## 1 Introduction
### Related Work
The research addressed the challenges associated with APT defense and offered technical assistance in developing an intelligent platform. These challenges were addressed through the utilization of knowledge graph and deep learning techniques. [PERSON] and [PERSON] [35] presented a comprehensive analysis of APT implementation, covering various aspects such as definitions, methodologies, and the classification of defensive measures, including monitoring, detection, and mitigation. The technical underpinnings of extant APT detection and mitigation protocols, as well as the evaluation criteria for efficacious defensive tactics, pivotal datasets, and the present state of advancement in the domain, were also deliberated upon by the participants. Meanwhile, [PERSON] et al. [36] discussed potential enhancements in threat modeling approaches to effectively address sophisticated attacks, including APTs. They emphasized the necessity of employing a hybrid approach that combines various methods due to the intricate nature of existing systems. The authors also emphasized the importance of maintaining threat visibility at all phases and levels, while acknowledging that no specific threat-modeling method can encompass all possible situations. In a bibliometric analysis performed by [PERSON] and [PERSON] [37] on articles related to APTs, they identified common research themes and closely linked communities based on indicators such as co-authorship, citations, and publication forums. Their multidisciplinary perspective provided valuable insights into the current trends in APT research. [PERSON] et al. [38] conducted a comprehensive assessment of game theory strategies categorized as application-based and metric-based classifications to facilitate impartial decision making concerning countermeasures against APTs. The aforementioned factors, namely security, cost, and usability, were taken into account. The investigation has revealed that there are certain limitations associated with the application of game theory. The limitations of game theory encompass the dependence on presumptions regarding the conduct of the involved parties, alongside the challenges linked to scrutinizing intricate games that involve numerous participants. The research yielded valuable perspectives on APT behavior, streamlined the decision-making process for optimal resource allocation, and emphasized the importance of incorporating practitioner viewpoints to enhance information security risk management. Finally, [PERSON] et al. [39] thoroughly analyzed APTs and the communication method that connects a compromised system to a command-and-control (C&C) server. It is the location where persistent malware receives commands and captured data are exfiltrated. In addition, the authors suggested conducting research on an APT defensive framework for industrial control systems and presenting their findings. During the C&C phase of the APT lifecycle, this framework provides a layered security and detection solution for the organization network that is different from the current review as it sheds light on the detection of APTs on smartphones. Nevertheless, the review does not include APT detection techniques for mobiles and situational awareness models while missing a game theory-based approach.