Firewall Anomaly Detection Based on Double Decision Tree

To solve the problems regarding how to detect anomalous rules with an asymmetric structure, which leads to the firewall not being able to control the packets in and out according to the administrator’s idea, and how to carry out an incremental detection efficiently when the new rules are added, anom...

Full description

Bibliographic Details
Main Authors: Zhiming Lin, Zhiqiang Yao
Format: Article
Language:English
Published: MDPI AG 2022-12-01
Series:Symmetry
Subjects:
Online Access:https://www.mdpi.com/2073-8994/14/12/2668