Patent ID: 11882095
Assignee: GOOGLE LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 8:
9. A system for training a firewall insights model, the system comprising:
data processing hardware; and
memory hardware in communication with the data processing hardware, the memory hardware storing instructions that when executed by the data processing hardware cause the data processing hardware to perform operations comprising:
obtaining firewall utilization data for connection requests received by a firewall during a utilization period, the firewall utilization data including hit counts during the utilization period for each sub-rule of a set of sub-rules associated with at least one firewall rule;
filtering the firewall utilization data based on a filter criteria, the filter criteria based on information associated with the connection requests;
generating training data based on the filtered firewall utilization data, the training data including unused sub-rules corresponding to sub-rules having zero hits during the utilization period and hit sub-rules corresponding to sub-rules having more than zero hits during the utilization period;
training a firewall utilization model on the training data; and
for each sub-rule of the set of sub-rules associated with the at least one firewall rule, determining, using the trained firewall utilization model, a corresponding sub-rule utilization probability indicating a likelihood the sub-rule will be used for a future connection request.