Tracing Attacks on Advanced Persistent Threats in Networked Systems

FIRST Seminar (Room 1&2)

Wednesday — November 14th, 2012 16:00

We discuss a countermeasure against APTs (Advanced Persistent Threats). The proposed method enables efficient planning of defense strategies to counter APTs. And the method supplies us a powerful tool to trace APT attacks in network systems. A model of APT attack techniques and a network system model under APT are proposed. We design and develop a prototype system of simulator which traces the behaviors of APT attacks on network systems that consist of several servers and network equipments. We describe a network model and research related to a malware working model. And also, we demonstrate the prototype system to trace the behaviors of APT attacks on a simple network system.

Presenters

• Hiroshi Koide (Kyushu Institute of Technology, IPA, JP)