Patent ID: 9306908
Filing Date: 2016-04-05
CPC Classification: G06F,H04L

Claim Text:
1. An anti-malware (AM) apparatus, comprising: a hardware-based firewall (FW) engine, including a packet matching engine configured to perform matching of a packet with a plurality of FW rules, and to generate a matching result; and an FW function module configured to determine an action for filtering the packet on the basis of the matching result, wherein the packet matching engine includes: a plurality of rule keys derived from the plurality of FW rules; a packet key converted from the packet; and one or more packet matchers configured to compare the packet key with the plurality of rule keys, wherein each of said one or more packet matchers includes a plurality of packet sub-matchers configured to operate in parallel, and further configured to compare a subset of the plurality of rule keys with the packet key.