{"id":"https://openalex.org/W4416066427","doi":"https://doi.org/10.1145/3719027.3765085","title":"A Decade-long Landscape of Advanced Persistent Threats: Longitudinal Analysis and Global Trends","display_name":"A Decade-long Landscape of Advanced Persistent Threats: Longitudinal Analysis and Global Trends","publication_year":2025,"publication_date":"2025-11-19","ids":{"openalex":"https://openalex.org/W4416066427","doi":"https://doi.org/10.1145/3719027.3765085"},"language":"en","primary_location":{"id":"doi:10.1145/3719027.3765085","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3719027.3765085","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3719027.3765085","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120324485","display_name":"Shakhzod Yuldoshkhujaev","orcid":null},"institutions":[{"id":"https://openalex.org/I848706","display_name":"Sungkyunkwan University","ror":"https://ror.org/04q78tk20","country_code":"KR","type":"education","lineage":["https://openalex.org/I848706"]}],"countries":["KR"],"is_corresponding":true,"raw_author_name":"Shakhzod Yuldoshkhujaev","raw_affiliation_strings":["Sungkyunkwan University, Suwon, Republic of Korea"],"affiliations":[{"raw_affiliation_string":"Sungkyunkwan University, Suwon, Republic of Korea","institution_ids":["https://openalex.org/I848706"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088613500","display_name":"Min Ku Jeon","orcid":"https://orcid.org/0000-0001-8115-3241"},"institutions":[{"id":"https://openalex.org/I848706","display_name":"Sungkyunkwan University","ror":"https://ror.org/04q78tk20","country_code":"KR","type":"education","lineage":["https://openalex.org/I848706"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Mijin Jeon","raw_affiliation_strings":["Sungkyunkwan University, Suwon, Republic of Korea"],"affiliations":[{"raw_affiliation_string":"Sungkyunkwan University, Suwon, Republic of Korea","institution_ids":["https://openalex.org/I848706"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113455165","display_name":"Doowon Kim","orcid":"https://orcid.org/0000-0002-9033-990X"},"institutions":[{"id":"https://openalex.org/I75027704","display_name":"University of Tennessee at Knoxville","ror":"https://ror.org/020f3ap87","country_code":"US","type":"education","lineage":["https://openalex.org/I75027704"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Doowon Kim","raw_affiliation_strings":["University of Tennessee, Knoxville, TN, USA"],"affiliations":[{"raw_affiliation_string":"University of Tennessee, Knoxville, TN, USA","institution_ids":["https://openalex.org/I75027704"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120324486","display_name":"Nick Nikiforakis","orcid":"https://orcid.org/0000-0002-9366-357X"},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nick Nikiforakis","raw_affiliation_strings":["Stony Brook University, Stony Brook, NY, USA"],"affiliations":[{"raw_affiliation_string":"Stony Brook University, Stony Brook, NY, USA","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103790760","display_name":"Hyungjoon Koo","orcid":"https://orcid.org/0000-0003-0799-0230"},"institutions":[{"id":"https://openalex.org/I848706","display_name":"Sungkyunkwan University","ror":"https://ror.org/04q78tk20","country_code":"KR","type":"education","lineage":["https://openalex.org/I848706"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Hyungjoon Koo","raw_affiliation_strings":["Sungkyunkwan University, Suwon, Republic of Korea"],"affiliations":[{"raw_affiliation_string":"Sungkyunkwan University, Suwon, Republic of Korea","institution_ids":["https://openalex.org/I848706"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5120324485"],"corresponding_institution_ids":["https://openalex.org/I848706"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.47311855,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3206","last_page":"3220"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.2110999971628189,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.2110999971628189,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12572","display_name":"Intelligence, Security, War Strategy","score":0.1354999989271164,"subfield":{"id":"https://openalex.org/subfields/3320","display_name":"Political Science and International Relations"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10994","display_name":"Terrorism, Counterterrorism, and Political Violence","score":0.09189999848604202,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/globe","display_name":"Globe","score":0.7527999877929688},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.6358000040054321},{"id":"https://openalex.org/keywords/multitude","display_name":"Multitude","score":0.6086000204086304},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.5353999733924866},{"id":"https://openalex.org/keywords/documentation","display_name":"Documentation","score":0.5302000045776367},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.37950000166893005}],"concepts":[{"id":"https://openalex.org/C2775899829","wikidata":"https://www.wikidata.org/wiki/Q3109007","display_name":"Globe","level":2,"score":0.7527999877929688},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.6358000040054321},{"id":"https://openalex.org/C2780565519","wikidata":"https://www.wikidata.org/wiki/Q1208937","display_name":"Multitude","level":2,"score":0.6086000204086304},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.5353999733924866},{"id":"https://openalex.org/C56666940","wikidata":"https://www.wikidata.org/wiki/Q788790","display_name":"Documentation","level":2,"score":0.5302000045776367},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.37950000166893005},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.35109999775886536},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3425999879837036},{"id":"https://openalex.org/C108170787","wikidata":"https://www.wikidata.org/wiki/Q3951828","display_name":"Agency (philosophy)","level":2,"score":0.33719998598098755},{"id":"https://openalex.org/C148383697","wikidata":"https://www.wikidata.org/wiki/Q1781695","display_name":"Regional science","level":1,"score":0.32339999079704285},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3142000138759613},{"id":"https://openalex.org/C3020672099","wikidata":"https://www.wikidata.org/wiki/Q857354","display_name":"Longitudinal data","level":2,"score":0.29089999198913574},{"id":"https://openalex.org/C127142870","wikidata":"https://www.wikidata.org/wiki/Q7838279","display_name":"Trend analysis","level":2,"score":0.2872999906539917},{"id":"https://openalex.org/C95457728","wikidata":"https://www.wikidata.org/wiki/Q309","display_name":"History","level":0,"score":0.28700000047683716}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3719027.3765085","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3719027.3765085","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2509.07457","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2509.07457","pdf_url":"https://arxiv.org/pdf/2509.07457","source":{"id":"https://openalex.org/S4393918464","display_name":"ArXiv.org","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"doi:10.1145/3719027.3765085","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3719027.3765085","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W2342850280","https://openalex.org/W2533698187","https://openalex.org/W2998702515","https://openalex.org/W3015650867","https://openalex.org/W4324031781","https://openalex.org/W4392182086","https://openalex.org/W4400120188","https://openalex.org/W4400121705","https://openalex.org/W4408750016"],"related_works":[],"abstract_inverted_index":{"An":[0],"advanced":[1],"persistent":[2],"threat":[3,72],"(APT)":[4],"refers":[5],"to":[6,36,82],"a":[7,54,90],"covert":[8],"and":[9,20,38,74,84],"long-term":[10],"cyberattack,":[11],"typically":[12],"conducted":[13],"by":[14],"state-sponsored":[15],"actors,":[16],"targeting":[17],"critical":[18],"sectors":[19],"often":[21],"remaining":[22],"undetected":[23],"for":[24],"long":[25],"periods.":[26],"In":[27],"response,":[28],"collective":[29],"intelligence":[30],"from":[31],"around":[32],"the":[33,51],"globe":[34],"collaborates":[35],"identify":[37],"trace":[39],"surreptitious":[40],"activities,":[41],"generating":[42],"substantial":[43],"documentation":[44],"on":[45,50,61],"APT":[46,65],"campaigns":[47],"publicly":[48],"available":[49],"web.":[52],"While":[53],"multitude":[55],"of":[56,64],"prior":[57],"works":[58],"predominantly":[59],"focus":[60],"specific":[62],"aspects":[63],"cases,":[66],"such":[67],"as":[68],"detection,":[69],"evaluation,":[70],"cyber":[71],"intelligence,":[73],"dataset":[75],"creation,":[76],"limited":[77],"attention":[78],"has":[79],"been":[80],"devoted":[81],"revisiting":[83],"investigating":[85],"these":[86],"scattered":[87],"dossiers":[88],"in":[89],"longitudinal":[91],"manner.":[92]},"counts_by_year":[],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}
