L. Andersen

Early Warning of Advanced Persistent Threats Through Enterprise Network Behavior Profiling

Advanced persistent threats often begin with low-volume and stealthy network activities, such as reconnaissance, command-and-control beaconing, credential probing, and slow data staging. These behaviors are difficult to detect because they may not produce obvious traffic spikes or signature-matching patterns. This stud...