Command & Control (C2) Traffic Detection Via Algorithm Generated Domain (Dga) Classification Using Deep Learning And Natural Language Processing

Maria Milena Araujo Felix
11/26/2025
cs.LGcs.AIcs.CR

No confident code implementation found for this paper. 5 possible matches can be shown below.

Abstract

The sophistication of modern malware, specifically regarding communication with Command and Control (C2) servers, has rendered static blacklist-based defenses obsolete. The use of Domain Generation Algorithms (DGA) allows attackers to generate thousands of dynamic addresses daily, hindering blocking by traditional firewalls. This paper aims to propose and evaluate a method for detecting DGA domains using Deep Learning and Natural Language Processing (NLP) techniques. The methodology consisted of collecting a hybrid database containing 50,000 legitimate and 50,000 malicious domains, followed by the extraction of lexical features and the training of a Recurrent Neural Network (LSTM). Results demonstrated that while statistical entropy analysis is effective for simple DGAs, the Neural Network approach presents superiority in detecting complex patterns, reaching 97.2% accuracy and reducing the false positive rate in ambiguous lawful traffic scenarios.

View on arXivView PDF

Code Implementations

No confident code match yet

We couldn't find an author-owned or strongly-evidenced community implementation for this paper. 5 weaker matches are hidden by default — verify before relying on them.

No code implementations found yet.

Know of an implementation? Let us know in the comments below!

Similar Papers

LLMs for Domain Generation Algorithm Detection

85% match2024

A Novel Supervised Deep Learning Solution to Detect Distributed Denial of Service (DDoS) attacks on Edge Systems using Convolutional Neural Networks (CNN)

82% match2023

False Sense of Security: Leveraging XAI to Analyze the Reasoning and True Performance of Context-less DGA Classifiers

82% match2023

DNS Tunneling: Threat Landscape and Improved Detection Solutions

81% match2025

Robust DDoS-Attack Classification with 3D CNNs Against Adversarial Methods

81% match2025

Optimized Approaches to Malware Detection: A Study of Machine Learning and Deep Learning Techniques

81% match2025

Cite this paper

@article{felix2025command,
  title  = {Command & Control (C2) Traffic Detection Via Algorithm Generated Domain (Dga) Classification Using Deep Learning And Natural Language Processing},
  author = {Maria Milena Araujo Felix},
  year   = {2025},
  eprint = {2512.07866},
  archivePrefix = {arXiv},
  url    = {http://arxiv.org/abs/2512.07866v1}
}

Add a badge to your README

Shows whether official code is linked for this paper.

Code of Paper badge
[![Code of Paper](https://codeofpaper.com/badge/2512.07866.svg)](https://codeofpaper.com/paper/2512.07866)

Discussion