Proposed models for advanced persistent threat detection: A review

Abstract

Advanced Persistent Threat is a sophisticated, targeted attack. This threat represents a risk to all organisations, specifically if they manage sensitive data or critical infrastructures. Recently, the analysis of these threats has caught the attention of the scientific community. Researchers have studied the behaviour of this threat to create models and tools that allow early detection of these attacks. The use of Artificial Intelligence can help to detect, alert and automatically predict these types of threats and reduce the time the attacker can stay on a network organisation. The objective of this work is a review of the proposed models to identify the tools and methods that they have used.