Scholarlink

<p>In cybersecurity, the detection of malicious activities within domain name system (DNS) over HTTPS (DoH) traffic is of paramount importance. However, traditional classification methods often struggle to generalize across diverse network environments and effectively handle the complexities inherent in DNS traffic data. To solve these challenges, this article proposes a novel deep learning based on DoH traffic classification. A hybrid deep learning technique is proposed for detecting malicious DNS traffic. This approach forces the strengths of graph neural networks and capsule networks for effective classification. The method aims to enhance detection accuracy and improve response times in identifying threats. This study focuses on enhancing performance through optimal hyperparameter selection. The golden jackal optimization algorithm is employed for this purpose, hybridized with capsule networks. This approach aims to improve classification accuracy and efficiency in the targeted application. For the L1-DoH-NonDoH dataset, results show strong performance across metrics with an accuracy of 99.7%, precision of 98.5%, recall of 99.7%, and F1-score of 99.3%. Similarly, for the L2-Benign DoH-Malicious DoH dataset, the model achieved an accuracy of 99.8%, precision of 98.9%, recall of 99.8%, and F1<b>-</b>score of 99%. These results validate the efficacy of the method in distinguishing both benign and malicious traffic across various metrics.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Implementing a hybrid deep learning technique for detecting malicious DNS over HTTPS (DoH) traffic

  • 期刊论文

  • 发表日期：

    2025年8月15日

查看全文
  • Mohemmed Sha,
  • Adel Binbusayyis

摘要

In cybersecurity, the detection of malicious activities within domain name system (DNS) over HTTPS (DoH) traffic is of paramount importance. However, traditional classification methods often struggle to generalize across diverse network environments and effectively handle the complexities inherent in DNS traffic data. To solve these challenges, this article proposes a novel deep learning based on DoH traffic classification. A hybrid deep learning technique is proposed for detecting malicious DNS traffic. This approach forces the strengths of graph neural networks and capsule networks for effective classification. The method aims to enhance detection accuracy and improve response times in identifying threats. This study focuses on enhancing performance through optimal hyperparameter selection. The golden jackal optimization algorithm is employed for this purpose, hybridized with capsule networks. This approach aims to improve classification accuracy and efficiency in the targeted application. For the L1-DoH-NonDoH dataset, results show strong performance across metrics with an accuracy of 99.7%, precision of 98.5%, recall of 99.7%, and F1-score of 99.3%. Similarly, for the L2-Benign DoH-Malicious DoH dataset, the model achieved an accuracy of 99.8%, precision of 98.9%, recall of 99.8%, and F1-score of 99%. These results validate the efficacy of the method in distinguishing both benign and malicious traffic across various metrics.