Patent ID: 7890612
Filing Date: 2011-02-15
Classification: G06F,H04L

Abstract:
1. A method of screening data objects flowing between a network and at least one communication device using a network security device comprising a data object memory; at least one communication device port coupled to the data object memory; a network communication port coupled to the data object memory; a processor coupled to the data object memory; a permanent memory store for storage of rules, coupled to the processor; a dynamic memory store coupled to the processor; a physical interface coupled to the processor; and a plurality of rules stored in the permanent memory store; the method comprising: a) receiving a data object at a communication device port or at the network communication port, the network security device being invisible to any communication device and the network; b) storing the data object into the data object memory; c) processing the data object in accordance with the plurality of rules stored in the permanent memory store, determining if the data object is in violation of at least one of the plurality of rules, without executing any code in the data object such that the operation of the device is incorruptible by the data objects being processed; and d) if the data object is not in violation of at least one of the plurality of rules, transmitting the data object by the network communication port if the data object was received from a communication device port or transmitting the data object by a communication device port if the data object was received from the network communication port.