Flexible network security system and method for permitting trusted process

A network security method controlling inbound traffic by using a firewall, the firewall protecting a corresponding network connection of a computer to a network by setting restrictions on information communicated between networks, comprising:

• storing in an internal permitted program storage a list of programs permitted by the firewall;
• adding a network communication program to the list of programs by extracting information about the network communication program for which communication is to be permitted by the firewall;
• extracting information about a server port, wherein the server port is designated as a port of the network communication program;
• automatically storing, by the firewall, the extracted information about the server port in an internal permitted port storage if the network communication program is registered in the list of programs stored in the internal permitted program storage;
• determining whether the network communication program is registered in the list of programs stored in the internal permitted program storage;
• determining whether a port of a packet of inbound traffic matches with the server port;
• and blocking the packet of inbound traffic if the port does not match with the server port.

A computer recordable device storing a program for performing a network security method which, when executed by one or more processors, causes the one or more processors to control inbound traffic the method comprising:

• storing in an internal permitted program storage a list of programs permitted by a firewall;
• adding a network communication program to the list of programs by extracting information about the network communication program for which communication is to be permitted by the firewall;
• extracting information about a server port, wherein the server port is designated as a port of the network communication program;
• automatically storing, by the firewall, the extracted information about the server port in an internal permitted port storage if the network communication program is registered in the list of programs stored in the internal permitted program storage;
• determining whether the network communication program is registered in the list of programs stored in the internal permitted program storage;
• determining whether a port of a packet of inbound traffic matches with the server port;
• and blocking the packet of inbound traffic if the port does not match with the server port.

A network security system controlling inbound traffic by using a firewall, the firewall protecting a corresponding network connection of a computer to a network by setting restrictions on information communicated between networks, comprising:

• a port monitoring unit extracting information about a server port, wherein the server port is designated as a port of a network communication program;
• an internal permitted program storage storing a list of programs permitted by the firewall, wherein the internal permitted program storage adds a program to the list by extracting information about the program for which communication is to be permitted by the firewall;
• and
• a firewall flexible device determining whether the server port is opened or closed and whether the network communication program is registered in the list of programs stored in the internal permitted program storage;
• wherein the firewall flexible device automatically stores the extracted information about the server port in an internal permitted port storage if the server port is opened and the network communication program is registered in the list of programs stored in the internal permitted program storage;
• wherein the firewall flexible device determines whether a port of a packet of inbound traffic matches with the server port and blocks the packet of inbound traffic if the port does not match with the server port.

A network security method controlling inbound traffic by using a firewall, the firewall protecting a corresponding network connection of a computer to a network by setting restrictions on information communicated between networks, comprising:

• storing in an internal permitted program storage a list of programs permitted by the firewall;
• adding a network communication program to the list of programs by extracting information about the network communication program for which communication is to be permitted by the firewall;
• extracting information about a server port, wherein the server port is designated as a port of the network communication program;
• determining whether the network communication program is registered in the list of programs stored in the internal permitted program storage and whether the server port is opened or closed;
• automatically storing, by the firewall, the extracted information about the server port in an internal permitted port storage if the network communication program is registered in the list of programs stored in the internal permitted program storage and the server port is opened;
• determining whether a port of a packet of inbound traffic matches with the server port;
• and blocking the packet of inbound traffic if the port does not match with the server port.