POSTER: Network Based Advanced Persistent Threat Attack Detection

Result code in IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216224%3A14330%2F14%3A00080507" target="_blank" >RIV/00216224:14330/14:00080507 - isvavai.cz</a>

Result on the web

—

DOI - Digital Object Identifier

—

Result language

angličtina

Original language name

POSTER: Network Based Advanced Persistent Threat Attack Detection

Original language description

For years businesses have striven to keep malware, spam and unwanted intruders at bay with varying degrees of success. Cyber criminals and spies in turn created more advanced means to breach the security measures. An APT is a form of multistep attack that is executed with more stealth and is targeted specifically to achieve a specific goal, most often espionage. This poster states research questions and propose a novel approach to intrusion detection system processes network traffic and able to detect potential APT attack. This detection of APT attack is based on the correlation between the events which we get them as outputs of our detection methods.

Czech name

—

Czech description

—

Type

O - Miscellaneous

CEP classification

IN - Informatics

OECD FORD branch

—

Project

<a href="/en/project/OFMASUN201301" target="_blank" >OFMASUN201301: CIRC - Mobile dedicated devices to fulfilling ability to respond to cyber incidents</a><br>

Continuities

P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)<br>S - Specificky vyzkum na vysokych skolach

Publication year

2014

Confidentiality

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů