Patent ID: 8356332
Filing Date: 2013-01-15
Classification: H04L

Abstract:
1. A method, comprising: receiving, by a network interface device within a network interface protection apparatus, a binary data structure including a portion representing a protocol validation specification expressed in a respective protocol validation specification language and another portion including a validation code indicator used to identify a validation code separate from the binary data structure; receiving, by the network interface device, a security policy rule separate from the binary data structure having an action part specifying that the binary data structure is to be used for verifying that application protocol payload of network packets complies with the protocol validation specification, the security policy rule further indicating actions to be performed upon detection of a violation of the protocol validation specification; and verifying, by a data processing device within the network interface apparatus, that application protocol payload of received network packets complies with the protocol validation specification, wherein said verifying is initiated in response to determining that the security policy rule applies to said received network packets and wherein said verifying includes validating said application protocol payload of said received network packets against the binary data structure using the validation code.