DomainChroma: Building actionable threat intelligence from malicious domain names

摘要: Abstract Since the 1980s, domain names and name system (DNS) have been used abused. Although legitimate Internet users rely on as indispensable infrastructures for using Internet, attackers use or abuse them reliable, instantaneous, distributed attack infrastructures. However, there is a lack of complete understanding such domain-name abuses methods coping with them. In this study, we designed implemented unified analysis combining current defense solutions to build actionable threat intelligence from malicious names. The basic concept underlying our chromatography. Our can distinguish among mixtures websites. On basis concept, do not create hodgepodge but design separation abused offer information by considering characteristics well possible points defense. Finally, evaluated defense-information output large real dataset show effectiveness validity system.