Ant colony optimization-based firewall anomaly mitigation engine

摘要: A firewall is the most essential component of network perimeter security. Due to human error and involvement multiple administrators in configuring rules, there exist common anomalies rulesets such as Shadowing, Generalization, Correlation, Redundancy. There a need for research on efficient ways resolving anomalies. The challenge also see that reordered or resolved ruleset conforms organization’s framed security policy. This study proposes an ant colony optimization (ACO)-based anomaly resolution reordering rules called ACO-based mitigation engine. Modified strategies are introduced automatically detect these minimize manual intervention administrator. Furthermore, adaptive strategy proposed aid faster when new rule appended. approach was tested with different policy sets. results were found be promising terms number conflicts resolved, minimal availability loss marginal risk. work demonstrated application metaheuristic search technique, ACO, improving performance packet-filter respect mitigating at same time conformance