Development of an AI Assistant for Automatically Creating NGFW Firewall Rules

2025

Closed access Metadata (CSL-JSON)
DOI 10.1109/opcs67346.2025.11219367
Data confidence 70 medium
How this score is calculated

It is built from checkable properties of the record itself: whether the article has a DOI, how many independent sources confirmed its data, whether the required fields are filled in, and how recent the latest confirmation is. Disagreement between sources and a missing identifier lower it. A value of 80 or above means the record was published without further checking; 60 to 79 means it is published at reduced confidence, with a manual check advisable. A record verified by an editor by hand is never pushed below 90 by a recalculation. This scores our data about the article, not the article itself.

Abstract

Network conditions and traffic complexity evolution challenges the traditional firewall management system because it lacks proper adjustment mechanics. The study introduces an Artificial Intelligence system which produces automatic NGFW rules through live network traffic examination through packet analysis. Our assessment procedure directly measures the performance of GPT-2, GPT-4 and DeepSeek-R1 language models during their processing of raw PCAP data to generate security policies in real-time. AI models receive traffic flows delivered by Python tools Scapy and Wireshark to produce security rules by means of interactive prompting. DeepSeek-R1 demonstrated the highest rule accuracy of 92 % at its operational speed of 5000 packets per second, better than both GPT-4 and GPT-2 for accuracy and performance rates. The testing verifies that implementing large language models in automated firewall functions is feasible with the added advantage of specialized open-source solutions. The results form a foundation to develop interpretable secure network security systems supported by adaptive artificial intelligence frameworks