The present invention belongs to the field of
Internet of Things security technology, and discloses a DGA
domain name detection method for
the Internet of Things
botnet, including: obtaining the
domain name string in the DNS
domain name resolution request sent by
the Internet of Things device; inputting the domain name string into the trained domain name detection model to obtain the
binary classification and multi-classification results of the domain name; wherein, the domain name detection model is obtained by training based on the fusion network of the Small BERT pre-trained model and CNN. By combining the two
feature extraction capabilities of the SmallBERT model at the sub-word
granularity for domain names and CNN at the character
granularity for domain names, the present invention improves the learning ability of the
algorithm for the comprehensive features of domain name
semantics, morphology, pronunciation, character randomness, etc., enhances the
detection performance for random
word type DGA domain names, improves the problem of performance imbalance in the domain name multi-classification task, meets the requirements of limited computing resources and high
inference speed in
the Internet of Things environment, and has the advantages of high
detection performance, simple process, easy deployment, and wide available range.