Triples Anomaly Detection Security Model Based on Decision Tree
Liangcheng Li, Song Qing, Ting Jiang, Leiyue Zhou · 2015
A triples anomaly detection security model based on decision tree algorithm is designed for solving the issues--exist in the current network security detection models,such as lacking of filtering the events, and classifying the events in the network environment faintly.This model which based on the decision tree positions and distinguishes various network threats at the first step.Afterwards, dividing the degree of anomalies through analyzing the source IP address, the destination IP address and the event types of network anomalies.Proved by examples,the triples anomaly detection security model produces remarkable effects on defining the type of security incidents and determining the degree of abnormal threats.