6%. Our comparative analysis not only presents the effectiveness of integrating domain-specific insights into algorithmic design but also sets a new benchmark in APT detection, potentially revolutionizing the field’s approach to safeguarding digital infrastructures.