A Distributed Firewall Rules Validity Detection Algorithm

The paper defines a Structured Query Sentence to describe the query process and proposes a distributed firewall rules validity detection algorithm based on semi-isomorphic firewall decision diagrams (SFDD) logical operation. The algorithm keeps consistency, completeness, and compactness of the original rules,eliminates the rule anomalies in intra-firewall. Our simulation results demonstrate that the algorithm achieves a significant improvement in validity detection of rules.