An End-to-End Framework for Private DGA Detection as a Service

ePrint Report: An End-to-End Framework for Private DGA Detection as a Service

Ricardo Jose Menezes Maia, Dustin Ray, Sikha Pentyala, Rafael Dowsley, Martine De Cock, Anderson Nascimento, Ricardo Jacobi

Domain Generation Algorithms (DGAs) are used by malware to generate pseudorandom domain names to establish communication between infected bots and Command and Control servers. While DGAs can be detected by machine learning (ML) models with great accuracy, offering DGA detection as a service raises privacy concerns when requiring network administrators to …

algorithms bots command communication detection dga dgas domain domain names end end-to-end eprint report framework malware names private report service