Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

DGA domain name detection and classification method and device

A domain name detection and classification method technology, applied in the field of network security, can solve problems such as difficulty in taking into account the accuracy and efficiency of the method, and difficulty in recognizing DGA domain names, achieving the balance between classification effect and efficiency, improving detection ability, and high computing efficiency.

Inactive Publication Date: 2021-06-11
ZHEJIANG UNIV
View PDF4 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0010] The purpose of the embodiment of the present application is to provide a DGA domain name detection method and device to solve the problems in the related art that it is difficult to identify the DGA domain name based on the word list, and it is difficult to balance the accuracy and efficiency of the method

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • DGA domain name detection and classification method and device
  • DGA domain name detection and classification method and device
  • DGA domain name detection and classification method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0034] Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, the same numerals in different drawings refer to the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with aspects of the present application as recited in the appended claims.

[0035] The terminology used in this application is for the purpose of describing particular embodiments only, and is not intended to limit the application. As used in this application and the appended claims, the singular forms "a", "the", and "the" are intended to include the plural forms as well, unless the context clearly dictates otherwise. It should also be understood that the term...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a DGA domain name detection and classification method and device. The method comprises the steps of obtaining to-be-classified DGA domain names; segmenting the DGA domain name into elements of character granularity or word granularity by adopting a domain name segmentation method of mixed granularity; performing Hash calculation on each element to obtain a corresponding integer code; and inputting the integer code into a DGA domain name detection classification network based on multilayer cavity causal convolution to obtain a classification result. The domain name is segmented into elements of character granularity or word granularity by adopting a mixed granularity domain name segmentation method, so that the character combination and word combination characteristics of the domain name can be effectively utilized, unified detection of different types of DGA domain names can be realized, and the detection capability of the DGA domain names based on the word list can be improved. The classification result is calculated by using the DGA domain name detection classification network based on the multilayer cavity causal convolution, the calculation efficiency is high, and the balance between the performance and the efficiency can be obtained.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a DGA domain name detection method and device. Background technique [0002] Botnet (Botnet) is a serious malicious attack. Its controller (Botmaster) spreads bots for malicious purposes, infects a large number of hosts as zombie hosts (Bots), and spreads bots between the controller's server and zombie hosts. Establish a one-to-many command and control (Command and Control) channel. Once a botnet is formed, attackers can obtain powerful distributed computing capabilities and rich reserves of information resources, making it easier to launch various network attacks. [0003] In order to better hide themselves and evade detection, many botnets code Domain Generation Algorithm (DGA for short) in bot programs to dynamically generate a large number of domain names (called DGA domain names), but only register a few of them. and put into use. At this time, the zomb...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06H04L29/12G06F16/35G06N3/04G06N3/08
CPCH04L63/1416G06F16/353G06N3/084H04L2463/144H04L61/4511G06N3/045
Inventor 林兰芬周少芳袁俊坤
Owner ZHEJIANG UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products