Concatenate a sequence of words from one or more wordlists, resulting in less randomly appealing and thus more camouflaging domains+
La presente taxonomia es la primera versión disponible para el Centro Nacional de Seguridad Digital.
+La presente taxonomia es la primera versión disponible para el Centro Nacional de Seguridad Digital del Perú.
| + + | ++dga namespace available in JSON format at this location. The JSON format can be freely reused in your application or automatically enabled in MISP taxonomy. + | +
A taxonomy to describe domain-generation algorithms often called DGA. Ref: A Comprehensive Measurement Study of Domain Generating Malware Daniel Plohmann and others.
+Arithmetic
+Calculate a sequence of values that either have a direct ASCII representation usable for a domain name or designate an offset in one or more hard- coded arrays, constituting the alphabet of the DGA.
+Hash
+Use the hexdigest representation of a hash to produce the domain.
+Wordlist
+Concatenate a sequence of words from one or more wordlists, resulting in less randomly appealing and thus more camouflaging domains+
Permutation
+derive all possible AGDs (Algorithmically-Generated Domain) through permutation of an initial domain name.
+The DGA uses temporal information in the seeding for its domain generation, resulting in sets of domains with certain validity time spans.
+The DGA does not rely on temporal information in the seeding for its domain generation, resulting in a single set of domains.
+Given the implementation of the DGA and a seed, its full set of possible domains can be calculated at any point in time.
+Domains depend on unpredictable seed input, e.g. on external dynamic information that can be published at a later time (e.g. via posting on social media), on data specific to the system it is executed on, or on arbitrary non-predictable PRNG output.
+