DomURLs_BERT: Pre-trained BERT-based Model for Malicious Domains and URLs Detection and Classification Article Swipe

MAKE IMPACT

Abdelkader El Mahdaouy , Salima Lamsiyah , Meryem Janati Idrissi , Hamza Alami , Zakaria Yartaoui , Ismaïl Berrada · YOU? · · 2024 · Open Access · · DOI: https://doi.org/10.48550/arxiv.2409.09143

Detecting and classifying suspicious or malicious domain names and URLs is fundamental task in cybersecurity. To leverage such indicators of compromise, cybersecurity vendors and practitioners often maintain and update blacklists of known malicious domains and URLs. However, blacklists frequently fail to identify emerging and obfuscated threats. Over the past few decades, there has been significant interest in developing machine learning models that automatically detect malicious domains and URLs, addressing the limitations of blacklists maintenance and updates. In this paper, we introduce DomURLs_BERT, a pre-trained BERT-based encoder adapted for detecting and classifying suspicious/malicious domains and URLs. DomURLs_BERT is pre-trained using the Masked Language Modeling (MLM) objective on a large multilingual corpus of URLs, domain names, and Domain Generation Algorithms (DGA) dataset. In order to assess the performance of DomURLs_BERT, we have conducted experiments on several binary and multi-class classification tasks involving domain names and URLs, covering phishing, malware, DGA, and DNS tunneling. The evaluations results show that the proposed encoder outperforms state-of-the-art character-based deep learning models and cybersecurity-focused BERT models across multiple tasks and datasets. The pre-training dataset, the pre-trained DomURLs_BERT encoder, and the experiments source code are publicly available.

Type

preprint

Language

en

Landing Page

http://arxiv.org/abs/2409.09143

PDF

https://arxiv.org/pdf/2409.09143

OA Status

green

Cited By

2

Related Works

10

OpenAlex ID

https://openalex.org/W4403666679

Raw OpenAlex JSON

OpenAlex ID

https://openalex.org/W4403666679

Canonical identifier for this work in OpenAlex

DOI

https://doi.org/10.48550/arxiv.2409.09143

Digital Object Identifier

Title

DomURLs_BERT: Pre-trained BERT-based Model for Malicious Domains and URLs Detection and Classification

Work title

Type

preprint

OpenAlex work type

Language

en

Primary language

Publication year

2024

Year of publication

Publication date

2024-09-13

Full publication date if available

Authors

Abdelkader El Mahdaouy, Salima Lamsiyah, Meryem Janati Idrissi, Hamza Alami, Zakaria Yartaoui, Ismaïl Berrada

List of authors in order

Landing page

https://arxiv.org/abs/2409.09143

Publisher landing page

PDF URL

https://arxiv.org/pdf/2409.09143

Direct link to full text PDF

Open access

Yes

Whether a free full text is available

OA status

green

Open access status per OpenAlex

OA URL

https://arxiv.org/pdf/2409.09143

Direct OA link when available

Concepts

Computer science, Artificial intelligence

Top concepts (fields/topics) attached by OpenAlex

Cited by

2

Total citation count in OpenAlex

Citations by year (recent)

2025: 2

Per-year citation counts (last 5 years)

Related works (count)

10

Other works algorithmically related by OpenAlex

Full payload