APT Attack and Detection Technology
Chen Sheng, Gang Chen · 2024
APT, also called advanced long-term threat, aims at system destruction and information theft, has more political purposes, and seriously threatens national information security. Firstly, the characteristics of APT attack are summarized, the attack chain around the APT attack stage is analysed in detail, and the relevant techniques are listed; then, the APT attack detection techniques are summarized, and the advantages and disadvantages of APT attack detection techniques are summarized; finally, an algorithm is proposed for APT anomalous behaviour detection.