TrizTech Patents High-Speed Traffic Classification Technology
The technology was developed for the PT NGFW next-generation firewall.
Russian cybersecurity companies are not merely adapting existing tools to their needs but are also actively developing their own technologies. This gives them greater resilience in a highly competitive market.
Maintaining System Performance
In early October, TrizTech announced that it had successfully patented its own network traffic classification method used in PT NGFW, a Russian next-generation firewall developed by Positive Technologies. The new technology does more than support the reliable operation of one of the firewall's key components. It helps maintain performance as security policies become more complex and the number of rules grows.
A firewall works by matching each network session against security policies that can take numerous attributes into account, including IP addresses and ports, transport and application protocols, URL categories, users and user groups. The more complex those policies become, the more computing resources are required to evaluate them. Ultimately, that can slow the entire system.
“The approach developed by the TrizTech team eliminates the need to scan large numbers of rules sequentially. Independent search indexes are created for different types of traffic attributes, and the matching results are represented as bitmasks. The system combines them using bitwise operations and selects the highest-priority matching rule. On modern processors, these operations are performed almost instantaneously,” said Alexey Dyadin, head of development at TrizTech and one of the patent's authors.
Processing Data as It Arrives
The developers also accounted for another important factor: data can become available incrementally. IP addresses and ports are usually known from the first packets, while the application protocol, URL category and other attributes may be identified later. If there is not enough information to apply a rule correctly, PT NGFW retains the session context and defers the decision until the missing information becomes available. It does not repeat calculations already performed. This approach maintains stable performance even under heavy loads and eliminates the need for administrators to simplify rules to keep the system running at high speed.
The patent reflects a broader principle guiding the TrizTech team. Its engineers develop not only application-level features but also the underlying mechanisms on which the product is built.
Securing a patent for the new technology is an important step in the broader development of next-generation firewalls. Technologies of this kind reduce the market's dependence on foreign vendors and give customers a wider range of products to choose from. Russia's NGFW market was already expanding rapidly in 2023, as vendors including UserGate, Security Code, Positive Technologies and RTK-Solar actively promoted their traffic-classification tools. Each developer sought to address the same core demand: strong security without sacrificing system performance.
Where Competition Is Headed
PT NGFW, released in 2024, also met those requirements. By 2025, a number of large Russian companies were already using the product. Integrating the new technology is expected to make it even more attractive to customers.
Competition among Russian network-security products is expected to shift toward performance, scalability and support for complex enterprise architectures over the next several years. Accelerated traffic-classification technologies could become a key component in the development of Russian platforms for protecting critical information infrastructure.
