In-line cognitive network security plugin device

A computer system comprising:

• a security device connected inline between a first port placed in communication with a network computer system and a second port placed in communication with network hardware of a computer network;
• at least one processor placed in electronic communication with the security device;
• and
• a computer-readable storage media coupled to the at least one processor, wherein the computer-readable storage media contains program instructions executing a computer-implemented method comprising:
• intercepting, by the security device, network traffic of the computer network flowing from the network hardware to the network computer system,
• analyzing the network traffic intercepted by the security device for a threat level exceeding a pre-set safe level,
• modulating a gate of the security device as a function of the threat level, wherein opening the gate in response to security threat creates an air gap preventing network traffic from passing from the second port through the security device to the first port in communication with the network computer system;
• determining, by the security device, that the threat level of the network traffic exceeds the pre-set safe level;
• further determining, by the security device, that the threat level of the network traffic is less than a maximum threat level or maximum threat level range set by the security device;
• buffering the network traffic received by the security device in an on-board buffer, preventing the network traffic from entering the network computer system;
• and
• in response to said buffering, opening or closing the gate.

A computer program product comprising:

• one or more computer-readable storage media having computer-readable program instructions stored on the one or more computer-readable storage media, said program instructions executes a computer-implemented method comprising:
• intercepting, by a security device connected inline between a first port placed in communication with a network computer system and a second port placed in communication with network hardware of a computer network, network traffic of the computer network flowing from the network hardware to the network computer system;
• analyzing the network traffic intercepted by the security device for a threat level exceeding a pre-set safe level;
• modulating a gate of the security device as a function of the threat level, wherein opening the gate in response to security threat creates an air gap preventing network traffic from passing from the second port through the security device to the first port in communication with the network computer system;
• determining, by the security device, that the threat level of the network traffic exceeds the pre-set safe level;
• further determining, by the security device, that the threat level of the network traffic is less than a maximum threat level or maximum threat level range set by the security device;
• buffering the network traffic received by the security device in an on-board buffer, preventing the network traffic from entering the network computer system;
• and
• in response to said buffering, opening or closing the gate.