Routing and/or forwarding information driven subscription against global security policy data

An apparatus comprising:

• a network interface unit configured to enable network communications with a plurality of network devices and computing equipment in a network;
• a processor coupled to the network interface unit, wherein the processor is configured to:
• download from a global resource of network security attacks a list of potential network security attacks;
• receive from one or more network devices or one or more hosts in the network one or more alerts for one or more potential network security threats in the network;
• generate and store a list of one or more network security attacks to be addressed in the network for a given period of time based on the list of potential network security attacks downloaded from the global resource and the one or more alerts;
• receive a notification of routing and/or information from a particular network device in the network;
• determine whether to send to the particular network device a security policy associated with a domain indicating in the routing and/or forwarding information based on a comparison of the domain indicated in the routing and/or forwarding information with the list;
• and
• send to the particular network device the security policy associated with the domain of the routing and/or forwarding information based on the comparison.

One or more non-transitory computer readable storage media encoded with software comprising computer executable instructions and when the software is executed operable to perform operations including:

• downloading from a global resource of network security attacks a list of potential network security attacks;
• receiving from one or more network devices or one or more hosts in a network one or more alerts for one or more potential network security threats in the network;
• generating and storing a list of one or more network security attacks to be addressed in the network for a given period of time based on the list of potential network security attacks downloaded from the global resource and the one or more alerts;
• receiving a notification that includes routing and/or forwarding information from a particular network device in the network;
• determining whether to send to the particular network device a security policy associated with a domain indicated in the routing and/or forwarding information based on a comparison of the domain indicated in the routing/and or forwarding information with the list of one or more potential network security attacks;
• and
• sending to the particular network device the security policy associated with the domain of the routing and/or forwarding information based on the comparison.