A two-stage deep learning approach for multiclass DGA-based malware communication detection and classification in DoH network traffic
The adoption of DNS over HTTPS (DoH) has substantially improved user privacy by encrypting DNS queries, but it has also introduced new opportunities for attackers to hide Domain Generation Algorithm (DGA)-based malware communications. In this study, we propose a novel two-stage deep learning framework that integrates a...