Connection Management Using Automated Firewall Based on Threat Intelligence
Marcus A. S. Costa, Yago M. da Costa, Yanne O. Almeida, Francisco J. Cardoso, Rafael L. Gomes
Abstract
In the context of constantly evolving cyber threats, the need for dynamic and adaptive security solutions is imperative. The approach of Threat Intelligence is crucial, as it aims to collect, analyze, and interpret relevant information about digital threats. Within this context, this article presents a security solution called FIBRA (Integrated Firewall with Automated Blacklists and Reputation). Designed to manage connections in network infrastructures based on Cyber Threat Intelligence data, FIBRA autonomously combats threats through real-time updates of blacklists and filtering techniques. It achieves adequate scalability and provides a comprehensive view of network traffic and identified threats. Experiments conducted in a real cloud infrastructure demonstrate FIBRA’s effectiveness in identifying and mitigating suspicious connections, significantly contributing to network security in complex and dynamic environments.