Comprehensive Advanced Persistent Threats Dataset
Due to the complex nature of Advanced Persistent Threats (APTs) and their rapid evolvement, comprehensive datasets are needed to understand them. However, acquiring such datasets remains a challenge due to the lack of precise reports describing the attacks, realistic emulation, the extensive attack diversity, and concerns regarding data privacy. In this letter, we built a testbed for APTs and implemented 23 campaigns for 12 APTs using MITRE Caldera. For each campaign, we share the adversary profile, the abilities, the low-level telemetries, and the MITRE techniques. By making this comprehensive dataset openly accessible, our work supports academia and industry to strengthen cybersecurity research and develop robust defenses against the constantly evolving APTs.
Authors
- Mourad Debbabi (ORCID: https://orcid.org/0000-0003-3015-3043)
- Chadi Assi (ORCID: https://orcid.org/0000-0002-3161-1846)
- Boubakr Nour (ORCID: https://orcid.org/0000-0001-5609-856X)
- Makan Pourzandi (ORCID: https://orcid.org/0000-0001-9775-6231)
- Abdussamad Syed
Institutions
- Ericsson (Canada) (CA)
- Concordia University (CA)
Publication Details
- Journal
- IEEE Networking Letters
- Published
- 2025-03-17
- DOI
- https://doi.org/10.1109/lnet.2025.3551989
- Citations
- 2
- Primary Topic
- Network Security and Intrusion Detection
- Type
- article
- Field-Weighted Citation Impact
- 2.97