Illegal Domain Name Mining Method Based on Domain Name Structure Similarity

Abstract

The present invention provides a method for mining illegal domain names based on domain name structure similarity, which solves the technical problem that existing methods cannot actively mine a large number of illegal domain names; it includes the following steps: step 1, read illegal domain names from the domain name blacklist; step 2. Judging whether there is a class that has successfully aggregated, if not, go to step 10; otherwise, continue to the next step; step 3, judge whether the current domain name can be classified into the i-th aggregation class, if not, go to Step 10; otherwise, continue to the next step; the basis for judging is whether the current domain name is similar to the central domain name, and the central domain name refers to a representative domain name in the aggregation class; Step 4, merge the current domain name into the i-th aggregation class, and extract Find the generation pattern generated during the matching process between the current domain name and the central domain name of this category, and continue to the next step; the generation pattern is the wildcard character string extracted from each domain name in the aggregation class and the central domain name. The invention is widely used in the field of information technology.

Description

Technical field

[0001] The invention relates to an illegal domain name mining method, in particular to an illegal domain name mining method based on the structural similarity of domain names. Background technique

[0002] With the rapid development of the Internet, the domain name, which is one of the products of the Internet, has gradually been recognized and popularized. While the domain name has brought us the convenience of remembering the website and modifying the IP, it also hides some unavoidable Security risks.

[0003] This year, more and more illegal organizations have carried some illegal behaviors through domain names, such as botnets, phishing websites, pornographic and gambling websites, etc. The vast majority of netizens have caused immeasurable damage to property and spirit. Therefore, it is urgent Therefore, methods for mining illegal domain names efficiently and quickly are proposed.

[0004] At present, most browsers use pre-prepared blacklists and regularly upda...

Images