Protection Method and Computer System thereof for Firewall Apparatus Disposed to Application Layer

A computer system, coupled to a firewall apparatus disposed at an application layer for releasing an attack of a malware, the computer system comprising:

• a processing unit;
• and
• a storage device, coupled to the processing unit and storing a program code for processing a protection method, the protection method comprising:
• processing a microbatching operation in a plurality of session channels and at at least an operational period according to at least one input information, to generate a plurality of session-specific firewall patterns of the plurality of session channels;
• and
• merging the plurality of session-specific firewall patterns to generate an application-specific firewall pattern at the application layer, so as to dispose a script information corresponding to the application-specific firewall pattern in the firewall apparatus for releasing the attack of the malware;
• wherein the microbatching operation processes a pattern recombination operation to generate a plurality of independent subset-specific firewall patterns in each session channel, so as to generate a session-specific firewall pattern corresponding to each session channel according to the plurality of subset-specific firewall patterns.