Machine Learning based Advanced Persistent Threat Attack Detection System
Aswathi Radhakrishnan K M · Zenodo (CERN European Organization for Nuclear Research) · 2023
An advanced persistent threat [APT] is a multistage selective attack that obtains unauthorised access to data and correspondence frameworks to channel classified information or cause harm to an organization, industry, or government association. In most of the situations where APT is successfully organized and ready to attack, defending against APT is too late, especially in the last phase. In the context of such long-term and undetected attacks, detection of these attacks based on the attack life cycle is important. Several approaches including machine learning techniques have been proposed to improve the problem of detection.