Detection of Anomaly in Firewall Rule-Sets

Abstract

Firewall is generally the first layer of defense in network security, where rules are specified to allow or reject incoming and outgoing network traffic. However, firewall rules may be prone to ‘erratic’ operations because of human errors involved in the rule-set creation. In this paper, we provide an overview of anomaly detection in firewall rule-sets and their applications.