6–7 Feb 2025
Atlanta Marriott Marquis
America/New_York timezone

DGA Domain Detection and Classification with Passive DNS and Deep Learning

7 Feb 2025, 10:20
20m
Imperial Salon B ( Atlanta Marriott Marquis)

Imperial Salon B

Atlanta Marriott Marquis

265 Peachtree Center Ave NE Atlanta GA 30303 United States
Pre-recorded Presentation Main Session OARC 44 Day 2

Speaker

Kim Morgan de Oliveira Ito Porto (Sao Paulo State University (UNESP))

Description

A brief presentation on detecting and classifying DGA domains identified in real-world traffic using Passive DNS and Deep Learning.
We present the principles of DGA and Botnets, the fundamentals of Passive DNS and the tool used, and the Monitoring Panel that uses Deep Learning models integrated with Passive DNS to identify and classify these malicious domains in the São Paulo State University network traffic.
The detector and classifier models were recently published in scientific articles authored by us and are included in the presentation.

Talk duration 20 Minutes (+5 for Q&A)

Primary authors

Adriano Cansian ((Sao Paulo State University (UNESP)) João Rafael Gregório (Universidade Estadual Paulista - UNESP) Kim Morgan de Oliveira Ito Porto (Sao Paulo State University (UNESP))

Presentation materials