LSTM network based malicious domain name detection

Abstract

Detecting malicious domain names attract lot of research in recent years. Researchers tried various text based, network traffic based and combination of these methods to detect malicious names. In this paper, we analyze the possibility of detection malicious names using deep neural network based models. Bidirectional LSTM network has been developed and trained on the dataset. Two tasks were experimented. First task was to identify malicious domain name and second task was to identify the class of domain name. Proposed method is able to perform well on task 1 producing 98.9% accuracy whereas on task 2 it is able to achieve accuracy of 69.7% only.