The week's pick
Reseach Article
Firewall Rule Anomaly Detection and Resolution using Particle Swarm Optimization Algorithm
| International Journal of Computer Applications |
| Foundation of Computer Science (FCS), NY, USA |
| Volume 178 - Number 33 |
| Year of Publication: 2019 |
| Authors: John Kingsley Arthur, Edward Kwadwo Boahen, Ronky Francis Doh, Eric Appiah Mantey |
10.5120/ijca2019919215
|
John Kingsley Arthur, Edward Kwadwo Boahen, Ronky Francis Doh, Eric Appiah Mantey . Firewall Rule Anomaly Detection and Resolution using Particle Swarm Optimization Algorithm. International Journal of Computer Applications. 178, 33 ( Jul 2019), 32-37. DOI=10.5120/ijca2019919215
Abstract
The firewall ensures the protection of a network by falling on some number of defined rules set by the administrator of the computer network. Managing these rules to be optimum without errors is very difficult and sometimes leads to the formation of anomalies such as redundant, correlation, and shadowing rules. This defined problem has received the attention of both the academic and industry players in finding a pragmatic solution. A lot of reasonable attempts has been made by researchers of which many resorted to the automation of the firewall rule management process. The automation is to aid determine and resolve the conflicting rules and also to reduce the load that will be on the network administrator, which almost always leads to the creation of contradictory rules. The existing literature has not focused much on the amount of time it takes to determine and resolve these anomalies. Most of the conflicting rules are as a result of the wrongful position[index] a rule may occupy in the rule list. The research proposes a contextual design of an improved firewall framework, that rest on the heuristic approach of the Particle Swarm Optimization (PSO) Algorithm to determine and assign the best position [index] to a rule and thereby improving the search and resolution of identified anomalies in a firewall rules list. Three (3) lightweight algorithms are designed for anomaly detection and resolution using PSO as the backbone.
References
- Darade, R. V. and Kumbharkar, P.B. “Firewall policy anomaly detection and resolution”, An International Journal of Advanced Computer technology, (June, 2014). Volume III, Issue VI in COPUSOFT
- Khummanee, S., Khumseela, A., Puangpronpitag, S. 2013. Towards a New Design of Firewall: Anomaly Elimination and Fast Verifying of Firewall Rules, in 10th International Joint Conference on Computer Science and Software Engineering (JCSSE).
- Abedin, M., Nessa, S., Khan, L., and Thuraisingham, B., “Detection and Resolution of Anomalies in Firewall Policy Rules”, in Damiani E., Liu. P(eds) Data and Applications Security XX. DBSec 2006. Lecture Notes in Computer Science, vol 4127. Springer, Berlin, Heidelberg.
- Farouk, A., Agiza, H. N., and Radwan, E. “Detecting inconsistent firewall configuration rules using range algorithm” in International Conference on Machine Learning and Computing IPCSIT vol.3, IACSIT Press, Singapore.
- Swamy, D. K., Narender, T. “Improvements in Firewall Policy Rules to Identifying and Resolving Anomalies” in International Journal Of Advanced Research and Innovations, Vol.1, Issue .9
- Chandre, P. R., Surve, R.R., Badhan, S. R., Surve, A. B., Mane, V. T. “Anomalies of Firewall Policy Detection and Resolution” in International Journal of Engineering Research and Applications, ISSN: 2248-9622, Vol. 4, Issue 3(Version 1), March 2014, pp. 696-701
- Kachare, S. S., Deshmukh, P.K. “Firewall Policy Anomaly Management with Optimizing Rule Order”, in International Journal of Application or Innovation in Engineering & Management (IJAIEM), ISSN 2319 – 4847, Volume 4, Issue 2, February 2015.
- Jitha, C. K., Namboodiri, S. “Firewall Policy Anomalies- Detection and Resolution”, in International Journal of Computer Trends and Technology (IJCTT), Volume 4, Issue 7, July 2013
- D. Hemkumar, M. Chugh, “Methods for Firewall Policy Detection and Prevention”, in International Journal of Science, Engineering and Technology Research(IJSETR), Volume 3, Issue 7, July 2014.
- Sethuram, J., and Sankareeswari, G. “Redundancy Management a nd Anomaly Detection o n Firewall Ruleset u sing Fame”, in International Journal of Science Technology & Engineering, Volume 1, Issue 10, April 2015. ISSN(online): 2349-784X.
- Prasath, A. Y., and Revithi, N.,“Dynamic Rule based Interfirewall Optimization using Redundancy Removal Algorithm”, in International Journal of Computer Applications. Volume 92, No. 6, April 2014
- Hongxin, H., A. Gail-Joon, A., and K. Kulkarni, “Detecting and Resolving Firewall Policy Anomalies”, in IEEE Transactions On Dependable And Secure Computing, Vol. 9, NO. 3, MAY/JUNE 2012
- Anbarasan, A., Balasubramani, G., Madhan, C., Naveenkumar, P., and N.S. Nithya, “Detecting and Resolving Firewall Policy Anomalies Using Rule-Based Segmentation”, in International Journal of Computer Science and Mobile Computing(IJCSMC), Vol. 2, Issue. 4, April 2013, pg.134 – 137.
- El-Alfy, E. M. “A Heuristic Approach for firewall Policy Optimization”, in ICACT 2007.
- Al-Maolegi, M. and Arkok, B. “An Improved Apriori Algorithm For Association Rules”, in International Journal on Natural Language Computing (IJNLC). Vol. 3, No.1, February 2014.
- Engelbrecht, A. P. “Computational Intelligence: An Introduction”, in John Wiley & Sons Ltd. 2nd Edition. 2007.
Index Terms
Keywords