# US 12,015,632 B2 · Dynamic resource allocation for network security > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,015,632 B2 - Document ID: US12015632B2 - Status: Granted - Kind: B2 - Application number: 17/390,229 - Filed: 2021-07-30 - Published: 2023-02-02 - Granted: 2024-06-18 - Earliest claimed: 2021-07-30 - Assignees: Cisco Technology, Inc. - Applicants: Cisco Technology, Inc. - Inventors: David M. Hanes; Gonzalo Salgueiro; Robert Edgar Barton; Sebastian Jeuk - Web page: https://patentgrep.com/patent/US12015632B2 ## CPC - H04L 63/1408: {by monitoring network traffic (monitoring network traffic per se H04L43/00)} - H04L 63/1433: {Vulnerability analysis} - H04L 63/0227: {Filtering policies (mail message filtering H04L51/212)} - H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL} - H04L 63/1425: {Traffic logging, e.g. anomaly detection} - H04L 63/1466: {Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems, methods, and computer-readable media are provided for dynamic allocation of network security resources and measures to network traffic between end terminals on a network and a network destination, based in part on an independently sourced reputation score of the network destination. In one aspect, a method includes receiving, at a cloud network controller, a request from an end terminal for information on a network destination; determining, at the cloud network controller, a reputation score for the network destination; determining, at the cloud network controller, one or more security measures to be applied when accessing the network destination, based on the reputation score; and communicating, by the cloud network controller, the one or more security measures to the end terminal, wherein the end terminal communicates the one or more security measures to a third-party security service provider for applying to communications between the end terminal and the network destination. ## Claims ### Claim 1 A method comprising: receiving, at a cloud network controller, a request from an end terminal for information on a network destination; determining, at the cloud network controller, a reputation score for the network destination; determining, at the cloud network controller, one or more security measures to be applied when accessing the network destination, based on the reputation score, wherein the reputation score is inversely proportional to a number or types of the one or more security measures; and communicating, by the cloud network controller, the one or more security measures to the end terminal, wherein the end terminal communicates the one or more security measures to a third-party security service provider for applying to communications between the end terminal and the network destination. ### Claim 2 (depends on 1) The method of claim 1, wherein determining the reputation score comprises: accessing a reputation score service to obtain the reputation score. ### Claim 3 (depends on 1) The method of claim 1, wherein the one or more security measures include one or more of a type of firewall inspection to be applied, deep packet inspection, inspection for one or more types of attack. ### Claim 4 (depends on 1) The method of claim 1, wherein the cloud network controller applies a Domain Name System Authoritative Source (DNA-AS) to identify the one or more security measures to be applied when accessing the network destination. ### Claim 5 (depends on 1) The method of claim 1, wherein the one or more security measures include a multi-touch service where a number of different security measures are applied to network traffic between the end terminal and the network destination. ### Claim 6 (depends on 1) The method of claim 1, wherein the one or more security measures include an endpoint specific security measure. ### Claim 7 (depends on 6) The method of claim 6, wherein the endpoint specific security measure is an up to date antivirus software. ### Claim 8 A network controller comprising: one or more memories having computer-readable instructions stored therein; and one or more processors configured to execute the computer-readable instructions to: receive a request from an end terminal for information on a network destination; determine a reputation score for the network destination; determine one or more security measures to be applied when accessing the network destination, based on the reputation score, wherein the reputation score is inversely proportional to a number or types of the one or more security measures; and communicate the one or more security measures to the end terminal, wherein the end terminal communicates the one or more security measures to a third-party security service provider for applying to communications between the end terminal and the network destination. ### Claim 9 (depends on 8) The network controller of claim 8, wherein the reputation score is determined by accessing a reputation score service to obtain the reputation score. ### Claim 10 (depends on 8) The network controller of claim 8, wherein the one or more security measures include one or more of a type of firewall inspection to be applied, deep packet inspection, inspection for one or more types of attack. ### Claim 11 (depends on 8) The network controller of claim 8, wherein the network controller is configured to apply a Domain Name System Authoritative Source (DNA-AS) to identify the one or more security measures to be applied when accessing the network destination. ### Claim 12 (depends on 8) The network controller of claim 8, wherein the one or more security measures include a multi-touch service where a number of different security measures are applied to network traffic between the end terminal and the network destination. ### Claim 13 (depends on 8) The network controller of claim 8, wherein the one or more security measures include an endpoint specific security measure, the endpoint specific security measure being an up to date antivirus software. ### Claim 14 One or more non-transitory computer-readable media comprising computer-readable instructions, which when executed by a network controller, cause the network controller to: receive a request from an end terminal for information on a network destination; determine a reputation score for the network destination; determine one or more security measures to be applied when accessing the network destination, based on the reputation score, wherein the reputation score is inversely proportional to a number or types of the one or more security measures; and communicate the one or more security measures to the end terminal, wherein the end terminal communicates the one or more security measures to a third-party security service provider for applying to communications between the end terminal and the network destination. ### Claim 15 (depends on 14) The one or more non-transitory computer-readable media of claim 14, wherein the reputation score is determined by accessing a reputation score service to obtain the reputation score. ### Claim 16 (depends on 14) The one or more non-transitory computer-readable media of claim 14, wherein the one or more security measures include one or more of a type of firewall inspection to be applied, deep packet inspection, inspection for one or more types of attack. ### Claim 17 (depends on 14) The one or more non-transitory computer-readable media of claim 14, wherein the network controller is configured to apply a Domain Name System Authoritative Source (DNA-AS) to identify the one or more security measures to be applied when accessing the network destination. ### Claim 18 (depends on 14) The one or more non-transitory computer-readable media of claim 14, wherein the one or more security measures include a multi-touch service where a number of different security measures are applied to network traffic between the end terminal and the network destination. ### Claim 19 (depends on 14) The one or more non-transitory computer-readable media of claim 14, wherein the one or more security measures include an endpoint specific security measure, the endpoint specific security measure being an up to date antivirus software.