activity
20202024
most citedAnalyzing the Real-World Applicability of DGA Classifiers

33 citations · 148 across the 11 of their papers we have counts for

collaborators

11 papers

cs.CR2024★ 5 cited

Towards Robust Domain Generation Algorithm Classification

Arthur Drichel, Marc Meyer, Ulrike Meyer

In this work, we conduct a comprehensive study on the robustness of domain generation algorithm (DGA) classifiers. We implement 32 white-box attacks, 19 of which are very effective…

cs.CR2023★ 10 cited

False Sense of Security: Leveraging XAI to Analyze the Reasoning and True Performance of Context-less DGA Classifiers

Arthur Drichel, Ulrike Meyer

The problem of revealing botnet activity through Domain Generation Algorithm (DGA) detection seems to be solved, considering that available deep learning classifiers achieve accura…

cs.CR2022★ 4 cited

Detecting Unknown DGAs without Context Information

Arthur Drichel, Justus von Brandt, Ulrike Meyer

New malware emerges at a rapid pace and often incorporates Domain Generation Algorithms (DGAs) to avoid blocking the malware's connection to the command and control (C2) server. Cu…

cs.CR2021★ 27 cited

CoinPrune: Shrinking Bitcoin's Blockchain Retrospectively

Roman Matzutt, Benedikt Kalde, Jan Pennekamp +3

Popular cryptocurrencies continue to face serious scalability issues due to their ever-growing blockchains. Thus, modern blockchain designs began to prune old blocks and rely on re…

cs.CR2021

Sharing FANCI Features: A Privacy Analysis of Feature Extraction for DGA Detection

Benedikt Holmes, Arthur Drichel, Ulrike Meyer

The goal of Domain Generation Algorithm (DGA) detection is to recognize infections with bot malware and is often done with help of Machine Learning approaches that classify non-res…

cs.CR2021★ 9 cited

The More, the Better? A Study on Collaborative Machine Learning for DGA Detection

Arthur Drichel, Benedikt Holmes, Justus von Brandt +1

Domain generation algorithms (DGAs) prevent the connection between a botnet and its master from being blocked by generating a large number of domain names. Promising single-data-so…

cs.CR2021★ 24 cited

Finding Phish in a Haystack: A Pipeline for Phishing Classification on Certificate Transparency Logs

Arthur Drichel, Vincent Drury, Justus von Brandt +1

Current popular phishing prevention techniques mainly utilize reactive blocklists, which leave a ``window of opportunity'' for attackers during which victims are unprotected. One p…

cs.CR2021★ 18 cited

First Step Towards EXPLAINable DGA Multiclass Classification

Arthur Drichel, Nils Faerber, Ulrike Meyer

Numerous malware families rely on domain generation algorithms (DGAs) to establish a connection to their command and control (C2) server. Counteracting DGAs, several machine learni…

cs.CR2020★ 16 cited

Making Use of NXt to Nothing: The Effect of Class Imbalances on DGA Detection Classifiers

Arthur Drichel, Ulrike Meyer, Samuel Schüppen +1

Numerous machine learning classifiers have been proposed for binary classification of domain names as either benign or malicious, and even for multiclass classification to identify…

cs.CR2020★ 33 cited

Analyzing the Real-World Applicability of DGA Classifiers

Arthur Drichel, Ulrike Meyer, Samuel Schüppen +1

Separating benign domains from domains generated by DGAs with the help of a binary classifier is a well-studied problem for which promising performance results have been published.…

cs.CR2020★ 2 cited

How to Securely Prune Bitcoin's Blockchain

Roman Matzutt, Benedikt Kalde, Jan Pennekamp +3

Bitcoin was the first successful decentralized cryptocurrency and remains the most popular of its kind to this day. Despite the benefits of its blockchain, Bitcoin still faces seri…