Optimized strategy of deployment firewall policies

Abstract

Modern networks are becoming larger and more complex. This requires administrators and management tools to update their security policies and improve the deployment of their firewall. This latter represents a challenging and error-prone task, which aims to pass from one policy to another one while respecting the conditions of safety and security. Several studies have focused on the conception, optimization of security policy and conflict detection but rare are the researchers who tried to improve the firewall policy deployment. In this paper, we investigated the algorithm of type II policy and showed its vulnerability in some cases. As alternative, we provide a new algorithm for publishing political class type II. Further to its safety, our algorithm can be used even for the deployment of important size policies.