The Application of Decision Tree in Security Audit

Abstract:

Network security audit is an important part in network security system, which, to some extent, makes up for the deficiencies in firewalls and intrusion detections. According to the characteristics of the network data, the traditional decision tree model is modified, and the application pattern in which the decision tree model is used to network data security audit is also proposed. Simulations show that the decision tree classification model not only is adaptive to the characteristics of network data, but also can prevent malicious attacks effectively. The effects of the attributes such as IP, port, and protocol type on classification are also uncovered.

• Periodical: Applied Mechanics and Materials (Volumes 397-400)
• Pages: 2517-2520
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.397-400.2517
• Online since: September 2013
• Authors: Dan Shao, Yan Bai Wang
• Keywords: Classification of Data, Decision Tree Algorithm, Network Data, Security Audit

References

[1] Deng X.R., Chen L, Wang G.Y. Audit data analyzing approach for security audit system. Journal of Chongqing University of Posts and Telecommunications(Natural Science Edition). 2005, 17(5): 604-607.

[2] Quinlan J R. Introduction of decision trees. Machine Learning, 1986(1): 84-100.

[3] Quinlan J R. C4. 5: Programs for Machine Learning. San Mateo, Calif: Morgan Kaufmann, 1993: 17-42.

[4] Tao W., Ma J.M., Zhang S.Z. Analysis and Application of Decision Tree Algorithm. COMPUTER KNOWLEDGE AND TECHNOLOGY. 2009, 5(13): 3352-3354.