Dissertation > Excellent graduate degree dissertation topics show

NAT recognition method based on network flow characteristic

Author: GaoZuoXiang
Tutor: HuGuangZuo
School: University of Electronic Science and Technology
Course: Communication and Information System
Keywords: NAT Detection Network Address Translation Network Traffic Feature Data Mining
CLC: TP393.06
Type: Master's thesis
Year: 2012
Downloads: 66
Quote: 0
Read: Download Dissertation

Abstract


NAT (Network Address Translation) technique provides a convenient way tosolve the problem of the shortage of IPv4addresses and enable several clients to sharea single IP address, which brings lots of convennience and benefit to clients. However,NAT also make it easier for unauthorized clients to access networks conveniently,which brings serious security risks to the ISP (Internet Service Provider). Consequently,we have to find a NAT detection method which is able to identify several clientsbehind NAT device and a single client efficiently. Most existing methods rely on aspecific field in IP packets, and tend to become invalid if the field is modified or justcan’t satisfy detection demand. Moreover, those methods are limited by operationsystem and surfing habits of clients.Therefore, we propose a NAT detection method based on network traffic features,which don’t rely on any specific field in IP packets, nor operation system or surfinghabits of clients. In view of the NAT detection method can be regarded as typicalbinary classifying problem in data mining techniques, we introduce data miningtechniques and apply them in the NAT detection method. The general idea of ourmethod is to gain network traffic features of all hosts in networks by IP addressesfirstly, then to treat these IP addresses and feature parameters as instances andattributes in data mining, finally to achieve NAT detection result through dividingnetwork flows into NAT flows and non-NAT flows with data mining techniques.The core of our method is network traffic features, which is the basis of dividingNAT devices and normal clients by data mining techniques. In this paper, we analyzethe traffic features of NAT devices and normal clients comparatively, summarize11kinds of NAT traffic features which reflect the difference of NAT devices and normalclients, and conclude a set of NAT traffic feature parameters which include28kinds offeature parameters. We test the classification performance of these feature parameters,the results show that the set of NAT traffic feature parameters is able to divide NATdevices and normal clients accurately.The main contribution of us is analyzing the traffic features of NAT devices and normal clients comparatively in order to gain a set of traffic feature parameters whichreflect the deviation of NAT devices and normal clients, then apply the featureextraction and feature selection on network traffic data, and finish NAT detection bymeans of data mining techniques. In our simulation we use two supervised learningclassification algorithms, C4.5Decision Tree and Naive Bayesian, and an unsupervisedlearning clustering algorithm, K-means. We validate the validity and veracity of ourmethod through analyzing the simulation results of differrent kinds of algorithmscomparatively. We also compare the results of adopting feature selection or not, so thatwe gain the most effective network traffic feature parameters in current simulationenvirement. Finally, we test the influence to the performance of our method caused byP2P flows, the simulation results show that the influence is acceptable.

Related Dissertations

  1. A Study on Healthcare Product Marketing Based on Data Mining Technology,F426.72
  2. Gao Zhong-ying academic thought and experience and use of Bufei Decoction treatment of common diseases of the respiratory system drug law,R249.2
  3. Bing- thick academic thought and clinical experience and empirical studies apply to turtle soups treatment of chronic kidney disease,R249.2
  4. The Design and Implementation of Bicluster Data Analyzing Software,TP311.52
  5. Research on Clustering Algorithm Based on Mutation Particle Swarm Optimization,TP18
  6. Research on Fuzzy C-Mean Clustering Algorithm Based on Particle Swarm Optimization and Shuffled Frog Leaping Algorithm,TP18
  7. Research on Clustering Algorithm Based on Genetic Algorithm and Rough Set Theory,TP18
  8. Based on data mining research tax audit case selection,F812.42
  9. Community-oriented education, personalized learning system and its implementation,TP391.6
  10. Association rule mining based Intrusion Detection System Research and Implementation,TP393.08
  11. Data warehouse technology in the banking customer management systems research and implementation,TP315
  12. Investments Projects Evaluation Supporting System Based on Optimizing Model of Industrial Parameters,F283
  13. The Research and Application of Data Mart in the Telecommunication Business Analysis,TP311.13
  14. Application of Data Mining in the Analysis of Higher Vocational Colleges’ Achievement,TP311.13
  15. Traffic Classification Using Stream Data Mining Algorithm,TP393.06
  16. Research and Design of Individualized Online Teaching-aided System Based on Data Mining,TP311.13
  17. Design and Implementation of Course Assessment and Analysis of Decision System Based on Data Mining,TP311.13
  18. Design to E-learning System in Senior Vocational School Base on Moodle,TP311.52
  19. Design and Development of Teaching Quality Assessment System Based on Data Mining,TP311.13
  20. The Application of the Mining of Association Rules in Analysis of Traffic Accidents,U491.31
  21. The Application of Association Rules Algorithm in Higher Vocational Colleges’ Endorsement of Impoverished Students,G717

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer networks, test , run
© 2012 www.DissertationTopic.Net  Mobile