A Cyber-Risk Management Schema for Classifying Literature on Advanced Persistent Threats

Advanced Persistent Threats (APTs) are complex, multi-stage cyberattacks often backed by nation-states, targeting critical infrastructure with the potential to severely impact national economies. Due to their sophisticated tactics and high-stake implications, APTs are a prominent focus in both academic research and media. Multiple disciplines have contributed to APT research, offering various attack models, defense strategies, and mitigation techniques. However, the field lacks a systematic, cohesive classification framework, making it challenging for practitioners to identify the most relevant studies and methodologies for their needs. Addressing this gap, we propose a novel cyber-risk management schema for organizing scientific literature on APTs, structured to support a comprehensive understanding and application of APT-related knowledge. To demonstrate the schema’s utility, we apply it to categorize the most frequently cited works in APT research, showcasing its effectiveness in systematizing diverse perspectives. We believe this work facilitates knowledge organization, empowering both researchers and practitioners in their fight against APTs.