Table 5.

Research questions.

No. of question	Research question	Description
RQ1	What Is the Current State of the Art Concerning Detection Models for APT on Smartphones?	This question enabled us to explore the common characteristics of detection models and organize them within a specific taxonomy. Furthermore, this taxonomy was used to consider the available capabilities that contribute to detecting APT attacks.
RQ2	What machine learning (ML) techniques have been applied to detect APTs?	Identify the categories of ML techniques applied in APT detection.
RQ3	What situational awareness (SA) models in cybersecurity were used in previous studies?	This question enabled us to identify different SA models used in cybersecurity.