域名生成算法检测技术综述

The **C&C server** is an intermediate server used by cyber attackers to control bots and plays a key role in **botnet**. In order to enhance the concealment of the C&C server, cyber attackers use **domain generation algorithms** to hide the IP address of C&C server. In recent years, **domain generation algorithm detection technology**, as an important means of detecting botnets, has become a research hotspot. This paper first introduces the current development trend of cyber security and the topological structure of botnets. Secondly, the domain generation algorithm and the related dataset are introduced. Then, the classification of domain generation algorithm detection techniques is introduced, and these detection techniques are summarized. Finally, the problems existing in the domain generation algorithm detection technology at the present stage are discussed and the future research directions are prospected.