PROTECTION METHOD AND COMPUTER SYSTEM THEREOF FOR FIREWALL APPARATUS DISPOSED TO APPLICATION LAYER

A protection method, which releases an attack of a malware to a firewall apparatus disposed at an application layer, includes processing a microbatching operation in a plurality of session channels and at at least an operational period according to at least one input information, to generate a plurality of session-specific firewall patterns; and merging the plurality of session-specific firewall patterns to generate an application-specific firewall pattern at the application layer, so as to dispose a script information corresponding to the application-specific firewall pattern in the firewall apparatus for releasing the attack of the malware, wherein the microbatching operation is processed to generate a plurality of independent subset-specific firewall patterns in each session channel, so as to generate a session-specific firewall pattern corresponding to each session channel.