Domain name generation algorithm based on improved Markov chain

QIAN Zhiye; LI Xue; LI Suogang

doi:10.11959/j.issn.1000-436x.2024253

您当前的位置：

首页 >

文章列表页 >

Domain name generation algorithm based on improved Markov chain

Cyber Security | 更新时间：2024-12-31

- Domain name generation algorithm based on improved Markov chain
- Journal on Communications Vol. 45, Issue Z2, Pages: 52-58(2024)
- 作者机构：
  
  赛尔网络有限公司网络运行部，北京 100084
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.1000-436x.2024253
  CLC： TP311
- Received：24 October 2024，
  
  Published：30 November 2024
- 稿件说明：
移动端阅览
钱志业,李雪,李锁钢.基于改进马尔可夫链的高效域名生成算法[J].通信学报,2024,45(Z2):52-58.

QIAN Zhiye,LI Xue,LI Suogang.Domain name generation algorithm based on improved Markov chain[J].Journal on Communications,2024,45(Z2):52-58.
钱志业,李雪,李锁钢.基于改进马尔可夫链的高效域名生成算法[J].通信学报,2024,45(Z2):52-58. DOI： 10.11959/j.issn.1000-436x.2024253.

QIAN Zhiye,LI Xue,LI Suogang.Domain name generation algorithm based on improved Markov chain[J].Journal on Communications,2024,45(Z2):52-58. DOI： 10.11959/j.issn.1000-436x.2024253.

摘要

首先，结合多种策略进行子域名的初步筛选，包括字典枚举、搜索引擎挖掘和网站信息抓取。接着，使用改进的马尔可夫模型算法对筛选数据进行分析，生成并添加新的子域名到结果集中。然后，检查并验证数据的真实性，若数据未达标准，则重复分析过程。最终，形成一个经过严格验证的数据集。该算法显著提升了子域名发现的效率及覆盖范围，有效弥补了传统方法的不足。

Abstract

First

a combination of multiple strategies were used to conduct preliminary screening of subdomain names

including dictionary enumeration

search engine mining

and website information crawling. Then

the improved Markov model algorithm was used to analyze the filtered data

and new subdomain names were generated and added to the result set. Thereafter

the data was checked and verified for authenticity. If the data did not meet the criteria

the analysis process was repeated. Finally

a rigorously validated data set was formed. The proposed algorithm significantly improves the efficiency and coverage of subdomain discovery

effectively making up for the shortcomings of traditional methods.

关键词

Keywords

references

刘阳 , 刘晶 . 2023年全球网络安全态势综述 [J ] . 保密科学技术 , 2024 ( 2 ): 37 - 43 .

LIU Y , LIU J . Overview of global cybersecurity situation in 2023 [J ] . Secrecy Science and Technology , 2024 ( 2 ): 37 - 43 .

胡荣贵 , 许成喜 , 汪永益 , 等 . 马尔科夫链在域名信息探测中的应用 [J ] . 计算机应用与软件 , 2015 , 32 ( 6 ): 152 - 155 .

HU R G , XU C X , WANG Y Y , et al . Application of Markov chain in domain Name system information detection [J ] . Computer Applications and Software , 2015 , 32 ( 6 ): 152 - 155 .

刘宇 , 岳明 , 汤锦淮 , 等 . 互联网域名解析系统安全分析 [J ] . 信息网络安全 , 2010 , 10 ( 12 ): 14 - 16 .

LIU Y , YUE M , TANG J H , et al . Security analysis of Internet domain names system [J ] . Netinfo Security , 2010 , 10 ( 12 ): 14 - 16 .

刘文峰 , 方滨兴 , 张文佳 . 针对新顶级域名的Web浏览器行为测试与分析 [J ] . 智能计算机与应用 , 2020 , 10 ( 2 ): 333 - 338 .

LIU W F , FANG B X , ZHANG W J . The behavior test and analysis of new top-level domain names in Web browsers [J ] . Intelligent Computer and Applications , 2020 , 10 ( 2 ): 333 - 338 .

胡昌秀 , 张仰森 , 刘洋 , 等 . 面向域名解析系统的知识图谱构建与应用方法 [J ] . 科学技术与工程 , 2023 , 23 ( 23 ): 9979 - 9990 .

HU C X , ZHANG Y S , LIU Y , et al . Knowledge graph construction and application method for domain Name system [J ] . Science Technology and Engineering , 2023 , 23 ( 23 ): 9979 - 9990 .

程亚楠 , 李正民 , 迟乐军 , 等 . 基于改进马尔可夫链的域名获取方法研究 [J ] . 高技术通讯 , 2016 , 26 ( 10 ): 857 - 866 .

张宗国 . 马尔可夫链预测方法及其应用研究 [D ] . 南京 : 河海大学 , 2005 .

ZHANG Z G . Research on Markov chain prediction method and its application [D ] . Nanjing : Hohai University , 2005 .

ZENGX M , CHENX S , SHAOG L , et al . DTA-HOC: online HTTPS traffic service identification using DNS in large-scale networks [J ] . Tsinghua Science and Technology , 2020 , 25 ( 2 ): 239 - 254 .

CASINO F , LYKOUSAS N , HOMOLIAK I , et al . Intercepting hail hydra: real-time detection of algorithmically generated domains [J ] . Journal of Network and Computer Applications , 2021 , 190 : 103135 .

Views

812

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Multi-type honeypot deployment scheme based on Stackelberg game and DQN

Survey of research on Tor-based anonymous networking technologies

Research and implementation of reputation-based inter-domain routing selection mechanism

Multi-level loss object tracking adversarial attack method based on spatial perception

Network security situational awareness model based on threat intelligence

Related Author

Han Yu

Chen Yuanheng

Wang Yichuan

Ma Yibin

Hei Xinhong

ZHU Yufei

HU Yuxiang

CHEN Bo

Related Institution

School of Computer Science and Engineering, Xi’an University of Technology

School of Cyberspace Security, Zhengzhou University

Institute of Information Technology, Information Engineering University

National Key Laboratory of Advanced Communication Networks

Key Laboratory of Cyberspace Security, Ministry of Education of China

AI问答

⁰