Abstract
Packet filtering is an important technology in firewalls and other relevant security devices. Traditional packet filtering just compares some fields of an input packet header with a given rlue-list in linear order and finds out the first matched rule, then follows the matched rule’s policy to allow or block the packet. In this way, efficiency is low and rules in the rule-list are independent, so that information among them can not be used effectively. In this paper, a new idea using a decision tree classifier is proposed. It first builds a decision tree according to the rule-list and then searches the tree to find out the matched rule for an input packet. It can be illustrated that packet filtering using a decision tree classifier is more quickly and can study inductively from the rules, so it will make the packet filter firewall has some prediction ability.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Ziegler, R.L.: Linux firewalls, 2nd edn. New Riders Publishing, Indianapolis. USA (2001)
Quinlan, J.R.: Induction of decision trees. Machine Learning (1986)
Xi-zhao, W., Jia-rong, H.: Learning algorithm of decision tree generation for interval-valued attributes. Chinese Journal ofSoftware 9(8), 638–640 (1998)
Enhong, C., Qingyi, W., Qingsheng, C.: Test generation and discrimination of continuously-valued attributes in decision tree based learning. Chinese Computer Research and Development 35(5), 403–407 (1998)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2003 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Li, C., Lin, W., Yang, Y. (2003). Packet Filtering Using a Decision Tree Classifier. In: Liu, J., Cheung, Ym., Yin, H. (eds) Intelligent Data Engineering and Automated Learning. IDEAL 2003. Lecture Notes in Computer Science, vol 2690. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-45080-1_109
Download citation
DOI: https://doi.org/10.1007/978-3-540-45080-1_109
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-40550-4
Online ISBN: 978-3-540-45080-1
eBook Packages: Springer Book Archive