Study and research of APT detection technology based on big data processing architecture

This paper researches and designs a APT detection system based on big data processing architecture, which includes data capturing, big data processing, APT Analyzing and application layer. The system can detect both known and unknown APT attacks with high performance, and provide alert and forensics function to APT.