Source address transition technologies, such Network Address Translation and Proxy, can be used to provide unauthorized private address space. The source address of packets originated in the private address space will be changed by NAT gateway or proxy server, which is hard for service providers to manage the edge network and trace source of attacks. This paper presents the source address transition detection methods based on application presence information to enhance the edge network security.