A Study on Advanced Persistent Threats

Ping Chen (1) , Lieven Desmet (1) , Christophe Huygens (1)

1 KU Leuven - Catholic University of Leuven = Katholieke Universiteit Leuven

A recent class of threats, known as Advanced Persistent Threats (APTs), has drawn increasing attention from researchers, primarily from the industrial security sector. APTs are cyber attacks executed by sophisticated and well-resourced adversaries targeting specific information in high-profile companies and governments, usually in a long term campaign involving different steps. To a significant extent, the academic community has neglected the specificity of these threats and as such an objective approach to the APT issue is lacking. In this paper, we present the results of a comprehensive study on APT, characterizing its distinguishing characteristics and attack model, and analyzing techniques commonly seen in APT attacks. We also enumerate some non-conventional countermeasures that can help to mitigate APTs, hereby highlighting the directions for future research.

Mots clés: advanced threat; APT; sophisticated attacks; cyber security

Domaines: Informatique [cs]; Réseaux et télécommunications [cs.NI]

Ping Chen, Lieven Desmet, Christophe Huygens. A Study on Advanced Persistent Threats. 15th IFIP International Conference on Communications and Multimedia Security (CMS), Sep 2014, Aveiro, Portugal. pp.63-72, ⟨10.1007/978-3-662-44885-4_5⟩. ⟨hal-01404186⟩