Automated Firewall Configuration in Virtual Networks

The configuration of security functions in computer networks is still typically performed manually, which likely leads to breaches and long re-configuration times. This problem exacerbated for modern based on network virtualization, because their complexity dynamics make a correct manual practically unfeasible. article focuses packet filters, i.e., the most common firewall technology used networks, it proposes new methodology automatically define allocation scheme filters logical topology virtual network. proposed method solving carefully designed partial weighted Maximum Satisfiability Modulo Theories by means state-of-the-art solver. approach formally guarantees correctness solution, that all requirements are satisfied, minimizes number needed firewalls rules. extensively evaluated using different metrics tests both synthetic real use cases, compared solutions, showing its superiority.