Method, device and assembly operable to enhance security of networks

One or more data storage devices comprising instructions that, when executed by a processor, perform a plurality of steps comprising:

• monitoring a network for a plurality of requests to access a plurality of resources;
• blocking each of the resources that satisfies a blockage condition, wherein the blockage condition comprises at least one variable;
• adding each of the blocked resources to a blocklist, wherein:
• each of the blocked resources is associated with a maturation period that depends, at least in part, on a creation date of the blocked resource;
• and
• a presence of each of the blocked resources on the blocklist corresponds to a precautionary event;
• after the maturation period expires for each of the blocked resources, determining whether the blocked resource is listed on a blacklist, wherein a presence of the blocked resource on the blacklist corresponds to a threat event;
• and
• determining a correlation outcome that represents a correlation of the precautionary events to the threat events;
• and
• changing the at least one variable in response to the correlation outcome differing from a correlation target factor by a designated amount.

An assembly comprising:

• one or more processors;
• and
• one or more data storage devices operatively coupled to the one or more processors, wherein the one or more data storage devices comprise instructions that, when executed by the one or more processors, perform a plurality of steps comprising:
• monitoring a network for a plurality of requests to access a plurality of resources;
• blocking each of the resources that satisfies a blockage condition comprising at least one variable;
• adding each of the blocked resources to a blocklist, wherein:
• each of the blocked resources is associated with a maturation period that depends, at least in part, on a creation date of the blocked resource;
• a presence of each of the blocked resources on the blocklist corresponds to a precautionary event;
• after the maturation period expires for each of the blocked resources, determining whether the blocked resource is listed on a blacklist, wherein a presence of the blocked resource on the blacklist corresponds to a threat event;
• and
• determining a correlation outcome that represents a correlation of the precautionary events to the threat events;
• and
• changing the at least one variable in response to the correlation outcome differing from a correlation target factor by a designated amount.