Paper
26 June 2023 DGA domain name detection model based on multiscale feature
Huajie Luo, Wanping Liu, Qiong Cao
Author Affiliations +
Abstract
Massive botnet attacks pose a serious threat to social stability and network security. To avoid security interception, botnets mainly use Domain Generation Algorithm (DGA) to dynamically generate a large number of malicious domain names to establish communication. Therefore, it is important to study how to detect DGA domain names more effectively, and this paper proposes a method to detect DGA domain names based on multi-scale features. In the domain name feature extraction phase, extracting domain name combination features on a multi-scale convolutional neural network (CNN) based on a compressed activation model. Simultaneously combined with bi-directional gated recurrent unit (BiGRU) to extract domain name sequence features and build hybrid deep learning models to achieve the detection of DGA domain names based on lexical combination generation. The experimental results show that the method improves the F-Score evaluation metric by 7.25% in the binary classification task compared to the CNN-only model, and also has higher detection precision for lexicon-based domain names like suppobox.
© (2023) COPYRIGHT Society of Photo-Optical Instrumentation Engineers (SPIE). Downloading of the abstract is permitted for personal use only.
Huajie Luo, Wanping Liu, and Qiong Cao "DGA domain name detection model based on multiscale feature", Proc. SPIE 12721, Second International Symposium on Computer Applications and Information Systems (ISCAIS 2023), 1272109 (26 June 2023); https://doi.org/10.1117/12.2683451
Advertisement
Advertisement
RIGHTS & PERMISSIONS
Get copyright permission  Get copyright permission on Copyright Marketplace
KEYWORDS
Feature extraction

Machine learning

Performance modeling

Network security

Convolution

Deep learning

Convolutional neural networks

Back to Top