Shadowed and Redundant Rules Removal in the Cloud Firewall Policy: A Modified Tree Rule Firewall Approach

Abstract

Firewalls are essential for security and are used to secure the majority of private networks. A firewall's goal is to examine every incoming and outgoing data before granting permission. One common type of conventional firewall is the rule-based firewall. But when it pertains to task performance, traditional listed-rule firewalls are limited, and they don't operate well on some networks with extremely big firewall rule sets. This study proposes a model firewall architecture called "Tree-Rule Firewall," which has benefits and functions well on large-scale networks like "cloud." In order to improve cloud network security, this study suggests an improved tree firewall that eliminates shadowing and redundant rules. Initially, this effort creates a tree rule. The proposed revised tree rule firewall effectively locates the shadow rules while avoiding the creation of redundant rules. Next, a cloud-based test was conducted on an altered Tree-Rule firewall that controls firewall rules. It is demonstrated that increased network security and quicker processing are offered by the modified Tree-Rule firewall. Large networks, such as cloud networks, are easier to build using a modified Tree-Rule firewall since it effectively eliminates shadow and redundant rules.