DGA domain name detection model based on multiscale feature

Huajie Luo; Wanping Liu; Qiong Cao

doi:10.1117/12.2683451

26 June 2023 DGA domain name detection model based on multiscale feature

Huajie Luo, Wanping Liu, Qiong Cao

Author Affiliations +

Proceedings Volume 12721, Second International Symposium on Computer Applications and Information Systems (ISCAIS 2023); 1272109 (2023) https://doi.org/10.1117/12.2683451
Event: 2023 2nd International Symposium on Computer Applications and Information Systems (ISCAIS 2023), 2023, Chengdu, China

Abstract

Massive botnet attacks pose a serious threat to social stability and network security. To avoid security interception, botnets mainly use Domain Generation Algorithm (DGA) to dynamically generate a large number of malicious domain names to establish communication. Therefore, it is important to study how to detect DGA domain names more effectively, and this paper proposes a method to detect DGA domain names based on multi-scale features. In the domain name feature extraction phase, extracting domain name combination features on a multi-scale convolutional neural network (CNN) based on a compressed activation model. Simultaneously combined with bi-directional gated recurrent unit (BiGRU) to extract domain name sequence features and build hybrid deep learning models to achieve the detection of DGA domain names based on lexical combination generation. The experimental results show that the method improves the F-Score evaluation metric by 7.25% in the binary classification task compared to the CNN-only model, and also has higher detection precision for lexicon-based domain names like suppobox.

Citation Download Citation

Huajie Luo, Wanping Liu, and Qiong Cao "DGA domain name detection model based on multiscale feature", Proc. SPIE 12721, Second International Symposium on Computer Applications and Information Systems (ISCAIS 2023), 1272109 (26 June 2023); https://doi.org/10.1117/12.2683451

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

;

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available

Members: $17.00

Non-members: $21.00 ADD TO CART

PROCEEDINGS
9 PAGES

DOWNLOAD PAPER SAVE TO MY LIBRARY

GET CITATION

RIGHTS & PERMISSIONS

Get copyright permission Get copyright permission on Copyright Marketplace

KEYWORDS

Feature extraction

Machine learning

Performance modeling

Network security

Convolution

Deep learning

Convolutional neural networks

Show All Keywords

Keywords/Phrases

Search In:

Publication Years