Modified Tree Rule Firewall for Removing Redundant and Shadowing Rules in Cloud Firewall Policy

Abstract

Abstract Most private networks are secured by firewalls, which are crucial for safety. A firewall aims to inspect each incoming and outgoing packet before deciding whether to allow it. Among conventional firewalls, rule-based ones are the most frequently used. However, traditional Listed-Rule firewalls have limits when it comes to task performance and is ineffective when used with some networks that have very large firewall rule sets. This paper suggests a model firewall design, "Tree-Rule Firewall," which has advantages and works with expansive networks like "cloud". This paper proposes a modified tree rule firewall (MTRFcloud) for removing redundant and shadowing rules, improving cloud network security. This work first generates a tree rule firewall for the corresponding firewall policy. The suggested modified tree rule firewall does not produce redundant rules and efficiently finds the shadow rules. Then, a modified Tree-Rule firewall that manages firewall rules was tested in a cloud setting. It is shown that the updated Tree-Rule firewall provides faster processing and greater network security. With a big network, like a cloud network, the modified Tree-Rule firewall is simpler to construct and efficiently removes the redundant and shadow rules.