GENERALISATION ANOMALY FREE TRAFFIC AWARE ALGORITHM TO INCREASE FIREWALL PERFORMANCE

Firewall is an important element of Network Security. They have become an essential part not only in Organisation level but also in smaller networks such as Home Network. It is commonly implemented as Packet Filter. The packet filter firewall works by comparing both incoming and outgoing packets against a set of predefined rules called Access Control List (ACL).As every packet is compared against these rules, it is important to have these rules well organised for very good performance. The presented paper proposes an algorithm which analyses incoming traffic to dynamically reorder the rules without giving rise to generalisation anomaly