SECAI Core · phase 11 of 15 · noun

Advanced persistent threat

An attacker's ability to obtain, maintain, and diversify access to network systems using exploits and malware.

The Explain card

Plain English
An APT is a well-resourced attacker who gets into a network, stays there quietly for a long time, and keeps widening their access using exploits and malware. The key words are persistent and patient.
Example
An intrusion group compromises an AI lab's developer workstation, lives there for months, and slowly collects credentials until it can exfiltrate unreleased model weights and training data.
Why it matters
AI organizations hold crown jewels: proprietary models, datasets, and compute. APTs target exactly that, and they are caught by long-term anomaly hunting, not by a single alert.
Hook
Not a smash-and-grab, a tenant who never signed a lease.

Word knowledge

How the word is built, where it came from, and what it sits beside in memory.

In a sentence

Investigators classified the repeated command-and-control traffic from the compromised server as evidence of an advanced persistent threat.

Why these words
  • advanced Middle English avauncen, from Old French avancer, move forward modifies threat by marking a high degree of technical development
  • persistent Latin persistere, continue steadfastly modifies threat by emphasizing sustained activity over time
  • threat Old English threat, a crowd or pressure, later menace serves as the head noun of the phrase
Where it came from
Origin
an English compound coined in United States military cybersecurity discourse
Entered the language
2000s
What changed
Three established words were combined as a technical label, then the initialism APT became common in cybersecurity writing.
How it is spelled
Pattern
advanced ends in -ed
Pattern
persistent ends in the adjective suffix -ent
Pattern
threat begins with the consonant digraph th and contains the vowel digraph ea
Breaks the pattern
The ea in threat represents the short e sound rather than the long e sound.

Spelled like

  • learned
  • dependent
  • thread
  • bread
Broken into chunks
  • advanc
    • advance
    • advancement
  • persist
    • persistence
    • persistently
  • threat
    • threaten
    • threatening
What it sits beside

Same subject

  • threat actor
  • command-and-control server
  • malware
  • intrusion detection

Same shape

  • advanced manufacturing technology
  • persistent organic pollutant
  • security threat

cybersecurity threat labels

  • advanced persistent threat
  • insider threat
  • supply-chain attack

cybersecurity initialisms

  • APT
  • C2
  • IOC

Where it sits in the deck

Phase 11: Threat Landscape: Attack Vectors and Adversarial Techniques

With defences named, learn what they must defend against — the full catalogue of attack techniques targeting AI systems, their inputs, outputs, training pipelines, and supply chains.

Neighbours in this phase