本文研究了僵尸网络和僵尸网络域名的关系,针对已有的僵尸网络域名检测方法存在的不足。本文引入改进后的分布式随机森林算法,从域名、IP和时间性三方面建立了僵尸网络域名的检测模型。通过真实域名验证,表明本文提出的僵尸网络域名检测方案在分布式环境下精确度高且比较稳定,具有较好的应用效果。 This paper studies the relationship between botnets and botnet domain names, aiming at the shortcomings of existing botnet domain name detection methods. In this paper, an improved distributed random forest algorithm is introduced, and a detection model of botnet domain names is established from three aspects: domain name, IP and timeliness. Through the real domain name verification, it shows that the botnet domain name detection scheme proposed in this paper has high accuracy and stability under distributed environment and has good application effect.