English

AI-Driven Dynamic Firewall Optimization Using Reinforcement Learning for Anomaly Detection and Prevention

Cryptography and Security 2025-06-09 v1

Abstract

The growing complexity of cyber threats has rendered static firewalls increasingly ineffective for dynamic, real-time intrusion prevention. This paper proposes a novel AI-driven dynamic firewall optimization framework that leverages deep reinforcement learning (DRL) to autonomously adapt and update firewall rules in response to evolving network threats. Our system employs a Markov Decision Process (MDP) formulation, where the RL agent observes network states, detects anomalies using a hybrid LSTM-CNN model, and dynamically modifies firewall configurations to mitigate risks. We train and evaluate our framework on the NSL-KDD and CIC-IDS2017 datasets using a simulated software-defined network environment. Results demonstrate significant improvements in detection accuracy, false positive reduction, and rule update latency when compared to traditional signature- and behavior-based firewalls. The proposed method provides a scalable, autonomous solution for enhancing network resilience against complex attack vectors in both enterprise and critical infrastructure settings.

Keywords

Cite

@article{arxiv.2506.05356,
  title  = {AI-Driven Dynamic Firewall Optimization Using Reinforcement Learning for Anomaly Detection and Prevention},
  author = {Taimoor Ahmad},
  journal= {arXiv preprint arXiv:2506.05356},
  year   = {2025}
}
R2 v1 2026-07-01T03:02:09.367Z