Dataset Open Access
HYDRA dataset
Fran Casino;
Nikolaos Lykousas;
Ivan Homoliak;
Constantinos Patsakis;
Julio Hernandez-Castro
This repository contains a large dataset for the research of domain generation algorithms (DGAs) and machine learning. At the time of writing the dataset contains more than 90m of domains and more than 100 families.
The dataset consists of SLDs from DGAs and their extracted features. The main sources for the DGAs are the following:
- DGArchive
- The DGA feed from Network Security Research Lab at 360
- The OSINT feeds for DGA from Bambenek Consulting
When the samples were sparse, we used the reversed code to create new ones.
Moreover, it has SLDs from three adversarial DGAs (referred to deception, deception2 and khaos) DGAs and SLDs from the top 1m Alexa domains.
| Name | Size | |
|---|---|---|
|
dataset.7z
md5:27fbeca237b60fae65134f31025cd486 |
2.7 GB | Download |
Plohmann, Daniel, et al. "A comprehensive measurement study of domain generating malware." 25th USENIX Security Symposium (USENIX Security 16). 2016.
Spooren, Jan, et al. "Detection of algorithmically generated domain names used by botnets: a dual arms race." Proceedings of the 34th ACM/SIGAPP Symposium on Applied Computing. 2019.
X. Yun, J. Huang, Y. Wang, T. Zang, Y. Zhou, and Y. Zhang, "Khaos: An adversarial neural network dga with high anti-detection ability", IEEE Transactions on Information Forensics and Security, vol. 15, pp.2225–2240, 2020.
| All versions | This version | |
|---|---|---|
| Views | 131 | 131 |
| Downloads | 15 | 15 |
| Data volume | 40.5 GB | 40.5 GB |
| Unique views | 118 | 118 |
| Unique downloads | 11 | 11 |
- Publication date:
- July 29, 2020
- DOI:
-
- Keyword(s):
- Domain generation algorithms DGA
- Grants:
-
European Commission:
-
LOCARD - Lawful evidence collecting and continuity platform development (832735)
-
YAKSHA - Cybersecurity Awareness and Knowledge Systemic High-level Application (780498)
- CyberSec4Europe - Cyber Security Network of Competence Centres for Europe (830929)
-
LOCARD - Lawful evidence collecting and continuity platform development (832735)
- License (for files):
- Creative Commons Attribution 4.0 International