Adaptive Conflict-Free Optimization of Rule Sets for Network Security Packet Filtering Devices

Algorithm 1

ACO automation.

(1) for   to   do

(2)    if     then

(3)     logs matching rule for device dev

(4)     logs collected for device

(5)    if     then

(6)     

(7)     

(8)     if     then

(9)        

(10)         Extract rules from “deny all”

(11)       Optimize rule list of device dev

(12)       Evaluate percentage Cost Reduction pCR

(13)       if     then

(14)       Upload optimized rule list into device dev

(15)      end if

(16)     end if

(17)    end if

(18)    

(19)    end if

(20) end for