• Complex
  • Title
  • Keyword
  • Abstract
  • Scholars
  • Journal
  • ISSN
  • Conference
成果搜索

author:

Liu, Zhanghui (Liu, Zhanghui.) [1] (Scholars:刘漳辉) | Zhang, Yudong (Zhang, Yudong.) [2] | Chen, Yuzhong (Chen, Yuzhong.) [3] (Scholars:陈羽中) | Fan, Xinwen (Fan, Xinwen.) [4] | Dong, Chen (Dong, Chen.) [5] (Scholars:董晨)

Indexed by:

Scopus SCIE

Abstract:

Domain generation algorithms (DGAs) use specific parameters as random seeds to generate a large number of random domain names to prevent malicious domain name detection. This greatly increases the difficulty of detecting and defending against botnets and malware. Traditional models for detecting algorithmically generated domain names generally rely on manually extracting statistical characteristics from the domain names or network traffic and then employing classifiers to distinguish the algorithmically generated domain names. These models always require labor intensive manual feature engineering. In contrast, most state-of-the-art models based on deep neural networks are sensitive to imbalance in the sample distribution and cannot fully exploit the discriminative class features in domain names or network traffic, leading to decreased detection accuracy. To address these issues, we employ the borderline synthetic minority over-sampling algorithm (SMOTE) to improve sample balance. We also propose a recurrent convolutional neural network with spatial pyramid pooling (RCNN-SPP) to extract discriminative and distinctive class features. The recurrent convolutional neural network combines a convolutional neural network (CNN) and a bi-directional long short-term memory network (Bi-LSTM) to extract both the semantic and contextual information from domain names. We then employ the spatial pyramid pooling strategy to refine the contextual representation by capturing multi-scale contextual information from domain names. The experimental results from different domain name datasets demonstrate that our model can achieve 92.36% accuracy, an 89.55% recall rate, a 90.46% F1-score, and 95.39% AUC in identifying DGA and legitimate domain names, and it can achieve 92.45% accuracy rate, a 90.12% recall rate, a 90.86% F1-score, and 96.59% AUC in multi-classification problems. It achieves significant improvement over existing models in terms of accuracy and robustness.

Keyword:

algorithmically generated domain name domain generation algorithm recurrent convolutional neural network SMOTE spatial pyramid pooling

Community:

  • [ 1 ] [Liu, Zhanghui]Fuzhou Univ, Coll Math & Comp Sci, Fujian Key Lab Network Comp & Intelligent Informa, Fuzhou 350116, Peoples R China
  • [ 2 ] [Zhang, Yudong]Fuzhou Univ, Coll Math & Comp Sci, Fujian Key Lab Network Comp & Intelligent Informa, Fuzhou 350116, Peoples R China
  • [ 3 ] [Chen, Yuzhong]Fuzhou Univ, Coll Math & Comp Sci, Fujian Key Lab Network Comp & Intelligent Informa, Fuzhou 350116, Peoples R China
  • [ 4 ] [Fan, Xinwen]Fuzhou Univ, Coll Math & Comp Sci, Fujian Key Lab Network Comp & Intelligent Informa, Fuzhou 350116, Peoples R China
  • [ 5 ] [Dong, Chen]Fuzhou Univ, Coll Math & Comp Sci, Fujian Key Lab Network Comp & Intelligent Informa, Fuzhou 350116, Peoples R China
  • [ 6 ] [Liu, Zhanghui]Minist Educ, Key Lab Spatial Data Min & Informat Sharing, Fuzhou 350116, Peoples R China
  • [ 7 ] [Chen, Yuzhong]Minist Educ, Key Lab Spatial Data Min & Informat Sharing, Fuzhou 350116, Peoples R China
  • [ 8 ] [Dong, Chen]Minist Educ, Key Lab Spatial Data Min & Informat Sharing, Fuzhou 350116, Peoples R China

Reprint 's Address:

  • 陈羽中

    [Chen, Yuzhong]Fuzhou Univ, Coll Math & Comp Sci, Fujian Key Lab Network Comp & Intelligent Informa, Fuzhou 350116, Peoples R China;;[Chen, Yuzhong]Minist Educ, Key Lab Spatial Data Min & Informat Sharing, Fuzhou 350116, Peoples R China

Show more details

Related Keywords:

Related Article:

Source :

ENTROPY

ISSN: 1099-4300

Year: 2020

Issue: 9

Volume: 22

2 . 5 2 4

JCR@2020

2 . 1 0 0

JCR@2023

ESI Discipline: PHYSICS;

ESI HC Threshold:115

JCR Journal Grade:2

CAS Journal Grade:3

Cited Count:

WoS CC Cited Count: 0

SCOPUS Cited Count:

ESI Highly Cited Papers on the List: 0 Unfold All

WanFang Cited Count:

Chinese Cited Count:

30 Days PV: 2

Online/Total:120/10062768
Address:FZU Library(No.2 Xuyuan Road, Fuzhou, Fujian, PRC Post Code:350116) Contact Us:0591-22865326
Copyright:FZU Library Technical Support:Beijing Aegean Software Co., Ltd. 闽ICP备05005463号-1