Client reputation driven role-based access control
AssigneeHewlett Packard Enterprise Development LP
InventorsRamesh Ardeli, Hari Krishna Kurmala
Life of this patent
Estimating the term…
Abstract
The present disclosure discloses a system and method for dynamically modifying role based access control for a client based on the activity. Generally, a client device is granted access to a network resource based on a first reputation score assigned to the client device. The activity of the client device is monitored. Responsive to monitoring the activity of the client device, a second reputation score is determined for the client device based on the activity. The access by the client device to the network resource is then modified to be granted based on the second reputation score.
Claims20
A non-transitory computer readable medium comprising instructions which, when executed by one or more hardware processors, causes performance of operations comprising:
- granting a client device access to network resources in accordance with a first configuration based on a first reputation score assigned to the client device;
- monitoring activities on the client device;
- identifying, from deep packet inspection of data packets exchanged between the client device and the network resources during a network session, monitored activities of the client device during the network session that are indicative of a reputation of the client device;
- based on the identification, modifying the first reputation score to a second reputation score;
- modifying the access by the client device to the network resources to be granted in accordance with a second configuration based on the second reputation score.
A non-transitory computer readable medium comprising instructions which, when executed by one or more hardware processors, causes performance of operations comprising:
- monitoring a plurality of resources accessible by a client device;
- identifying current content at a particular resource in the plurality of resources accessible by the client device;
- detecting that the client device accessed the particular resource;
- dynamically assigning a reputation score to the particular resource based on a real-time analysis of the current content at the particular resource, wherein the real-time analysis comprises classifying the current content retrieved from a uniform resource locator (URL) associated with the particular resource into categories related to permittable access to network resources;
- modifying access by the client device to network resources to be granted based on the reputation score and in accordance with a configuration that is based on the current content at the particular resource.
Dependencies are inferred from the claim text.