I was feeling so good until I read about this APT business! If I hear any rep mentioning it, our business is done! ;0)

No. But Hopefully the one that is perceived as the most honest and has never held back for our industry in Australia! hmm……

Can’t under estimate this. Best be ready!! Having a title to it makes it seem like something new and legit.

Let us take this forth and multiply it:

“For many, having acronyms helps them exist and the more the merrier. Let us not ponder upon our old failures. Let us rename them and provide hope and keep us in a job.”

From Wikipedia;

“Definitions of precisely what an APT is can vary, but can be summarized by their named requirements below:

* Advanced – Operators behind the threat utilize the full spectrum of intelligence gathering techniques. These may include computer intrusion technologies and techniques, but also extend to conventional intelligence gathering techniques such as telephone interception technologies and satellite imaging. While individual components of the attack may not be classed as particularly “advanced” (e.g. malware components generated from commonly available DIY construction kits, or the use of easily procured exploit materials), their operators can typically access and develop more advanced tools as required. They combine multiple attack methodologies and tools in order to reach and compromise their target.
* Persistent – Operators give priority to a specific task, rather than opportunistically seeking immediate financial gain. This distinction implies that the attackers are guided by external entities. The attack is conducted through continuous monitoring and interaction in order to achieve the defined objectives. It does not mean a barrage of constant attacks and malware updates. In fact, a “low-and-slow” approach is usually more successful.
* Threat – means that there is a level of coordinated human involvement in the attack, rather than a mindless and automated piece of code. The operators have a specific objective and are skilled, motivated, organized and well funded.[6]”

Works for me to question the assignment of acronyms and extension of definitions – reality change in some cases? What requirement to extend the definitions from basic reality to something to be assessed again as mentioned for the basis of reassigning priority and forgetting the failures of the past. Wondering how long before someone has the work title; “Advanced Persistent Threat Analyst”? Though I kid myself. Of course people are already using the title I am sure.

US Air Force around 2006, according to Bejtlich et al.

More than you would never want to read here:

http://taosecurity.blogspot.com/search/label/apt

One decent discussion here:

http://threatpost.com/en_us/blogs/its-adversaries-who-are-advanced-and-persistent-012610

No Knuckle. Love it! Surely it’s being used in our industry somewhere. If not, it should be. We have “clouds”, we have “APTs”….why not “CPD”.

DD

You might want to have a look at; http://vrt-sourcefire.blogspot.com/2010/03/apt-should-your-panties-be-in-bunch-and.html

APT: Should your panties be in a bunch, and how do you un-bunch them?

There is no more predictable group of people than marketers. Once a term reaches a certain tipping point, they grab onto it for dear life and choke it until it means nothing. Apparently, the Advanced Persistent Threat (APT) hit that point somewhere around December. Despite the term being used by the defense industrial base for years, it wasn’t until this year that firms really started pounding the “Come to us my children, only we can save you from death by APT” drum.