基于决策树算法的网络加密流量识别方法

Network encryption traffic identification method based on decision tree algorithm

为解决基于层次时空特征的识别方法在实际应用中,存在正确识别网络中恶意攻击行为流量较少,无法为网络环境安全提供保障问题,开展基于决策树算法的网络加密流量识别方法研究。在网络加密过程中,有针对性的获取流量载荷特征,掌握不同数据中携带的噪声;在此基础上,引进决策树算法,进行流量的分类处理,根据处理结果,实现对流量的识别。此外通过将两种识别方法应用到相同的网络环境中证明,设计的识别方法能够实现对更多网络中恶意攻击行为流量的准确识别,将该识别方法应用到不同网络环境当中可为其安全性提供保障,防止受到恶意攻击者的威胁,为各个类型信息数据的传输提供更加优质的空间条件。

in order to solve the problem that the identification method based on hierarchical temporal and spatial characteristics has less traffic to correctly identify malicious attacks in the network and can not provide guarantee for the security of the network environment, the network encryption traffic identification method based on decision tree algorithm is studied. In the process of network encryption, obtain the characteristics of traffic load and master the noise carried in different data;On this basis, the decision tree algorithm is introduced to classify the traffic, and the traffic identification is realized according to the processing results. In addition, by applying the two identification methods to the same network environment, it is proved that the designed identification method can accurately identify more malicious attack traffic in the network. Applying the identification method to different network environments can provide security and prevent being threatened by malicious attackers, Provide better spatial conditions for the transmission of various types of information data.