Domain name recognition method and device, storage medium and electronic equipment

Abstract

The invention provides a domain name recognition method and device, a storage medium and electronic equipment. The domain name recognition method comprises the steps of obtaining a to-be-identified domain name; performing keyword extraction on the domain name to be identified according to a preset extraction rule to obtain keyword information corresponding to the domain name to be identified; preprocessing the keyword information to obtain detection information corresponding to the domain name to be identified; and inputting the detection information into a pre-constructed domain name recognition model to obtain a recognition result corresponding to the to-be-recognized domain name. By applying the domain name recognition method provided by the embodiment of the invention, the domain namerecognition model can be applied to determine whether the domain name to be identified is the DGA domain name or not, so that the detection efficiency is improved, and the DGA domain name attack can be resisted in time.

Description

technical field [0001] The present invention relates to the field of machine learning, in particular to a domain name identification method and device, storage medium and electronic equipment. Background technique [0002] With the development of science and technology, Internet technology has also developed vigorously. The emergence of the Internet has brought people a convenient way of life, but also brought people hidden dangers of network risks. The problem of network attacks is becoming more and more serious. Among them, domain names It is an important infrastructure for network attacks. Attackers usually root the Domain Generation Algorithm (DGA) in malicious code to generate DGA domain names. DGA domain names can often avoid the detection of blacklists and have a large threaten. [0003] The inventors found that in the prior art, in order to realize the detection of the DGA domain name, it is often necessary to reversely analyze the malicious code and identify the re...

AI Technical Summary

Problems solved by technology

[0003] The inventors found that in the prior art, in order to realize the detection of the DGA domain name, it is often necessary to reversely analyze the malicious code and identify the relevant code of DGA from the malicious code; to form the DGA domain name generated by the malicious code However, reverse analysis of malicious code is difficult and time-consuming, and it is difficult to quickly develop the detection capability of the DGA domain name generated by the malicious code, which makes it difficult to resist DGA domain name attacks in time

Images