Design of Algorithm for Verifying Correctness of Firewall Access Control List

Firewall access control list (ACL) is the main security configuration of network access control. Incorrect configuration will lead to the risk of illegal access to the network. Each ACL rule is essentially a multi-dimensional discrete data set represented by multiple attributes. It is difficult to manually analyze whether the access control list is configured correctly. This article proposes an algorithm for verifying the correctness of ACL based on set cutting operations, which can effectively check whether the ACL meets the access control security baseline requirements and improve the security of ACL configuration.