RAS-GNN: Reconstructing APT Attack Scenario Using Graph Neural Network
As a kind of multi-step attack, the APT attack is long-term, highly hidden, and usually exploits novel vulnerabilities. To detect and respond to APT attacks, security analysts need to analyze a large number of system logs and network traffic to determine the sequence of activities executed by APT at…