Patent ID: 7765590

Claim:
A method for the detection and prevention of intrusions into a computer network with a firewall, the method comprising: detecting the connections at a central point and before each branch of said network, selective filtering of the said connections, where said selective filtering stage includes firstly a stage for automatic recognition of the accessing protocol, independently of the communication port used by the said protocol, and secondly, after said accessing protocol has been recognized automatically, a stage for verifying the conformity of each communication flowing in a given connection to the said protocol, to deliver a dynamic authorization for communications resulting from normal operation of the protocol and to deliver a dynamic rejection for communications resulting from abnormal operation of the protocol, wherein said check on conformity is performed layer by layer, by successive protocol analysis of each part of the data packet flowing in the connection corresponding to a given protocol, from the lowest protocol to the highest protocol, and wherein, since each main connection enabled is able to induce one or more secondary connections, said check on conformity detects the data necessary for opening said secondary connections and dynamically attaches said secondary connections to the authorization for connection of said main connection.