System and apparatus for providing network security

This invention describes a network security system that sits between a network and an application. It uses a dedicated hardware component, called a rule engine, to inspect all incoming and outgoing data. This engine parses the data, compares it against predefined rules, and then takes specific actions like blocking or allowing the data flow. A separate controller securely tells the rule engine what rules to apply and what actions to take. The system specifically mentions using a one-time programmable memory for some of its data storage.