.png){kind=icon}
返回
Malicious Domain Names Detection Algorithm Based on Lexical Analysis and Feature Quantification
.png){kind=icon}
OA
AI
DOI：10.1109/ACCESS.2019.2940554.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Malicious domain names usually refer to a series of illegal activities, posing threats to people's privacy and property. Therefore, the problem of detecting malicious domain names has aroused widespread concerns. In this study, a malicious domain names detection algorithm based on lexical analysis and feature quantification is proposed. To achieve efficient and accurate detection, the method includes two phases. The first phase checks an observed domain name against a blacklist of known malicious uniform resource locator (URLs). The observed domain name is classified as being definitely malicious or potentially malicious based on its edit distances to the domain names on the blacklist. The second phase further evaluates a potential malicious domain name by its reputation value that represents its lexical feature and is calculated based on an N-gram model. The top 100,000 normal domain names in Alexa are used to obtain a whitelist substring set using the N-gram method in which each domain name excluding the top-level domain is segmented into substrings with the length of 3, 4, 5, 6 and 7. The weighted values of the substrings are calculated according to their occurrence counts in the whitelist substring set. A potential malicious domain name is segmented by the N-gram method and its reputation value is calculated based on the weighted values of its substrings. Finally, the potential malicious domain name is determined to be malicious or normal based on its reputation value. The effectiveness of the proposed detection method has been demonstrated by experiments on public available data.
Keyword:
Malicious domain names
N-gram
domain name substring
edit distance
reputation value
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
Detecting Algorithmically Generated Domain-Flux Attacks With DNS Traffic Analysis通过DNS流量分析检测算法生成的域流量攻击
PREAI
分享收藏分享收藏Investigation of the Correlation Between Trust and Reputation in B2C e-Commerce Using Alexa Ranking.png)
IEEE ACCESSOAAI
IEEE ACCESSIF3.6
OAAI分享收藏Detecting Internet Abuse by Analyzing Passive DNS Traffic: A Survey of Implemented Systems通过分析被动DNS流量来检测Internet滥用: 对已实施系统的调查
PREAI
分享收藏
查看更多内容