Patent ID: 11882095
Assignee: GOOGLE LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A computer-implemented method when executed on data processing hardware causes the data processing hardware to perform operations for training a firewall utilization model, the operations comprising:
obtaining firewall utilization data for connection requests received by a firewall during a utilization period, the firewall utilization data including hit counts during the utilization period for each sub-rule of a set of sub-rules associated with at least one firewall rule;
filtering the firewall utilization data based on a filter criteria, the filter criteria based on information associated with the connection requests;
generating training data based on the filtered firewall utilization data, the training data including unused sub-rules corresponding to sub-rules having zero hits during the utilization period and hit sub-rules corresponding to sub-rules having more than zero hits during the utilization period;
training a firewall utilization model on the training data; and
for each sub-rule of the set of sub-rules associated with the at least one firewall rule, determining, using the trained firewall utilization model, a corresponding sub-rule utilization probability indicating a likelihood the sub-rule will be used for a future connection request.