Rules-based network security policy modification

A non-transitory computer-readable medium storing instructions, the instructions comprising:

• one or more instructions that, when executed by one or more processors, cause the one or more processors to:
• receive first information associated with a set of security rules,
• the first information identifying:
• traffic to which the set of security rules is to apply, or
• a set of security actions a device is to implement when the set of security rules applies to traffic;
• determine, using a machine learning model, a manner in which the set of security rules is to apply using the first information,
• the manner in which the set of security rules is to apply being determined using a technique to process the first information;
• determine, using the machine learning model, whether the manner in which the set of security rules is to apply and a manner in which a set of previously defined security rules is to apply match, by:
• parsing the first information and second information to identify source traffic criteria, destination traffic criteria, and security action information for the set of security rules and the set of previously defined security rules,
• comparing the source traffic criteria, the destination traffic criteria, and the security action information for the set of security rules with the source traffic criteria, the destination traffic criteria, and the security action information for the set of previously defined security rules,
• the second information being associated with the set of previously defined security rules,
• determining a score based on an amount of the source traffic criteria, the destination traffic criteria, and the security action information that matches between the set of security rules and the set of previously defined security rules, and
• determining that the manner in which the set of security rules is to apply and a manner in which the set of previously defined security rules is to apply match when the score satisfies a threshold;
• and
• perform an action based on determining whether the manner in which the set of security rules is to apply and the manner in which the set of previously defined security rules is to apply match,
• the action relating to modifying a network security policy that includes the set of previously defined security rules, based on the set of security rules.

A method, comprising:

• receiving, by a device, first information associated with a set of security rules,
• the first information permitting identification of:
• traffic to which the set of security rules applies, or
• a set of security actions the device is to perform with respect to the traffic;
• determining, by the device, using a machine learning model, a manner in which the set of security rules is to apply using the first information;
• determining, by the device, using the machine learning model, whether the manner in which the set of security rules is to apply and a manner in which a set of previously defined security rules is to apply match
• by:
• parsing the first information and second information associated with the set of previously defined security rules to identify source traffic criteria, destination traffic criteria, and security action information for the set of security rules and the set of previously defined security rules,
• comparing the source traffic criteria, the destination traffic criteria, and the security action information for the set of security rules with the source traffic criteria, the destination traffic criteria, and the security action information for the set of previously defined security rules,
• determining a score based on an amount of the first information that matches with the second information, and
• determining that the manner in which the set of security rules is to apply and a manner in which the set of previously defined security rules is to apply match when the score satisfies a threshold;
• and
• performing, by the device, an action based on determining whether the manner in which the set of security rules is to apply and the manner in which the set of previously defined security rules is to apply match.