Improving the Performance of Firewalls through Network Traffics Logs' Classification of Firat Dataset Using Decision Tree Algorithm
Maryam Talaeepoor, Behzad Soleimani Neysiani, Mohammad Davarpanah Jezi · 2024
As long as a computer system is connected to the Internet, it is susceptible to attack as a victim. In computer networks, it becomes important to manage the network based on parameters such as network size and network data. Firewalls are devices that help network administrators in this case to establish security in the network, and can be based on the rules that the firewall is based on. It is configured to control incoming and outgoing network traffic. Firewalls can be considered the most vital components of the network in establishing security. Firat University introduced a dataset containing firewall logs with multiple classes for firewall decisions. This study uses data mining techniques to improve the validation performance of classification using various machine learning algorithms like neural networks, deep learning, and kNN. The experimental results show more than 10% improvement according to precision and recall rates among various folding scenarios used in related works with minor improvement in accuracy, too. The decision tree algorithm is fast and explainable versus other algorithms.