Regulatory Network Threat Detection

摘要

A package filter device, comprising:at least one processor; anda memory comprising instructions that, when executed by at least one processor, induce the packet filter device to:receive a variety of package filter rules that are configured to cause the package filter device to identify packages that correspond to at least one of a variety of network threat indicators, with the variety of network threat indicators associated with network threat intelligence reports, provided by one or more independent network threat intelligence providers;receive a large number of packages comprising a first and a second package;in response to a provision that the first package complies with a first package filter rule of a multitude of package filter rules based on one or more network threat indicators of the multitude of network threat indicators defined by the first package filter rule:apply an operator to the first package defined by the first packet filter rule and configured to cause the packet filter device to allow the first package to be redirected towards a destination of the first package; andto transmit information identifying one or more network threat indicators and data indicating that the first package has been allowed to be forwarded towards the target of the first package;receive an update of at least one package filter rule;modify, based on the received update of at least one packet filter rule, at least one operator defined by the first packet filter rule to reconfigure the packet filter device so that packets corresponding to one or more network threat indicators, be prevented from moving towards their respective objectives; andin response to a provision that the second package complies with the first packet filter rule:on the basis of the modified at least one operator defined by the first packet filter rule to prevent the second packet from being diverted towards a second packet target; andTransmit data indicating that the second package has been obstructed in the forwarding towards the target of the second package.