基于知识图谱的恶意域名检测方法  

Detection Method of Malicious Domain Name based on Knowledge Map

作　　者：张奕[1] 邹福泰[1] ZHANG Yi;ZOU Fu-tai(School of Cyber Security,Shanghai Jiao Tong University,Shanghai 200240,China)

机构地区：[1]上海交通大学网络空间安全学院

出　　处：《通信技术》2020年第1期168-173,共6页Communications Technology

基　　金：国家重点研发计划项目课题（No.2017YFB0802300,No.2018YFB0803503）;NSFC-浙江两化融合联合基金（No.U1509219）~~

摘　　要：人工智能在恶意域名检测领域的应用越来越广泛,而传统的恶意域名检测方法主要采用黑名单方式,存在时效性较差的问题。因此,提出了一种将知识图谱与恶意域名检测相结合的系统,完成了信息在知识图谱中的存储和表示。将系统的嵌入式模型作为输入,使用BiLSTM神经网络提取特征并完成最终的检测。实验表明,在通过真实数据构造的数据集上,该系统性能良好,对恶意域名的检测准确率高达99.31%。The application of artificial intelligence in the field of malicious domain name detection is becoming more and more widespread.However,the traditional malicious domain name detection method mainly uses the blacklist method,which has the problem of poor timeliness.Therefore,a system combining knowledge map with detection of malicious domain names is proposed to complete the storage and representation of information in the knowledge map.Taking the embedded model of the system as input,BiLSTM neural network is used to extract features and complete the final detection.Experiments indicate that the system performs well on datasets constructed from real data,and the accuracy of detecting malicious domain names is as high as 99.31%.

关 键 词：知识图谱 恶意域名 BiLSTM 嵌入模型 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]