METHOD OF PROCESSING NETWORK TRAFFIC USING FIREWALL METHOD Russian patent published in 2019 - IPC H04L12/66 H04L12/70 

FIELD: physics.

SUBSTANCE: invention relates to information security. Technical result is achieved due to preliminary analysis of incoming traffic flow on ownership of traffic to a previously established connection by means of a control unit of incoming packets, parsing packets to obtain data from packets on a channel, network, transport and application levels through a deep packet filtering device (DPI), decomposing obtained data from packets into clusters by a clustering unit, making a decision on each packet in clusters based on established rules for processing network packets through a decision making unit, detecting deviations of network traffic, which complies with processing rules, from a normal traffic profile of packets through an anomaly detection unit, updating established rules for processing network packets by means of a log file unit.

EFFECT: technical result consists in faster processing of network traffic based on clustering data with simultaneous thorough filtering thereof due to that each packet undergoes checking a set of rules, as well as detecting anomalies.

1 cl, 1 dwg