Aiming at the problem that the existing malicious domain name detection methods are not effective enough in performance of accuracy rate and the process of feature extraction
a malicious domain name detection algorithm based on deep auto-encoder and decision tree (DAE-DT) is proposed. According to lexical composition and structure of domain name
each domain name is firstly mapped into the feature space and it is normalized. Then the normalized unlabeled domain names are randomly set to 0 as the input of the model
and the statistical features of domain name are used to as the output to construct the deep auto-encoder network model
and the reconstruction error of the unprocessed data and output data is computed to achieve the purpose of optimizing the parameters and weights so that the model is more robust. Finally
a decision tree for malicious domain name detection is constructed based on the statistical features of domain name. In the experiments on Alexa and malware domain list
the proposed detection algorithm yield an accuracy rate of 95.21%
a precision rate of 94.17%
a false negative rate of 2.41%
and a false positive rate of 3.63%.
关键词
Keywords
references
HUANG D, XU K, PEI J. Malicious url detection by dynamically mining patterns without pre-defined elements[J]. World Wide Web, 2014, 17(6):1375-1394. DOI: 1375
YU B, JIE P, DANIEL G, et al. Weakly supervised deep learning for the detection of domain generation algorithms[J]. IEEE Access, 2019(7): 51542-51556. DOI: 51542
YANG P, ZHAO G Z, ZENG P. Phishing website detection based on multidimensional features driven by deep learning[J]. IEEE Access, 2019(7):15196-15209. DOI: 15196
ZHAO H, CHANG Z B, BAO G B, et al. Malicious domain names detection algorithm based on N-Gram[J]. Journal of Computer Network and Communications, 2019(2):1-9. DOI: 1
XU C, SHEN J, DU X. Detection method of domain names generated by DGAs based on semantic representation and deep neural network[J]. Computers % Security, 2019(85): 77-88. DOI: 77