面向企业网的APT攻击特征分析及防御技术探讨

近年来，APT 攻击成为信息安全业界的关注热点。针对APT 攻击特征分析传统网络安全防御体系对其失效的原因，并在此基础上提出APT 攻击防御方案。该防御方案包括基础安全防御和动态防御体系，力求构建从保护、检测、响应到恢复的信息安全防御体系。最后，对 APT 攻击给业界带来的影响进行了思考和展望。

Research on the Defense of Advanced Persistent Threats in Enterprise Network

Recently,advanced persistent threats have become a hot spot of information security industry as so many reports were taken about that some famous companies had been suffered from it. The features of APT and the reason why traditional security defense architecture was failed were discussed. After that, a solution was proposed to build a PDRR defense model. In the end, the impacts that APT brings in was discussed.