Scholarlink

This work proposes a framework for generating datasets that allows users to adjust the APT attack techniques within it. The framework utilizes the MITRE ATT&CK framework to label the attack traffic based on the Tactics, Techniques, and Procedures (TTP), which facilitating researchers in using the datasets for model training. Meanwhile, this work uses the framework to reconstruct the APT29 attack process and collect a dataset to validate the framework’s feasibility.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Automatic APT Attack Reconstruction Supporting Lateral Movement

  • 会议论文

  • 发表日期：

    2025年

查看全文
  • Chun-I Fan,
  • Wei-Chen Wu,
  • Cheng-Han Shie,
  • Hsin-Nan Kuo,
  • Bo-Yi Lee

摘要

This work proposes a framework for generating datasets that allows users to adjust the APT attack techniques within it. The framework utilizes the MITRE ATT&CK framework to label the attack traffic based on the Tactics, Techniques, and Procedures (TTP), which facilitating researchers in using the datasets for model training. Meanwhile, this work uses the framework to reconstruct the APT29 attack process and collect a dataset to validate the framework’s feasibility.