Advanced Persistent Threat: New analysis driven by life cycle phases and their challenges
Advanced Persistent Threat: New analysis driven by life cycle phases and their challenges
复制标题
高级持续威胁：由生命周期阶段及其挑战驱动的新分析
DOI：
10.1109/acosis.2016.7843932
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
M. Sadik
中科院分区：
文献类型：
--
作者：
Brahim I. D. Messaoud;K. Guennoun;M. Wahbi;M. Sadik
在一个参与网络攻击的高技能参与者不断增加，相关地下市场不断扩大的世界中，组织应该调整其防御战略，并因此改善其安全事件管理。在本文中，我们概述了安全专家定义的高级持续性威胁（APT）攻击生命周期。我们引入了自己的编译生命周期模型，由攻击者的目标，而不是他们的行动。突出强调了与在模型的每个APT阶段结束时执行的特定伪装行动有关的挑战和机遇。我们还概述了新的APT保护技术，并讨论了它们在每个生命周期阶段的有效性。
In a world where highly skilled actors involved in cyber-attacks are constantly increasing and where the associated underground market continues to expand, organizations should adapt their defence strategy and improve consequently their security incident management. In this paper, we give an overview of Advanced Persistent Threats (APT) attacks life cycle as defined by security experts. We introduce our own compiled life cycle model guided by attackers objectives instead of their actions. Challenges and opportunities related to the specific camouflage actions performed at the end of each APT phase of the model are highlighted. We also give an overview of new APT protection technologies and discuss their effectiveness at each one of life cycle phases.