Finding an Optimized Discriminate Function for Internet Application Recognition

Everyday the usages of the Internet increase and simply a world of the data become accessible. Network providers do not want to let the provided services to be used in harmful or terrorist affairs, so they used a variety of methods to protect the special regions from the harmful data. One of the most important methods is supposed to be the firewall. Firewall stops the transfer of such packets through several ways, but in some cases they do not use firewall because of its blind packet stopping, high process power needed and expensive prices. Here we have proposed a method to find a discriminate function to distinguish between usual packets and harmful ones by the statistical processing on the network router logs. So an administrator can alarm to the user. This method is very fast and can be used simply in adjacent with the Internet routers.

• E. Khorram
• S.M. Mirzababaei

• Data Mining
• Firewall
• Optimization
• Packetclassification
• Statistical Pattern Recognition.

[1] P. Gupta, N. McKeown, "Algorithms for Packet Classification", IEEE Networks, 2001. [2] A. Benczur, K.Csalogany, A.Lukacs, B. Racz, C.Sidlo, M.Uher, L.Vegh, "An Architecture for Mining Massive Web Logs with Experiments", Project Report Data Riddle & OTKA & AKP ,2003. [3] Q. Yang, H. Wang, W. Zhang, "Web-log Mining for Quantitative Temporal-Event Prediction", IEEE Computational Intelligence Bulletin, 2002. [4] Z. Su, Q. Yang, H. Zhang, X. Xu, Y. Hu, "Correlation-based Document Clustering using Web Logs", Microsoft Research China Report, 1999-2000. [5] K. Fukunaga, "Statistical Pattern Recognition", Academic Press Inc. [6] W. Stallings, "Data and Computer Communications", Prentice Hall. [7] E. Chong, S. Zak, "An Introduction to Optimization", John Wiley & Sons Inc. [8] M. Rahmati, S.M. Mirzababaei, "Router Logs Data Mining", Project Report, 2004.