Paper
2 November 2022 Detecting malicious domain names from domain generation algorithms using bi-directional LSTM network
Suliang Luo, Gang Han, An Li, Jialiang Peng
Author Affiliations +
Proceedings Volume 12455, International Conference on Signal Processing and Communication Security (ICSPCS 2022); 124550R (2022) https://doi.org/10.1117/12.2655178
Event: International Conference on Signal Processing and Communication Security (ICSPCS 2022), 2022, Dalian, China
Abstract
DNS (Domain Name System /DNS) is one of the most important infrastructures of Internet. People can easily access the rich network resources worldwide using the DNS technology. However, the Domain Generation Algorithm (DGA) is also accompanied by the DNS technology, which is used to generate malicious domain names. To detect DGA malicious domains, the previous studies often used unreal small DNS domain name datasets to train the detection models that always overlooked real user data traffic. These models generally did not have good generalization performance. In this paper, we propose a new DGA malicious domain name detection model based on Bi-directional LSTM network. We also propose a new evaluation metric to evaluate the real unlabeled DNS traffic data. Compared with LSTM model, the detection effect of our proposed model is improved effectively. The experimental results show that the precision of the model and the value of AUC reach 98.4% and 0.9079, respectively.
© (2022) COPYRIGHT Society of Photo-Optical Instrumentation Engineers (SPIE). Downloading of the abstract is permitted for personal use only.
Suliang Luo, Gang Han, An Li, and Jialiang Peng "Detecting malicious domain names from domain generation algorithms using bi-directional LSTM network", Proc. SPIE 12455, International Conference on Signal Processing and Communication Security (ICSPCS 2022), 124550R (2 November 2022); https://doi.org/10.1117/12.2655178
Advertisement
Advertisement
RIGHTS & PERMISSIONS
Get copyright permission  Get copyright permission on Copyright Marketplace
KEYWORDS
Data modeling

Performance modeling

Statistical modeling

Neural networks

Network security

Data processing

Internet

Back to Top