首页 | 本学科首页   官方微博 | 高级检索  
     

基于C5.0决策树的NAT设备检测方法
引用本文:石志凯,朱国胜,雷龙飞,陈胜,镇佳,吴善超,吴梦宇.基于C5.0决策树的NAT设备检测方法[J].计算机科学,2018,45(Z6):323-327.
作者姓名:石志凯  朱国胜  雷龙飞  陈胜  镇佳  吴善超  吴梦宇
作者单位:湖北大学计算机与信息工程学院 武汉430062,湖北大学计算机与信息工程学院 武汉430062;湖北省教育信息化工程技术研究中心 武汉430062,湖北大学计算机与信息工程学院 武汉430062,湖北大学计算机与信息工程学院 武汉430062,湖北大学计算机与信息工程学院 武汉430062,湖北大学计算机与信息工程学院 武汉430062,湖北大学计算机与信息工程学院 武汉430062
基金项目:本文受赛尔网络下一代互联网技术创新项目(NGII20150101)资助
摘    要:网络地址转换NAT对外网隐藏了内网的结构,这一方面给非法终端隐匿接入提供了便利,对网络造成潜在威胁;另一方面,用户也可通过NAT私自共享网络,直接损害网络运营者的利益。有效检测NAT设备,对网络安全管控、运营管理具有重要作用。文中对现有NAT检测技术进行了分析与比较,阐述了各自的优缺点和适用条件;提出了一种利用上层应用的特征和训练数据构建C5.0决策树的NAT设备检测方法。真实网络环境下的实验表明,所提方法能有效识别NAT设备。

关 键 词:NAT  NAT检测  C5.0决策树

NAT Device Detection Method Based on C5.0 Decision Tree
SHI Zhi-kai,ZHU Guo-sheng,LEI Long-fei,CHEN Sheng,ZHEN Ji,WU Shan-chao and WU Meng-yu.NAT Device Detection Method Based on C5.0 Decision Tree[J].Computer Science,2018,45(Z6):323-327.
Authors:SHI Zhi-kai  ZHU Guo-sheng  LEI Long-fei  CHEN Sheng  ZHEN Ji  WU Shan-chao and WU Meng-yu
Affiliation:School of Computer and Information Engineering,Hubei University,Wuhan 430062,China,School of Computer and Information Engineering,Hubei University,Wuhan 430062,China;Hubei Province Engineering Technology Research Center for Education Informationization,Wuhan 430062,China,School of Computer and Information Engineering,Hubei University,Wuhan 430062,China,School of Computer and Information Engineering,Hubei University,Wuhan 430062,China,School of Computer and Information Engineering,Hubei University,Wuhan 430062,China,School of Computer and Information Engineering,Hubei University,Wuhan 430062,China and School of Computer and Information Engineering,Hubei University,Wuhan 430062,China
Abstract:NAT hides the internal network structure to the external network.On the one hand,it offers access to the illicit terminal facilitates,causing potential threats to the network.On the other hand,users can also privately share networks through NAT,which directly harm the interests of network operators.Effective detecting NAT devices plays an important role in network security and controlling,network operation and management.This article analyzed and compared the current NAT detection technologies.The advantages,disadvantages and the applicable conditions of each technologies were described.A C5.0 decision tree based NAT device detection method using features of the upper-level applications and training data was proposed in this paper.The experiments with real network traffic data show that the model can identify NAT device effectively.
Keywords:NAT  NAT detection  C5  0 decision tree
点击此处可从《计算机科学》浏览原始摘要信息
点击此处可从《计算机科学》下载全文
设为首页 | 免责声明 | 关于勤云 | 加入收藏

Copyright©北京勤云科技发展有限公司  京ICP备09084417号