Organizational Response to APT Attacks: Computational Analysis by Behavioral Network Modelling
摘要
This paper addresses computational analysis of defence against Advanced Persistent Threats (APTs). The analysis is done by a behavioural network model for simulating the relevant processes, including (1) the APT attack chain itself and adaptivity of it by learning both by the hackers and by the organisation, (2) the understanding of the process by the organisation, and (3) management of the organisational response. Several variations of simulation experiments and a What-If analysis have been applied, leading to risk assessment.