Reputation Based Connection Throttling
AssigneeSecure Computing Corporation
InventorsDmitri Alperovitch, Paul Judge, Sven Krasser, Phyllis Adele Schneck, Aarjav Jyotindra Neeta Trivedi, Weilai Yang
Life of this patent
Estimating the term…
Abstract
Methods and systems for operation upon one or more data processors for throttling connections based upon reputation of the entity requesting connection.
Claims26
A reputation based connection throttling system for voice over internet protocol communications, the system comprising:
- a communications interface operable to receive voice over internet protocol connection requests associated with an external entity prior to a connection being established between the external entity and a protected network associated with the communications interface;
- a reputation engine operable to derive a reputation associated with the external entity;
- and
- a connection control engine operable to deny a voice over internet protocol connection request to a protected network based upon the derived reputation of the external entity associated with the voice over protocol connection request.
A reputation based connection throttling system for short message service communications, the system comprising:
- a communications interface operable to receive short message service connection requests associated with an external entity prior to a connection being established between the external entity and a protected network associated with the communications inter-face;
- a reputation engine operable to derive a reputation associated with the external entity;
- and
- a connection control engine operable to deny a short message service connection request to a protected network based upon the derived reputation of the external entity associated with the short message service connection request.
A method for reputation based connection throttling, comprising the steps of:
- receiving a voice over internet protocol connection request, the voice over internet protocol connection request being related to an external entity;
- querying a reputation engine for a reputation associated with the external entity;
- comparing the reputation to a policy associated with a protected enterprise network;
- permitting the connection request based upon determining that the reputation of the external entity related to the voice over internet protocol connection request complies with the policy;
- throttling the connection request based upon determining that the reputation of the external entity related to the voice over internet protocol connection request does not comply with the policy.
A method for reputation based connection throttling, comprising the steps of:
- receiving a connection request, the connection request requesting a connection between an external entity and a protected enterprise network;
- querying a reputation engine for a reputation associated with the external entity, the reputation comprising an aggregation of the reputable and non-reputable criteria associated with the external entity;
- comparing the reputation to a policy associated with the protected enterprise network;
- permitting the connection request based upon determining that the reputation of the external entity related to the voice over internet protocol connection request complies with the policy;
- throttling the connection request based upon determining that the reputation of the external entity related to the voice over internet protocol connection request does not comply with the policy.
A reputation based firewall, comprising:
- a firewall operable to receive a data packet directed to a protected network and to determine handling of the data packet based upon a security policy associated with the protected network, the security policy comprising at least one rule based upon a reputation of an external entity associated with the data packet;
- a reputation engine operable to determine the external entity associated with the data packet and to provide the reputation to the firewall based upon determination of the external entity;
- and
- wherein handling comprises permitting the data packet entry to the protected network, or denying the data packet entry to the protected network.
Dependencies are inferred from the claim text.