Domain name recognition method and device, storage medium and electronic device

Abstract

The invention discloses a domain name recognition method and device, a storage medium and an electronic device. The method comprises the steps of obtaining domain name access logs sent by all terminals, wherein the domain name access logs are used for recording the mapping relation between user accounts using the terminals and accessed domain names; performing grouping mapping processing on the domain names in the domain name access log by using a locality sensitive hashing method to obtain a mapping result in which object domain names contained in each group have relevance; and sequentially performing the following recognition processing on the domain name types of the object domain names in each group: under the condition that the current group contains a known domain name type, recognizing an unknown domain name type in the current group according to the known domain name type. The technical problem that at present, the malicious domain names recognized through a reverse analysis method have lagging is solved.

Description

technical field [0001] The present invention relates to the field of computers, in particular to a domain name identification method and device, a storage medium and an electronic device. Background technique [0002] Malicious domain names used for malicious activities often seriously threaten the user's network information security. Among them, malicious domain names include: malware download domain names, illegal website domain names, phishing website domain names, domain names connected to malware control and command servers, etc. [0003] At present, in order to maintain network security, network security experts usually conduct reverse analysis on software using malicious domain names, so as to achieve the purpose of identifying malicious domain names. However, this method can only be analyzed after the malware samples are obtained. Not only the analysis cost is high, but also the identification results are still lagging behind, which cannot guarantee timely identific...

AI Technical Summary

Problems solved by technology

However, this method can only be analyzed after the malware samples are obtained. Not only the analysis cost is high, but also the identification results are lagging behind, which cannot guarantee timely identification of malicious domain names.

[0004] For the above problems, no effective solution has been proposed

Images