The Application of Decision Tree in Security Audit
Dan Shao, Yan Bai Wang · Applied Mechanics and Materials · 2013
Network security audit is an important part in network security system, which, to some extent, makes up for the deficiencies in firewalls and intrusion detections. According to the characteristics of the network data, the traditional decision tree model is modified, and the application pattern in which the decision tree model is used to network data security audit is also proposed. Simulations show that the decision tree classification model not only is adaptive to the characteristics of network data, but also can prevent malicious attacks effectively. The effects of the attributes such as IP, port, and protocol type on classification are also uncovered.