A Novel Approach for Detecting DGA-Based Botnets in DNS Queries Using Machine Learning Techniques

Table 1

Domain name data attributes along with attribute value calculation.

Domain name/attribute	google.com	microsoft.com	g.doubleclick.net	google-analytics.com
Class	legit	legit	legit	legit
partition_number	1	0	0	0
Subclass	legit	legit	legit	legit
ut_consonant_ratio	0.6	0.7	0.7	0.7
ut_digit_ratio	0	0	0	0
ut_domain_length	10	13	17	20
ut_meaning_ratio	0.2	0.692307692	0.823529412	0.2
ut_shannon	2.646439345	3.026986833	3.616874606	3.684184
ut_vowel_ratio	0.4	0.307692308	0.294117647	0.35