Patent ID: 8990387
Filing Date: 2015-03-24
Classification: H04L

Abstract:
1. An article of manufacture comprising a computer readable storage medium having computer readable instructions tangibly embodied thereon which, when implemented, cause a computer to carry out a plurality of method steps comprising: obtaining a record of each of multiple data flows from a source environment; transforming each of the multiple data flows in the source environment to multiple transformed data flows that correspond to a target environment, wherein said transforming comprises applying a mapping function to convert one or more parameters in each of the multiple data flows in the source environment into corresponding values that are relevant in the target environment; eliminating one or more of the multiple transformed data flows that are (i) accepted in the source environment and (ii) denied in the target environment to generate an intermediate collection of transformed data flows; adding one or more identified data flows to the intermediate collection of transformed data flows that are (i) denied in the source environment and (ii) permitted in the target environment to generate an enhanced collection of transformed data flows; and automatically determining that each of the transformed data flows in the enhanced collection of transformed data flows is covered by a firewall configuration of one or more interfaces in the target environment; wherein at least one of the steps is carried out by a computer device.