Detection Metbod of Trojan's Control Domain Based on Improved Neural Network Algoritbm

Firstly, the character that the Trojans use domain name to control was analyzed and the method that DNS adopted to detect Trojans was introduced. Secondly, based on the analysis of static and dynamic characters for Trojan domain name, eight indicators were obtained as the input of BP neural network...

Full description

Saved in:
Bibliographic Details
Main Authors: Aijiang Liu, Changhui Huang, Guangjun Hu
Format: Article
Language:zho
Published: Beijing Xintong Media Co., Ltd 2014-07-01
Series:Dianxin kexue
Subjects:
Online Access:http://www.telecomsci.com/zh/article/doi/10.3969/j.issn.1000-0801.2014.07.007/
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1841529337431457792
author Aijiang Liu
Changhui Huang
Guangjun Hu
author_facet Aijiang Liu
Changhui Huang
Guangjun Hu
author_sort Aijiang Liu
collection DOAJ
description Firstly, the character that the Trojans use domain name to control was analyzed and the method that DNS adopted to detect Trojans was introduced. Secondly, based on the analysis of static and dynamic characters for Trojan domain name, eight indicators were obtained as the input of BP neural network algorithm, including operation time of domain name, the period to visit the domain name, the variation speed of IP address, the country change of IP address, IP address of private address, the same domain name with multiple IP address for different countries, TTL value and search times of domain name. An improved BP neural network algorithm was proposed to solve training efficiency for a great number of domain names, and large average error. Finally, the experimental evaluation of samples was tested by improved neural network algorithm. Compared with traditional neural network algorithm, the detection efficiency is better.
format Article
id doaj-art-67f00b6464db4b57bb2c5c207b226536
institution Kabale University
issn 1000-0801
language zho
publishDate 2014-07-01
publisher Beijing Xintong Media Co., Ltd
record_format Article
series Dianxin kexue
spelling doaj-art-67f00b6464db4b57bb2c5c207b2265362025-01-15T03:19:09ZzhoBeijing Xintong Media Co., LtdDianxin kexue1000-08012014-07-0130394259620021Detection Metbod of Trojan's Control Domain Based on Improved Neural Network AlgoritbmAijiang LiuChanghui HuangGuangjun HuFirstly, the character that the Trojans use domain name to control was analyzed and the method that DNS adopted to detect Trojans was introduced. Secondly, based on the analysis of static and dynamic characters for Trojan domain name, eight indicators were obtained as the input of BP neural network algorithm, including operation time of domain name, the period to visit the domain name, the variation speed of IP address, the country change of IP address, IP address of private address, the same domain name with multiple IP address for different countries, TTL value and search times of domain name. An improved BP neural network algorithm was proposed to solve training efficiency for a great number of domain names, and large average error. Finally, the experimental evaluation of samples was tested by improved neural network algorithm. Compared with traditional neural network algorithm, the detection efficiency is better.http://www.telecomsci.com/zh/article/doi/10.3969/j.issn.1000-0801.2014.07.007/Trojandomain nameneural network
spellingShingle Aijiang Liu
Changhui Huang
Guangjun Hu
Detection Metbod of Trojan's Control Domain Based on Improved Neural Network Algoritbm
Dianxin kexue
Trojan
domain name
neural network
title Detection Metbod of Trojan's Control Domain Based on Improved Neural Network Algoritbm
title_full Detection Metbod of Trojan's Control Domain Based on Improved Neural Network Algoritbm
title_fullStr Detection Metbod of Trojan's Control Domain Based on Improved Neural Network Algoritbm
title_full_unstemmed Detection Metbod of Trojan's Control Domain Based on Improved Neural Network Algoritbm
title_short Detection Metbod of Trojan's Control Domain Based on Improved Neural Network Algoritbm
title_sort detection metbod of trojan s control domain based on improved neural network algoritbm
topic Trojan
domain name
neural network
url http://www.telecomsci.com/zh/article/doi/10.3969/j.issn.1000-0801.2014.07.007/
work_keys_str_mv AT aijiangliu detectionmetbodoftrojanscontroldomainbasedonimprovedneuralnetworkalgoritbm
AT changhuihuang detectionmetbodoftrojanscontroldomainbasedonimprovedneuralnetworkalgoritbm
AT guangjunhu detectionmetbodoftrojanscontroldomainbasedonimprovedneuralnetworkalgoritbm