Patent ID: 7672336

Claim:
A computerized method of defending attacks on a computer network, the method comprising: receiving, by a computing device, data packets at a no access list module; analyzing, by the computing device, the data packets using a no access list; generating, by the computing device, a first set of data packets that do not match the no access list; receiving, by the computing device, the first set of data packets at a first access list module; analyzing, by the computing device, the first set of data packets using a first access list; generating, by the computing device, at the first access module, a second set of data packets that do not match the first access list; transmitting, by the computing device, at the first access module, the second set of data packets to a second access list module; analyzing, by the computing device, the second set of data packets using a second access list; generating, by the computing device, a third set of data packets that do not match the second access list generating, by the computing device, at the first access list module, a fourth set of data packets that match the first access list; transmitting, by the computing device, at the first access module, a portion of the fourth set of data packets to an output module based on a criterion; generating, by the computing device, at the first access list module, a sixth set of data packets that comprises data packets from the fourth set of data packets that are not transmitted to the output module; transmitting, by the computing device, at the first access module, to an attack identification module the sixth set of data packets; and analyzing, by the computing device, at the attack identification module the sixth set of data packets to identify network attackers.