LTRDetector: Exploring Long-Term Relationship for Advanced Persistent Threats Detection

arXiv:2404.03162v1 Announce Type: new
Abstract: Advanced Persistent Threat (APT) is challenging to detect due to prolonged duration, infrequent occurrence, and adept concealment techniques. Existing approaches primarily concentrate on the observable traits of attack behaviors, neglecting the intricate relationships formed throughout the persistent attack lifecycle. Thus, we present an innovative APT detection framework named LTRDetector, implementing an end-to-end holistic operation. LTRDetector employs an innovative graph embedding technique to retain comprehensive contextual information, then derives long-term features from these embedded provenance graphs. …

advanced advanced persistent threat advanced persistent threats apt arxiv attack concealment cs.cr detect detection lifecycle observable persistent persistent threat persistent threats relationship relationships techniques threat threats