arrow
返回

CharBot: A Simple and Effective Method for Evading DGA Classifiers

delete2019-01-01
delete39
delete
OA
AI
J
Jonathan Peck *
N
Nie, Claire
S
Sivaguru, Raaghavi
G
Grumer, Charles
O
Olumofin, Femi
Y
Yu, Bin
A
Anderson C. A. Nascimento
M
Martine De Cock
DOI:10.1109/ACCESS.2019.2927075delete
delete原文链接
delete分享
delete收藏
查看原文
摘要

摘要

En 中文
Domain generation algorithms (DGAs) are commonly leveraged by malware to create lists of domain names, which can be used for command and control (C&C) purposes. Approaches based on machine learning have recently been developed to automatically detect generated domain names in real-time. In this paper, we present a novel DGA called CharBot, which is capable of producing large numbers of unregistered domain names that are not detected by state-of-the-art classifiers for real-time detection of the DGAs, including the recently published methods FANCI (a random forest based on human-engineered features) and LSTM.MI (a deep learning approach). The CharBot is very simple, effective, and requires no knowledge of the targeted DGA classifiers. We show that retraining the classifiers on CharBot samples is not a viable defense strategy. We believe these findings show that DGA classifiers are inherently vulnerable to adversarial attacks if they rely only on the domain name string to make a decision. Designing a robust DGA classifier may, therefore, necessitate the use of additional information besides the domain name alone. To the best of our knowledge, the CharBot is the simplest and most efficient black-box adversarial attack against DGA classifiers proposed to date.
Keyword:
Adversarial machine learning
domain generation algorithms
supervised learning
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Access 封面图
IEEE Access
IF:
3.6
论文数:
9.8W
被引数:
29.4W

机构

G
Ghent University
学者数:
5.2W
论文数: 4.5W
被引数: 5.5W
U
University of Washington
学者数:
8.0W
论文数: 7.0W
被引数: 12.5W
U
University of Washington Tacoma
学者数:
379
论文数: 337
被引数: 0
学者 查看更多机构
引用论文

引用论文

err分享
err收藏
Gas hydrate destabilization: enhanced dewatering, benthic material turnover and large methane plumes at the Cascadia convergent margin
err1999-06-01
err0
PREAI
errE. Suess; M.E. Torres; G. Bohrmann; R.W. Collier; J. Greinert; P. Linke; G. Rehder; A. Trehu; K. Wallmann; G. Winckler; E. Zuleger
err分享
err收藏
err
IF0
err
err0
PREAI
err
err分享
err收藏
err分享
err收藏
学者 查看更多内容