| Title | Modeling an Information-Based Advanced Persistent Threat Attack on the Internal Network |
| Publication Type | Conference Paper |
| Year of Publication | 2019 |
| Authors | Yan, Dingyu, Liu, Feng, Jia, Kun |
| Conference Name | ICC 2019 - 2019 IEEE International Conference on Communications (ICC) |
| Keywords | advanced persistent threat, APT, APT attack, computer network security, cyberattack, decision making, defense mechanism ineffective, Human Behavior, IEL, information-based advanced persistent threat attack, information-based APT attack, initial entry model, intelligence gathering, internal network, invasive software, lateral movement, mathematical framework, Mathematical model, Metrics, pubcrawl, Reconnaissance, resilience, Resiliency, Scalability, Silicon, strategy decision-making, weaponization movement, Weapons |
| Abstract | An advanced persistent threat (APT) attack is a powerful cyber-weapon aimed at the specific targets in cyberspace. The sophisticated attack techniques, long dwell time and specific objectives make the traditional defense mechanism ineffective. However, most existing studies fail to consider the theoretical modeling of the whole APT attack. In this paper, we mainly establish a theoretical framework to characterize an information-based APT attack on the internal network. In particular, our mathematical framework includes the initial entry model for selecting the entry points and the targeted attack model for studying the intelligence gathering, strategy decision-making, weaponization and lateral movement. Through a series of simulations, we find the optimal candidate nodes in the initial entry model, observe the dynamic change of the targeted attack model and verify the characteristics of the APT attack. |
| DOI | 10.1109/ICC.2019.8761077 |
| Citation Key | yan_modeling_2019 |
Modeling an Information-Based Advanced Persistent Threat Attack on the Internal Network