返回
Machine Learning for APT Detection
DOI:10.3390/su151813820.png)
摘要
En 中文
Nowadays, countries face a multitude of electronic threats that have permeated almost all business sectors, be it private corporations or public institutions. Among these threats, advanced persistent threats (APTs) stand out as a well-known example. APTs are highly sophisticated and stealthy computer network attacks meticulously designed to gain unauthorized access and persist undetected threats within targeted networks for extended periods. They represent a formidable cybersecurity challenge for governments, corporations, and individuals alike. Recognizing the gravity of APTs as one of the most critical cybersecurity threats, this study aims to reach a deeper understanding of their nature and propose a multi-stage framework for automated APT detection leveraging time series data. Unlike previous models, the proposed approach has the capability to detect real-time attacks based on stored attack scenarios. This study conducts an extensive review of existing research, identifying its strengths, weaknesses, and opportunities for improvement. Furthermore, standardized techniques have been enhanced to enhance their effectiveness in detecting APT attacks. The learning process relies on datasets sourced from various channels, including journal logs, traceability audits, and systems monitoring statistics. Subsequently, an efficient APT detection and prevention system, known as the composition-based decision tree (CDT), has been developed to operate in complex environments. The obtained results demonstrate that the proposed approach consistently outperforms existing algorithms in terms of detection accuracy and effectiveess.
Keyword:
APT
attacks
artificial intelligence
CDT
期刊
IF:
3.3
论文数:
10.6W
被引数:
28.4W
机构
引用论文
Cytokinin influence on in vitro shoot induction and genetic stability assessment of Dendrocalamus latiflorus Munro: a commercially important bamboo in Manipur, North-East India
Vegetos
IF0
A Comprehensive Review of Unmanned Aerial Vehicle Attacks and Neutralization Techniques
AD HOC NETWORKS
IF4.8

