Feature Extraction Approach to Unearth Domain Generating Algorithms (DGAs)
Shubhangi Upadhyay, Ali Akbar Ghorbani · 2020
Domain name plays a crucial role today, a technique was developed to algorithmically generate do-main names (AGD) with the idea to solve the problem of designing domain names manually. Attackers deploy highly sophisticated tactics to compromise end-user systems to gain control as a target for malware to spread, as they are immune to static prevention methods like blacklisting and sinkholing. There have been multiple attempts to prevent them using lexical feature analysis, domain query responses, and some of these techniques have been really efficient as well. In this paper we propose a framework to detect Domain Generating Algorithms (DGAs) even in real network traffic, using features studied from legitimate domain names in static and real traffic, by considering feature extraction as the key of the framework we propose. The detection process consists of detection, prediction and classification attaining a maximum accuracy of 99%.