{"id":"https://openalex.org/W4406861452","doi":"https://doi.org/10.1109/cicn63059.2024.10847389","title":"A Transformer Embedding-Based Model for Malicious DGA-Generated Domain Detection","display_name":"A Transformer Embedding-Based Model for Malicious DGA-Generated Domain Detection","publication_year":2024,"publication_date":"2024-12-22","ids":{"openalex":"https://openalex.org/W4406861452","doi":"https://doi.org/10.1109/cicn63059.2024.10847389"},"language":"en","primary_location":{"id":"doi:10.1109/cicn63059.2024.10847389","doi":"https://doi.org/10.1109/cicn63059.2024.10847389","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cicn63059.2024.10847389","pdf_url":null,"source":{"id":"https://openalex.org/S7407087370","display_name":"IEEE International Conference on Computational Intelligence and Communication Networks (CICN)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE 16th International Conference on Computational Intelligence and Communication Networks (CICN)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072809002","display_name":"Suleiman Y. Yerima","orcid":"https://orcid.org/0000-0003-0346-1219","observed_orcids":["https://orcid.org/0000-0003-0346-1219"]},"institutions":[{"id":"https://openalex.org/I193260172","display_name":"British University in Dubai","ror":"https://ror.org/00mc18523","country_code":"AE","type":"education","lineage":["https://openalex.org/I193260172"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Suleiman Y. Yerima","raw_affiliation_strings":["The British University in Dubai,Faculty of Engineering and IT,Dubai,United Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The British University in Dubai,Faculty of Engineering and IT,Dubai,United Arab Emirates","institution_ids":["https://openalex.org/I193260172"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103016944","display_name":"P. Vinod","orcid":"https://orcid.org/0000-0001-6078-2014","observed_orcids":["https://orcid.org/0000-0001-6078-2014"]},"institutions":[{"id":"https://openalex.org/I20497027","display_name":"Cochin University of Science and Technology","ror":"https://ror.org/00a4kqq17","country_code":"IN","type":"education","lineage":["https://openalex.org/I20497027"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"P. Vinod","raw_affiliation_strings":["Cochin University of Science and Technology,Department of Computer Applications,Kochi,Kerala,India,682022"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cochin University of Science and Technology,Department of Computer Applications,Kochi,Kerala,India,682022","institution_ids":["https://openalex.org/I20497027"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5066945309","display_name":"Khaled F. Shaalan","orcid":"https://orcid.org/0000-0003-0823-8390","observed_orcids":["https://orcid.org/0000-0003-0823-8390"]},"institutions":[{"id":"https://openalex.org/I193260172","display_name":"British University in Dubai","ror":"https://ror.org/00mc18523","country_code":"AE","type":"education","lineage":["https://openalex.org/I193260172"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Khaled Shaalan","raw_affiliation_strings":["The British University in Dubai,Department of Computer Science,Dubai,United Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The British University in Dubai,Department of Computer Science,Dubai,United Arab Emirates","institution_ids":["https://openalex.org/I193260172"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.7712,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.75332109,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"537","last_page":"541"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.5532000064849854,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.5532000064849854,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.41190001368522644,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.011500000022351742,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/domain-generation-algorithms","display_name":"domain generation algorithms","score":0.9760000109672546},{"id":"https://openalex.org/keywords/malicious-domain-detection","display_name":"malicious domain detection","score":0.9300000071525574},{"id":"https://openalex.org/keywords/dga","display_name":"DGA","score":0.453000009059906},{"id":"https://openalex.org/keywords/generative-pre-trained-transformer","display_name":"generative pre-trained transformer","score":0.7440000176429749},{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.8669999837875366},{"id":"https://openalex.org/keywords/malware-evasion","display_name":"malware evasion","score":0.6790000200271606},{"id":"https://openalex.org/keywords/xgboost","display_name":"XGBoost","score":0.6269999742507935}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6305433511734009},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.6182005405426025},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.598125159740448},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2455901801586151},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2106170654296875},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.16364166140556335},{"id":"https://openalex.org/C165801399","wikidata":"https://www.wikidata.org/wiki/Q25428","display_name":"Voltage","level":2,"score":0.0877179503440857}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cicn63059.2024.10847389","doi":"https://doi.org/10.1109/cicn63059.2024.10847389","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cicn63059.2024.10847389","pdf_url":null,"source":{"id":"https://openalex.org/S7407087370","display_name":"IEEE International Conference on Computational Intelligence and Communication Networks (CICN)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE 16th International Conference on Computational Intelligence and Communication Networks (CICN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W2889547652","https://openalex.org/W2909500081","https://openalex.org/W2963341956","https://openalex.org/W2998811192","https://openalex.org/W2999697944","https://openalex.org/W3011866104","https://openalex.org/W3012300551","https://openalex.org/W3020685193","https://openalex.org/W3030163527","https://openalex.org/W3033083611","https://openalex.org/W3036666454","https://openalex.org/W3042281778","https://openalex.org/W3091042935","https://openalex.org/W4225070666","https://openalex.org/W4281698253","https://openalex.org/W4362471463","https://openalex.org/W4386471798","https://openalex.org/W4391342738"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2081900870","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890"],"abstract_inverted_index":{"Domain":[0],"Generation":[1],"Algorithms":[2],"(DGA)":[3],"techniques":[4,124],"are":[5],"frequently":[6],"used":[7],"by":[8,15,105,158],"cybercriminals":[9],"to":[10,55,88,122,133,169],"make":[11],"malware":[12],"more":[13,98],"evasive":[14],"generating":[16],"thousands":[17],"of":[18,35,41,52,96,101,136,140,146,166],"fake":[19,46],"domain":[20,71],"names":[21,72],"that":[22],"prevent":[23],"established":[24],"security":[25],"solutions":[26],"from":[27,45],"effectively":[28],"discovering":[29],"or":[30],"disrupting":[31],"attacks.":[32],"The":[33,109,138],"proliferation":[34],"DGA":[36,70],"has":[37],"increased":[38],"the":[39,50,75,94,102,144,147,151,154,159,163,170],"difficulty":[40],"distinguishing":[42],"genuine":[43],"domains":[44,104],"ones,":[47],"thus":[48],"necessitating":[49],"investigation":[51],"new":[53],"approaches":[54],"improve":[56],"detection":[57,100],"efficiency.":[58],"Therefore,":[59],"in":[60],"this":[61],"paper":[62],"we":[63],"propose":[64],"a":[65,116],"method":[66],"for":[67],"detecting":[68],"malicious":[69,103],"based":[73],"on":[74],"Generative":[76],"Pre-Trained":[77],"Transformer":[78],"(GPT)":[79],"Large":[80],"Language":[81],"Model":[82],"(LLM).":[83],"Our":[84],"approach":[85],"utilizes":[86],"GPT":[87],"learn":[89],"dense":[90],"vector":[91],"representations":[92],"with":[93,153],"aim":[95],"enabling":[97],"effective":[99],"machine":[106,172],"learning":[107,173],"algorithms.":[108,174],"system":[110],"is":[111],"implemented":[112],"and":[113,120],"evaluated":[114],"using":[115],"publicly":[117],"available":[118],"dataset":[119],"compared":[121,168],"widely-used":[123],"such":[125],"TF-IDF,":[126],"Bag-of-Words,":[127],"N-grams,":[128],"word2vec":[129],"as":[130,132],"well":[131],"two":[134],"variants":[135],"BERT.":[137],"results":[139],"our":[141],"experiments":[142],"demonstrates":[143],"superiority":[145],"GPT-based":[148],"technique":[149],"over":[150],"others,":[152],"best":[155],"performance":[156],"recorded":[157],"XGboost":[160],"classifier":[161],"achieving":[162],"highest":[164],"accuracy":[165],"93.1%":[167],"other":[171]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2025-10-10T00:00:00"}