Research on Edge Security Analysis Method Based on Decision Tree

Based on the classification of ack, udp, and syn type abnormal traffic launched by worm programs, machine learning algorithms are used to achieve real-time classification of traffic generated by terminal devices, without affecting the normal business traffic of the terminal. After project evaluation and comparison of the performance of several classification and clustering models, the current model in the project is an algorithm implementation of decision tree type. Through experiments, it has been proven that the edge security analysis method based on decision trees is effective.