Advanced Persistent Threats (APTs) pose a serious challenge to cybersecurity due to their stealthy and prolonged nature. Detecting these attacks early is critical, yet traditional methods often fail to catch subtle patterns or require extensive resources. This study investigates the effectiveness of several machine learning algorithms including Logistic Regression, Random Forest, Naive Bayes, and K-Nearest Neighbors (KNN) to identify APT behavior from system and network activity data. A significant focus was placed on reducing the complexity of the detection system without compromising accuracy. Dimensionality reduction using Linear Discriminant Analysis (LDA) was applied to transform high-dimensional data into a more manageable format, and data cleansing techniques were used to handle null and infinite values. The results showed that the KNN algorithm not only achieved the highest detection accuracy but also maintained performance even when trained on just 10% of the dataset. This approach offers a lightweight, high-precision method for APT detection that can minimize processing overhead while improving real-time responsiveness helping organizations enhance their security posture without sacrificing efficiency.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Detection of Advanced Persistent Threats Using Swift-KNN

  • Kshitij Gupte,
  • Kunj Patel,
  • Krisha Desai,
  • Dhrumi Patel,
  • Anjali Jivani

摘要

Advanced Persistent Threats (APTs) pose a serious challenge to cybersecurity due to their stealthy and prolonged nature. Detecting these attacks early is critical, yet traditional methods often fail to catch subtle patterns or require extensive resources. This study investigates the effectiveness of several machine learning algorithms including Logistic Regression, Random Forest, Naive Bayes, and K-Nearest Neighbors (KNN) to identify APT behavior from system and network activity data. A significant focus was placed on reducing the complexity of the detection system without compromising accuracy. Dimensionality reduction using Linear Discriminant Analysis (LDA) was applied to transform high-dimensional data into a more manageable format, and data cleansing techniques were used to handle null and infinite values. The results showed that the KNN algorithm not only achieved the highest detection accuracy but also maintained performance even when trained on just 10% of the dataset. This approach offers a lightweight, high-precision method for APT detection that can minimize processing overhead while improving real-time responsiveness helping organizations enhance their security posture without sacrificing efficiency.