Firewall Rule Ordering Based on Statistical Model

Firewall played an important role as a tool that protects the network of the enterprise. On optimizing firewall policy, firewalls can filter packets effectively and improve the performance of firewalls. Otherwise, if a firewall policy is not written properly, firewall will easily become a fatal point of network attacks. In this paper, we first propose a statistical model that statistic packets which go into or out of networks using non-parameter statistic theory. Based on this model, we then propose an algorithm that optimizes the rule ordering of a firewall which can improve the performance of a firewall obviously. We will prove this through our experiment.