Domain Generation Algorithm

Domain Generation Algorithms (DGAs) are used by botnets to create pseudorandom domain names, hindering detection and takedown efforts. Current research focuses on improving the robustness and accuracy of DGA classifiers, often employing deep learning architectures like convolutional neural networks (CNNs) and recurrent neural networks (RNNs), sometimes in hybrid combinations, to analyze domain name characteristics. A key challenge is developing classifiers that can effectively detect both known and unknown DGAs, while mitigating biases that can be exploited by attackers; research also explores explainable AI techniques to improve transparency and trust in these detection systems. This work is crucial for enhancing cybersecurity defenses against botnets and other malicious actors leveraging DGAs.

Papers