System and method for detecting generated domain

A system for domain analysis, comprising a processor and a non-transitory computer-readable storage medium storing instructions that, when executed by the processor, cause the processor to perform a method for domain analysis, the method comprising:

• obtaining a domain;
• and
• inputting the obtained domain to a trained detection model to determine if the obtained domain was generated by one or more domain generation algorithms, wherein:
• the detection model comprises a neural network model, a n-gram-based machine learning model, and an ensemble layer;
• inputting the obtained domain to the detection model comprises inputting the obtained domain to each of the neural network model and the n-gram-based machine learning model;
• the neural network model and the n-gram-based machine learning model both output to the ensemble layer;
• and
• the ensemble layer outputs a probability that the obtained domain was generated by the domain generation algorithms.

A non-transitory computer-readable storage medium storing instructions that, when executed by a processor, cause the processor to perform a method for domain analysis, the method comprising:

• obtaining a domain;
• and
• inputting the obtained domain to a trained detection model to determine if the obtained domain was generated by one or more domain generation algorithms, wherein:
• the detection model comprises a neural network model, a n-gram-based machine learning model, and an ensemble layer;
• inputting the obtained domain to the detection model comprises inputting the obtained domain to each of the neural network model and the n-gram-based machine learning model;
• the neural network model and the n-gram-based machine learning model both output to the ensemble layer;
• and
• the ensemble layer outputs a probability that the obtained domain was generated by the domain generation algorithms.