Review the structure of the rules in the firewall And methods for developing and optimizing rules

Firewall is considered to be one of the most important security components in today’s network architectures. Using high abstract models for the definition and update of the access control policies is much more efficient and safer than manipulating the firewall configuration at low level using the constructor languages directly. For most security administrators, it is not worth throwing away the deployed filtering rules and starting a new policy definition from scratch. In this paper, we survey a mechanism to improve firewall performance, using network traffic behavior and packet filtering statistics. Then, we show the design and development of Tree-Rule firewall that does not create conflict rules and redundant rules

کلیدواژه ها:

Access control ، Network security ، Packet filtering ، Tree-Rule firewall ، security Policy