APT
Advanced Persistent Threat
An APT is a prolonged and targeted cyberattack where an adversary gains unauthorized access and remains undetected in a network for an extended period. APT groups are typically nation-state sponsored or well-funded criminal organizations with specific strategic objectives.
Cómo se usa en ciberseguridad
Threat intelligence analysts track APT groups, catalog their TTPs, and publish reports that help defenders prepare. Incident responders investigate APT intrusions that may span months, requiring careful forensic analysis to identify all compromised systems. CISOs use APT threat briefings to justify security investments and prioritize defenses against the most relevant adversaries.
Las definiciones son explicaciones originales escritas con fines de desarrollo profesional. Para definiciones técnicas autorizadas, consulta NIST, ISO o el organismo de normalización correspondiente.