Panahnejad, Maryam ; Mirabi, Meghdad (2022)
APT-Dt-KC: advanced persistent threat detection based on kill-chain model.
In: Journal of Supercomputing, 78 (6)
doi: 10.1007/s11227-021-04201-9
Artikel, Bibliographie
Kurzbeschreibung (Abstract)
Advanced persistent threat attacks are considered as a serious risk to almost any infrastructure since attackers are constantly changing and evolving their advanced techniques and methods. It is difficult to use traditional defense for detecting the advanced persistent threat attacks and protect network information. The detection of advanced persistent threat attack is usually mixed with many other attacks. Therefore, it is necessary to have a solution that is safe from error and failure in detecting them. In this paper, an intelligent approach is proposed called “APT-Dt-KC” to analyze, identify, and prevent cyber-attacks using the cyber-kill chain model and matching its fuzzy characteristics with the advanced persistent threat attack. In APT-Dt-KC, Pearson correlation test is used to reduce the amount of processing data, and then, a hybrid intrusion detection method is proposed using Bayesian classification algorithm and fuzzy analytical hierarchy process. The experimental results show that APT-Dt-KC has a false positive rate and false negative rate 1.9 and 3.6 less than the existing approach, respectively. The accuracy and detection rate of APT-Dt-KC has reached 98 with an average improvement of 5 over the existing approach.
| Typ des Eintrags: | Artikel |
|---|---|
| Erschienen: | 2022 |
| Autor(en): | Panahnejad, Maryam ; Mirabi, Meghdad |
| Art des Eintrags: | Bibliographie |
| Titel: | APT-Dt-KC: advanced persistent threat detection based on kill-chain model |
| Sprache: | Englisch |
| Publikationsjahr: | 1 April 2022 |
| Verlag: | Springer |
| Titel der Zeitschrift, Zeitung oder Schriftenreihe: | Journal of Supercomputing |
| Jahrgang/Volume einer Zeitschrift: | 78 |
| (Heft-)Nummer: | 6 |
| DOI: | 10.1007/s11227-021-04201-9 |
| Kurzbeschreibung (Abstract): | Advanced persistent threat attacks are considered as a serious risk to almost any infrastructure since attackers are constantly changing and evolving their advanced techniques and methods. It is difficult to use traditional defense for detecting the advanced persistent threat attacks and protect network information. The detection of advanced persistent threat attack is usually mixed with many other attacks. Therefore, it is necessary to have a solution that is safe from error and failure in detecting them. In this paper, an intelligent approach is proposed called “APT-Dt-KC” to analyze, identify, and prevent cyber-attacks using the cyber-kill chain model and matching its fuzzy characteristics with the advanced persistent threat attack. In APT-Dt-KC, Pearson correlation test is used to reduce the amount of processing data, and then, a hybrid intrusion detection method is proposed using Bayesian classification algorithm and fuzzy analytical hierarchy process. The experimental results show that APT-Dt-KC has a false positive rate and false negative rate 1.9 and 3.6 less than the existing approach, respectively. The accuracy and detection rate of APT-Dt-KC has reached 98 with an average improvement of 5 over the existing approach. |
| Fachbereich(e)/-gebiet(e): | 20 Fachbereich Informatik 20 Fachbereich Informatik > Data and AI Systems |
| Hinterlegungsdatum: | 08 Feb 2023 09:32 |
| Letzte Änderung: | 07 Jun 2023 07:02 |
| PPN: | 508365775 |
| Export: | |
| Suche nach Titel in: | TUfind oder in Google |
 |
Frage zum Eintrag |
Optionen (nur für Redakteure)
 |
Redaktionelle Details anzeigen |
Drucken
Impressum