Back to results
US 11,310,285 B2Granted
Adaptive network security policies
AssigneeTrend Micro Incorporated
InventorsHarry A. Bryson, Malcolm Dodds, Wei Lu, Julian Palmer
Life of this patent
Estimating the term…
Abstract
Adaptive network security policies can be selected by assigning a number of risk values to security intelligence associated with network traffic, and identifying a number of security policies to implement based on the risk values.
Claims17
A computer-implemented method of protecting a computer network, the method comprising:
- receiving, over a computer network, a first network traffic in a first network security system;
- inspecting, in the first network security system, the first network traffic using a first security policy;
- obtaining a first security intelligence based at least on the inspection of the first network traffic using the first security policy;
- selecting a second security policy to be implemented in a second network security system based at least on the first security intelligence;
- receiving, over the computer network, the first network traffic in the second network security system;
- inspecting, in the second network security system, the first network traffic using the second security policy;
- obtaining a second security intelligence based at least on the inspection of the first network traffic using the second security policy;
- selecting a third security policy to be implemented in a third network security system based at least on the second security intelligence;
- receiving, over the computer network, the first network traffic in the third network security system, wherein the first, second, and third network security systems are different types of network security systems;
- inspecting, in the third network security system, the first network traffic using the third security policy;
- and
- performing a response action against the first network traffic in response to detecting that the first network traffic is a threat to the computer network.
9 more elements
A system for protecting a computer network, the system comprising:
- a first network security system comprising a processor and a memory, the first network security system being configured to receive a first network traffic over a computer network, inspect the first network traffic using a first set of security policies, and generate a first security intelligence based on the inspection of the first network traffic using the first set of security policies;
- a second network security system comprising a processor and a memory, the second network security system being configured to receive the first security intelligence over the computer network, select a second set of security policies based at least on the first security intelligence, inspect the first network traffic using the second set of security policies, and generate a second security intelligence based on the inspection of the first network traffic using the second set of security policies;
- and
- a third network security system comprising a processor and a memory, the third network security system being configured to receive the second security intelligence over the computer network, select a third set of security policies based at least on the second security intelligence, and inspect the first network traffic using the third set of security policies,
- wherein the first, second, and third network security systems are different types of network security systems, and
- wherein the second network security system selects the second set of security policies based at least on a first risk level being assigned to the first network traffic.
3 more elements
A computer-implemented method of protecting a computer network, the method comprising:
- receiving, over a computer network, a first network traffic in a first network security system;
- inspecting, in the first network security system, the first network traffic using a first set of security policies;
- assigning a first risk value to the first network traffic based at least on the inspection of the first network traffic using the first set of security policies;
- selecting a second set of security policies to be implemented in a second network security system based at least on the first risk value being assigned to the first network traffic;
- receiving, over the computer network, the first network traffic in the second network security system;
- inspecting, in the second network security system, the first network traffic using the second set of security policies;
- assigning a second risk value to the first network traffic based at least on the inspection of the first network traffic using the second set of security policies, wherein the second risk value is different from the first risk value;
- selecting a third set of security policies to be implemented in a third network security system based at least on the second risk value being assigned to the first network traffic, wherein the first, second, and third network security systems are different types of network security systems;
- inspecting, in the third network security system, the first network traffic using the third set of security policies;
- and
- in response to detecting that the first network traffic is a threat to the computer network, performing a response action against the first network traffic.
8 more elements
Dependencies are inferred from the claim text.