Developing Apt Attacks Detection System Based o n Correlation Analysis Methods

Abstract

Advanced Persistent Threat (APT) is an exceptionally perilous attack with a specific target and purpose. It consists of various complex and devious techniques in order to be able to obtain a highly secured trade secret, sensitive information. Currently, the APT attack is tremendously difficult to deal with because of its unique design for each target, which makes prior experiences and rules less accurate in detecting APT attacks. In addition, the APT detection method also must not rely on any single procedures or solutions but to include several phases and technologies. On the other hand, correlation analysis technique is a mathematic one which figures how separate elements affect each other and produces conclusion based on multiple factors mutual properties. Hence, in this report, correlation analysis technique is proposed by the authors.