Deep Learning Based APT Attack Recognition
Advanced Persistent Threat (APT) attacks pose a significant challenge to network security due to their covert and persistent nature. This paper proposes a deep learning-based method to identify APT attacks. Our approach analyzes network traffic data and employs the concept of "data layer by layer reduction, information layer by layer confirmation" to scrutinize encrypted traffic, effectively reducing false alarms while accurately identifying threats. By leveraging deep learning technology, we can effectively detect APT attack patterns. Experimental results demonstrate that our method excels in detection accuracy and real-time performance, highlighting its strong practicality and generalizability.
Authors
- Qiong Deng (ORCID: https://orcid.org/0000-0003-0782-7740)
- Lian Fu
- Yan Liu (ORCID: https://orcid.org/0000-0003-4881-8429)
- Qiang Du (ORCID: https://orcid.org/0000-0002-6323-6446)
- Pan He (ORCID: https://orcid.org/0000-0002-6623-3048)
- Jinhai Zhang (ORCID: https://orcid.org/0000-0002-1721-684X)
- Rui Dai (ORCID: https://orcid.org/0009-0007-5259-8795)
Publication Details
- Published
- 2024-10-28
- DOI
- https://doi.org/10.1109/icsp62129.2024.10846302
- Primary Topic
- Network Security and Intrusion Detection
- Type
- article
- Field-Weighted Citation Impact
- 0.00