Development of an Anomaly Classification Model and a Decision Support Tool for Firewall Policy Configuration

A firewall is a device that is used generally to prevent cyberattacks and protect internal assets by blocking unauthorized access. Information security managers have many difficulties in managing firewall policy due to errors or anomalies in the policy that are caused by frequent internal and external requests. This paper intends to develop an anomaly classification model to detect anomalies and measure priority of resolution in firewall policy, and a visualized tool that supports information security managers to manage their firewall policy efficiently. This model and tool help information security managers to resolve anomaly in firewall policy and enable efficient firewall policy management and protect internal assets effectively.