Method, system, and computer program product for preventing transmission of malicious data

A system, comprising:

• at least one hardware processor programmed or configured to:
• receive transaction data comprising at least one packet associated with a payment transaction;
• extract at least one of network layer data or transport layer data from the at least one packet;
• determine a first probability based on the at least one of the network layer data or the transport layer data using a classifier, wherein the first probability comprises an indication that the at least one packet is in a first class associated with packets that should be blocked from further transmission;
• determine a second probability based on the at least one of the network layer data or the transport layer data using the classifier, wherein the second probability comprises an indication that the at least one packet is in a second class associated with packets that should be permitted to be transmitted;
• compare the first probability to the second probability;
• and
• perform a function associated with the at least one packet based on comparing the first probability to the second probability;
• extract at least one of session layer data, presentation layer data, or application layer data from the at least one packet;
• determine a third probability based on the at least one of session layer data, presentation layer data, or application layer data using the classifier, wherein the third probability comprises an indication that the at least one packet is in the first class;
• and
• compare the third probability to the first probability and the second probability;
• wherein, when performing the function associated with the at least one packet, the at least one processor is programmed or configured to:
• perform the function associated with the at least one packet based on comparing the third probability to the first probability and the second probability.

A computer program product, comprising at least one non-transitory computer-readable medium comprising one or more instructions that, when executed by at least one hardware processor, cause the at least one hardware processor to:

• receive transaction data comprising at least one packet associated with a payment transaction;
• extract at least one of network layer data or transport layer data from the at least one packet;
• determine a first probability based on the at least one of the network layer data or the transport layer data using a classifier, wherein the first probability comprises an indication that the at least one packet is in a first class associated with packets that should be blocked from further transmission;
• determine a second probability based on the at least one of the network layer data or the transport layer data using the classifier, wherein the second probability comprises an indication that the at least one packet is in a second class associated with packets that should be permitted to be transmitted;
• compare the first probability to the second probability;
• and
• perform a function associated with the at least one packet based on comparing the first probability to the second probability;
• extract at least one of session layer data, presentation layer data, or application layer data from the at least one packet;
• determine a third probability based on the at least one of session layer data, presentation layer data, or application layer data using the classifier, wherein the third probability comprises an indication that the at least one packet is in the first class;
• and
• compare the third probability to the first probability and the second probability;
• wherein, the one or more instructions that cause the at least one processor to perform the function associated with the at least one packet, cause the at least one processor to:
• perform the function associated with the at least one packet based on comparing the third probability to the first probability and the second probability.