An Innovative Mechanism to Detect APT Attacking

Aiming at the challenging difficulty that APT attacks are highly hidden and difficult to detect effectively and find in time, this paper proposes a mechanism that can timely and reliably perceive APT attack existing in computer systems. The mechanism adopts two computers to form a matching system with running environment symmetry, external input symmetry and attack feedback asymmetry. Basing on the difference comparison of the output signals of the two computer networks, it can effectively perceive the existence of highly hidden attacks, and this perception ability has the characteristics of strong real-time, high sensitivity and cannot be tampered by any software method.