| 基于决策树分类的HTTP隧道检测方法 |
| |
| 引用本文： | 丁要军,刘小豫.基于决策树分类的HTTP隧道检测方法[J].咸阳师范学院学报,2011,26(2):49-53. |
| |
| 作者姓名： | 丁要军 刘小豫 |
| |
| 作者单位： | 咸阳师范学院信息工程学院,陕西咸阳,712000 |
| |
| 基金项目： | 咸阳师范学院科研基金项目 |
| |
| 摘 要： | HTTP隧道是各种木马和间谍软件进行网络通信的主要途径,严重威胁了网络安全。比较有效的算法主要是统计指印方法,统计指印采用的特征较少,对训练集的依赖程度较高,算法的稳定性较差。决策树分类算法提取了网络数据流更多的有效特征。使用决策树分类算法对HTTP隧道数据进行了检测,通过实验结果对比,决策树算法的稳定性更好,精确度和效率更高。
|
| 关 键 词： | HTTP隧道 统计指印 决策树 网络安全 |
A Method for Http-Tunnel Detection Based on Decision Tree Classifier |
| |
| DING Yao-jun,LIU Xiao-yu.A Method for Http-Tunnel Detection Based on Decision Tree Classifier[J].Journal of Xianyang Normal University,2011,26(2):49-53. |
| |
| Authors: | DING Yao-jun LIU Xiao-yu |
| |
| Institution: | DING Yao-jun,LIU Xiao-yu(School of Information Engineering,Xianyang Normal University,Xianyang 712000,Shaanxi,China) |
| |
| Abstract: | HTTP-tunnel is always used by Trojans and backdoors to avoid the detection of firewalls,and it is a threat of network security.There are a few methods in detection of HTTP-tunnel,and the statistical fingerprinting is an effective method.The method of statistical fingerprinting is instability because the features which the method using is few and its accuracy is determined by the volume of training set.In this method,we extracted more statistic features from the first four packets and the whole flows which w... |
| |
| Keywords: | HTTP-tunnel statistical fingerprinting decision tree network security |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
|
