Building filter through utilization of automated generation of regular expression

1. A method performed by a computing device connected to a network and having one or more processors and memory storing one or more programs for execution by the one or more processors, comprising:

receiving at least one packet sent over a network;

analyzing the packet to detect predetermined content, wherein the step of analyzing comprises displaying packet content on an output device;

selecting the predetermined content if it is determined that the packet contains the predetermined content, wherein the step of selecting comprises receiving user input identifying the predetermined content and adding a regular expression representing the predetermined content into a user interface of a filter that prevents transmission of packets containing the predetermined content; and

preventing future transmission of any packet containing the predetermined content by using the filter in response to selection of the predetermined content.

2. The method of claim 1 , wherein the step of analyzing further comprises:

reviewing the packet contents to determine if the packet originated from a malicious source.

3. The method of claim 2 , wherein the step of reviewing comprises:

identifying characters within the packet content that are indicative of the packet originating from a predetermined source.

4. The method of claim 3 , wherein the characters identify at least one of a user agent and a uniform resource locator (url).

5. The method of claim 1 , wherein the step of displaying comprises:

displaying the packet contents in at least one of binary and hexadecimal notation.

6. The method of claim 1 , wherein the user input comprises highlighted predetermined content.

7. The method of claim 6 , wherein the step of adding a regular expression comprises:

copying the highlighted predetermined content; and

pasting the regular expression representing the predetermined content into the user interface of the filter.

8. The method of claim 1 , further comprising:

removing wildcard characters from the predetermined content prior to pasting the representation of the predetermined content into the user interface.

9. A system for detecting malicious transmissions sent to a node:

a memory;

a processor disposed in communication with said memory, and configured to issue a plurality of instructions stored in the memory, wherein the instructions issue signals to:

receive at least one packet sent over a network;

cause an output device to display packet content;

analyze the packet to detect predetermined content;

receive user input identifying the predetermined content if it is determined that the packet contains the predetermined content;

add a regular expression representing the predetermined content into a user interface of a filter that prevents transmission of packets containing the predetermined content based on the user input; and

prevent future transmission of packets containing the predetermined content by using the filter in response to selection of the predetermined content.

10. The system as recited in claim 9 , wherein the processor is configured to review the packet content to determine if the packet originated from a suspicious source.

11. The system as recited in claim 10 , wherein the processor is configured to identify characters within the packet content that are indicative of the packet originating from a predetermined source.

12. The system as recited in claim 11 , wherein the characters identify at least one of a user agent and a uniform resource locator (url).

13. The system as recited in claim 9 , wherein the processor is configured to cause the packet content to be displayed in at least one of binary and hexadecimal notation.

14. The system as recited in claim 9 , wherein the processor is further configured to:

remove wildcard characters from the predetermined content prior to adding the regular expression to the filter.