Exploration of Mobile Device Behavior for Mitigating Advanced Persistent Threats (APT): A Systematic Literature...

Area of Science:

• Computer Science
• Cybersecurity
• Network Security

Background:

• The rapid expansion of the Internet of Things (IoT) and fog computing has led to increased cybersecurity risks, including Advanced Persistent Threats (APTs).
• APTs pose significant threats to the confidentiality, integrity, and availability (CIA) of information by manipulating device behavior and applications.
• Existing cybersecurity measures require comprehensive evaluation against sophisticated APT attacks targeting IoT devices.

Purpose of the Study:

• To conduct a Systematic Literature Review (SLR) on existing APT defense mechanisms for IoT environments.
• To identify research gaps and propose future research directions in APT mitigation strategies.
• To analyze the effectiveness of various cybersecurity defense mechanisms against APTs.

Main Methods:

• A Systematic Literature Review (SLR) methodology was employed.
• Analysis of 112 research papers published between 2011 and 2022.
• Evaluation of cybersecurity defense mechanisms and cutting-edge solutions against APTs.

Main Results:

• The review identified various approaches to cybersecurity defense against APTs.
• Effectiveness of different defense strategies in mitigating APTs was explored.
• Key research gaps in current APT defense mechanisms were highlighted.

Conclusions:

• The study recommends the Observe-Orient-Decide-Act (OODA) Situational Awareness (SA) model for comprehensive APT mitigation.
• Implementing the OODA model can enhance device behavior monitoring for improved cybersecurity.
• Further research is needed to develop and validate advanced APT defense strategies.