Detecting APT attacks based on Network Flow
Lai Van Duong · International Journal of Emerging Trends in Engineering Research · 2020
APT attack technique is an advanced and targeted attack technique.This attack technique has been recognized as one of the cyber attacks trend in the world for many years.Therefore, the task of the early detection of APT attacks in information security systems is very necessary today.In this paper, we propose a method of detecting APT attacks based on network flow analysis.Accordingly, network traffic data will be processed into flow networks.Then we use machine learning algorithms to analyze network flow in order to find signs of APT attacks in the system.