SYSTEMS AND METHODS FOR DETECTING MALICIOUS PROGRAMS WITH A DOMAIN GENERATION ALGORITHM (DGA) Russian patent published in 2020 - IPC H04L29/06 

FIELD: computer equipment.

SUBSTANCE: computer system for detecting malicious programs, comprising memory and associated microprocessor and configured to implement, outside the host with a potential malware domain generation algorithm (DGA), following steps: interception of the initial response to the first external access request; determining, according to address, included in the first external access request and the initial response, whether the external site is a time server; in response, if external site is time server, sending a modified response to a host with a potential DGA malware; interception, in response to a second external access request sent by a host with a potential malware DGA response, indicating that second access request was not successful; and in response to interception of response indicating that second access request was not successful, determining that a host comprises a malicious program which executes domain generation algorithm.

EFFECT: technical result consists in isolation of host with potential malware of domain generation algorithm from tool software for analysis.

15 cl, 12 dwg