Distributed traffic scanning through data stream security tagging

A system for data security scanning in a network, comprising:

• means for acquiring a security policy of a network for network traffic being transmitted from outside the network to a destination network device;
• means for ascertaining, based on the security policy, mandatory security technologies required to be applied to the network traffic;
• and
• means for determining, based on a security marker associated with the network traffic, mandatory security technologies that are not yet applied to the network traffic.

A system for data security scanning in a network, comprising:

• a first network device for acquiring a security policy of a network for network traffic being transmitted from outside the network to a destination network device;
• a second network device for ascertaining, based on the security policy, mandatory security technologies required to be applied to the network traffic;
• and
• a third network device for determining, based on a security marker associated with the network traffic, mandatory security technologies that are not yet applied to the network traffic.

A system for data security scanning in a network, comprising:

• a processor;
• and
• a memory,
• wherein the processor and the memory are configured to perform a method comprising:
• acquiring a security policy of a network for network traffic being transmitted from outside the network to a destination network device;
• ascertaining, based on the security policy, mandatory security technologies required to be applied to the network traffic;
• and
• determining, based on a security marker associated with the network traffic, mandatory security technologies that are not yet applied to the network traffic.

A computer-readable medium containing instructions for performing a method for data security scanning in a network, the method comprising:

• acquiring a security policy of a network for network traffic being transmitted from outside the network to a destination network device;
• ascertaining, based on the security policy, mandatory security technologies required to be applied to the network traffic;
• and
• determining, based on a security marker associated with the network traffic, mandatory security technologies that are not yet applied to the network traffic.

A method for data security scanning in a network, comprising:

• acquiring a security policy of a network for network traffic being transmitted from outside the network to a destination network device;
• ascertaining, based on the security policy, mandatory security technologies required to be applied to the network traffic;
• determining, based on a security marker associated with the network traffic, mandatory security technologies that are not yet applied to the network traffic;
• and
• determining whether the mandatory security technologies that have not been applied to the network traffic are available to the destination network device.

A system for data security scanning in a network, comprising:

• means for acquiring a security policy of a network for network traffic being transmitted from outside the network to a destination network device;
• means for ascertaining, based on the security policy, mandatory security technologies required to be applied to the network traffic;
• means for determining, based on a security marker associated with the network traffic, mandatory security technologies that are not yet applied to the network traffic;
• and
• means for determining whether the mandatory security technologies that have not been applied to the network traffic are available to the destination network device.

A method for data security scanning in a network, comprising:

• receiving a request from a destination network device for network traffic from outside a network;
• acquiring a security policy of the network for network traffic being transmitted from outside the network to the destination network device;
• ascertaining, based on the security policy, mandatory security technologies that are required to be applied to the network traffic;
• and
• sending a query to at least one network device located on an intended path of the network traffic to the destination network device, the query soliciting an assistance offer from the at least one network device for assistance in applying the mandatory security technologies.

A system for data security scanning in a network, comprising:

• means for receiving a request from a destination network device for network traffic from outside a network;
• means for acquiring a security policy of the network for network traffic being transmitted from outside the network to the destination network device;
• means for ascertaining, based on the security policy, mandatory security technologies that are required to be applied to the network traffic;
• and
• means for sending a query to at least one network device located on an intended path of the network traffic to the destination network device, the query soliciting an assistance offer from the at least one network device for assistance in applying the mandatory security technologies.

A system for data security scanning in a network, comprising:

• a processor;
• and
• a memory,
• wherein the processor and the memory are configured to perform a method comprising:
• receiving a request from a destination network device for network traffic from outside a network;
• acquiring a security policy of the network for network traffic being transmitted from outside the network to the destination network device;
• ascertaining, based on the security policy, mandatory security technologies that are required to be applied to the network traffic;
• and
• sending a query to at least one network device located on an intended path of the network traffic to the destination network device, the query soliciting an assistance offer from the at least one network device for assistance in applying the mandatory security technologies.

A computer-readable medium containing instructions for performing a method for data security scanning in a network, the method comprising:

• receiving a request from a destination network device for network traffic from outside a network;
• acquiring a security policy of the network for network traffic being transmitted from outside the network to the destination network device;
• ascertaining, based on the security policy, mandatory security technologies that are required to be applied to the network traffic;
• and
• sending a query to at least one network device located on an intended path of the network traffic to the destination network device, the query soliciting an assistance offer from the at least one network device for assistance in applying the mandatory security technologies.