Differential security policies in email systems
AssigneeInternational Business Machines Corporation
InventorsLiam Harpur, Patrick J. O'Sullivan, Edith H. Stern, Barry E. Willner
Life of this patent
Estimating the term…
Abstract
A differential message security policy includes receiving information regarding activities of a user, determining a security risk for the user based on the activities of the user, and setting a security policy for the user based on the security risk. The security policy of the user may be modified based on a change in the security risk of the user or the security risk of the user exceeding a predetermined level. The security risk may be determined based on an aggregated scoring system that uses security variables related to the activities of the user.
Claims19
A method, operable on a server, for differential message security policies comprising:
- determining, by the server, a security risk for a user based on activities of the user and based on an aggregated scoring system that uses security variables related to the activities of the user;
- assigning with a graph equalization user interface, by the server, a relative weight to each security variable;
- setting, by the server, a security policy for the user based on the security risk;
- and
- performing, by the server, an action based on setting the security policy for the user, the action comprising at least one of setting a password strength for the user;
- setting a frequency of virus scans for the user;
- setting a false negative threshold for the user;
- setting a window for applying patches for the user;
- or setting a sleep time between interactions for the user.
(canceled)
(canceled)
(canceled)
A computing device for differential message security policies comprising:
- a server processor device or workstation processor device, the processor device configured to perform a set of functions comprising:
- determining, by the server, a security risk for a user based on activities of the user and based on an aggregated scoring system that uses security variables related to the activities of the user;
- assigning with a graph equalization user interface, by the server, a relative weight to each security variable;
- setting, by the server, a security policy for the user based on the security risk;
- and
- performing, by the server, an action based on setting the security policy for the user, the action comprising at least one of setting a password strength for the user;
- setting a frequency of virus scans for the user;
- setting a false negative threshold for the user;
- setting a window for applying patches for the user;
- or setting a sleep time between interactions for the user.
(canceled)
(canceled)
-20. (canceled)
A computer program product for differential message security policies, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, wherein the computer readable storage medium is not a transitory medium per se, the program instructions being executable by a device to cause the device to perform a method comprising:
- determining a security risk for a user based on activities of the user and based on an aggregated scoring system that uses security variables related to the activities of the user;
- assigning with a graph equalization user interface a relative weight to each security variable;
- setting a security policy for the user based on the security risk;
- and
- performing an action based on setting the security policy for the user, the action comprising at least one of setting a password strength for the user;
- setting a frequency of virus scans for the user;
- setting a false negative threshold for the user;
- setting a window for applying patches for the user;
- or setting a sleep time between interactions for the user.
Dependencies are inferred from the claim text.