An intelligent algorithmically generated domain detection system

Abstract

This paper proposes an intelligent system, called IDGADS, for detecting algorithmically generated domains in the early stages based on easy and automatic computable features of real domain name system (DNS) traffic quickly without investing time in reverse engineering and/or log monitoring or dependency on external information like WHOIS/DNS response. IDGADS is a supervised deep learning model, trained over 17M domains from the reputed sources. It is implemented in Python and served as a service over the cloud for free testing of the public in the form of a web app. IDGADS is capable of detecting malicious domains up to 99% accuracy. Till 17-April-2020, 1160963 domains have been tested, and it has detected 817069 DGA-generated domains by the users of different countries. Since IDGADS is developed to check DNS queries only, thus it can be installed as the first line of defence in security stack for validating DNS queries before sending to DNS server.