sesa 18: e5

Research Article

CLETer: A Character-level Evasion Technique Against Deep Learning DGA Classifiers

Download17 downloads
  • @ARTICLE{10.4108/eai.18-2-2021.168723,
        author={Wanping Liu and Zhoulan Zhang and Cheng Huang and Yong Fang},
        title={CLETer: A Character-level Evasion Technique Against Deep Learning DGA Classifiers},
        journal={EAI Endorsed Transactions on Security and Safety: Online First},
        volume={},
        number={},
        publisher={EAI},
        journal_a={SESA},
        year={2021},
        month={2},
        keywords={cybersecurity, malware, domain generation algorithms, deep learning, adversarial attack},
        doi={10.4108/eai.18-2-2021.168723}
    }
    
  • Wanping Liu
    Zhoulan Zhang
    Cheng Huang
    Yong Fang
    Year: 2021
    CLETer: A Character-level Evasion Technique Against Deep Learning DGA Classifiers
    SESA
    EAI
    DOI: 10.4108/eai.18-2-2021.168723
Wanping Liu1, Zhoulan Zhang2, Cheng Huang1, Yong Fang1,*
  • 1: School of Cyber Science and Engineering, Sichuan University, Chengdu, China
  • 2: Information security institute, Sichuan University, Chengdu, China
*Contact email: yfang@scu.edu.cn

Abstract

The detection of pseudo-random domain names generated by Domain Generation Algorithms (DGAs) is one of the effective ways to find botnets. Study on the vulnerability of deep learning models to adversarial attacks can enhance the robustness of DGA detection mechanism. This paper proposes CLETer, an improved DGA that provides a character-level evasion technique against state-of-the-art DGA classifiers. Based on existing DGA domain names, CLETer can intelligently generate adversarial examples by quantifying the influence of every character to the classification result and then changing the important characters. Those improved domain names can easily evade being detected and show good transferability. The experimental results demonstrate that when modifying only two characters, CLETer can effectively lower the LSTM classifier’s recall from 99.76% to 1.29% and drop the CNN classifier’s recall from 99.36% to 3.64%. It is proved that adversarial retraining is a viable defense strategy to CLETer.