欢迎您！东篱公司
退出
-
申报数据库
-
立项数据库
-
成果数据库
-
项目获奖数据库
中文摘要：
提出一种基于域名历史数据的异常域名检测算法。该算法基于合法域名与恶意域名历史数据的统计差异,将域名已生存时间、whois信息变更、whois信息完整度、域名IP变更、同IP地址域名和域名TTL值等作为主要参量,给出了具体的分类特征表示;在此基础上,构建了用于异常域名检测的SVM分类器。特征分析和实验结果表明,算法对未知域名具有较高的检测正确率,尤其适合对生存时间较长的恶意域名进行检测。
英文摘要：
An anomaly domains detection algorithm was proposed based on domains＇ historical data. Based on statistical differences in historical data of legitimate domains and malicious domains, the proposed algorithm used domains＇ life- time, changes of whois information, whois information integrity, IP changes, domains that share same IP, TTL value, etc, as main parameters and concrete representations of features for classification were given. And on this basis the pro-posed algorithm constructed SVM classifier for detecting anomaly domains. Features analysis and experimental results show that the algorithm obtains high detection accuracy to unknown domains, especially suitable for detecting long lived malicious domains.
同期刊论文项目
同项目期刊论文
期刊信息
位置：