NIOM-DGA: Nature-inspired optimised ML-based model for DGA detection

Jeremiah, Daniel, Rafiq, Husnain, Ta, Vinh Thong, Usman, Muhammad, Raza, Mohsin and Awais, Muhammad (2025) NIOM-DGA: Nature-inspired optimised ML-based model for DGA detection. Computers and Security, 157. ISSN 0167-4048

[thumbnail of Jeremiah_etal_2025_ComputersSecurity]
Preview
PDF (Jeremiah_etal_2025_ComputersSecurity) - Published Version
Available under License Creative Commons Attribution Non-commercial No Derivatives.

Download (4MB) | Preview

Abstract

Domain Generation Algorithms (DGAs) allow malware to evade detection by generating millions of random domains daily for Command-and-Control (C&C) communication, challenging traditional detection methods. This work presents NIOM-DGA, a novel machine learning model that applies nature-inspired algorithms (NIAs) to select an optimal subset of 78 features from a dataset of over 16 million domain names, including several features not traditionally used in DGA detection. This approach enhances accuracy, robustness, and generalisability, achieving up to 98.3% accuracy—outperforming most existing approaches. Further testing on 10 external datasets with over 37 million domains confirms an average classification accuracy of 95.7%. Designed for seamless integration into SIEM, EDR, XDR, and cloud security platforms, NIOM-DGA significantly improves DGA detection compared to existing methods, advancing practical threat detection capabilities.

Item Type: Article
Additional Information: Data availability: Data will be made available on request. Dataset used for this research: The cleaned dataset that was used for features engineering can be downloaded here NIOM-DGA-Research.
Uncontrolled Keywords: domain generation algorithm,machine learning,malware,nature inspired optimisation,computer science(all),law ,/dk/atira/pure/subjectarea/asjc/1700
Faculty \ School: Faculty of Science > School of Computing Sciences
UEA Research Groups: Faculty of Science > Research Groups > Cyber Intelligence and Networks
Faculty of Science > Research Groups > Data Science and AI
Faculty of Science > Research Groups > Health Technologies
Related URLs:
Depositing User: LivePure Connector
Date Deposited: 07 Aug 2025 15:30
Last Modified: 10 Aug 2025 06:30
URI: https://ueaeprints.uea.ac.uk/id/eprint/100107
DOI: 10.1016/j.cose.2025.104561

Downloads

Downloads per month over past year

Actions (login required)

View Item View Item