Research On APT Network Attacks And Defense Strategies

With the development of information transmission and Internet technology,networks bring enormous convenience to people’s life and work. However, as an opensystem, the Internet has aroused lots of criticism on its confidentiality and security. Ithas therefore become the most concern of many of the information security expertstoday how to better guarantee network information security.APT attack is a new type of hacker attacks, which is bringing more and moreserious harm to Internet information security. Existing means of defense are laggingbehind this new type of attack. Present domestic and overseas researchers mostlyfocus on the defense and use of some specific vulnerability, with a lack ofcomprehensive overall research, and many inadequacies exist in the current means ofdefense against APT.Guided by the technical defense theories of network information security,network attacks and defense strategies, we gradually discover the best defensestrategy against APT attacks through intensive analysis of the attack behaviors andattack codes of the spear phishing attacks.After having checked the latest literature and information on APT networkattacks in libraries and on the Internet, we did experiments on the attacking anddefense techniques of the APT attacks in a local-area network laboratory. The resultsof the experiments were recorded in this thesis, and the theories and techniques thusobtained were applied into practical network environment under continuousobservation in the practice of information security systems.