Skip to main navigation Skip to search Skip to main content

Reverse Method for DGA Based on Generative BiLSTM Model

  • Bowen Li
  • , Yanchen Qiao*
  • , Weizhe Zhang
  • , Yu Zhang
  • , Shudong Li
  • *Corresponding author for this work
  • Pengcheng Laboratory
  • Harbin Institute of Technology
  • Guangzhou University

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

DGA (Domain Generation Algorithm) is a technique used to generate a large number of domain names, widely utilized for malware communication. Traditional methods for intercepting DGA domains involve using machine learning to detect whether a domain belongs to DGA, which not only demands high computational resources but also suffers from interception latency. This paper proposes a Reverse Method for DGA based on a Generative BiLSTM Model. This method uses the BiLSTM model to learn the patterns of DGA domain sequences of a particular type, thereby reversing the DGA to preemptively generate a blacklist of domains for that type of DGA. This improves the timeliness and accuracy of domain interception. Experimental results show that the model can effectively reverse multiple types of DGA and generate subsequent DGA domains that might be produced by these algorithms.

Original languageEnglish
Title of host publicationCyberspace Simulation and Evaluation - 3rd International Conference, CSE 2024, Proceedings
EditorsGuangxia Xu, Guangxia Xu, Wanlei Zhou, Jiawei Zhang, Yanchun Zhang, Yan Jia
PublisherSpringer Science and Business Media Deutschland GmbH
Pages190-206
Number of pages17
ISBN (Print)9789819645053
DOIs
StatePublished - 2025
Event3rd International Conference on Cyberspace Simulation and Evaluation, CSE 2024 - Shenzhen, China
Duration: 26 Nov 202428 Nov 2024

Publication series

NameCommunications in Computer and Information Science
Volume2421 CCIS
ISSN (Print)1865-0929
ISSN (Electronic)1865-0937

Conference

Conference3rd International Conference on Cyberspace Simulation and Evaluation, CSE 2024
Country/TerritoryChina
CityShenzhen
Period26/11/2428/11/24

Keywords

  • Domain Generation Algorithm
  • Generative BiLSTM Model
  • Reverse Method for DGA

Fingerprint

Dive into the research topics of 'Reverse Method for DGA Based on Generative BiLSTM Model'. Together they form a unique fingerprint.

Cite this