Patent ID: 11924168
Assignee: GOOGLE LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A computer-implemented method executed by data processing hardware that causes the data processing hardware to perform operations comprising:
obtaining a traffic log for a network comprising one or more virtual machines, the traffic log comprising network communications by the one or more virtual machines of the network;
obtaining a set of firewall rules for the network;
identifying, using the traffic log and the set of firewall rules, overlapping firewall rules comprising a first firewall rule of the set of firewall rules that completely overlaps a second firewall rule of the set of firewall rules;
generating a firewall rule recommendation based on identifying the overlapping firewall rules, wherein the firewall rule recommendation comprises a recommendation to delete a respective one of the overlapping firewall rules; and
transmitting the firewall rule recommendation to a user device.