The Conception of Enterprise Anti-APT
The essence of network security is confrontation, only when we know ourselves and the enemy can we fight a hundred battles.
APT attack ~ attack process:
Target detection-> external network infiltration-> internal network infiltration-> search target-> information spread-> continue latent & backdoor confrontation
On the defense issue of APT, enterprises should not blindly follow, but should first do the basic work and evaluate whether the company will be attacked by APT. If it is really attacked by APT, then is the existing defense system useful?
Enterprises should face up to the inequality of the existing attack and defense environment, be in awe of the APT attack, and make the construction of the APT defense system extremely detailed, otherwise the real APT attack is ineffective!
