US 2020/0396259 A1 · Cyber-Security in Heterogeneous Networks

Abstract

A method and a computer program product and an apparatus for securing communication in heterogeneous networks that include devices with different protection levels. The method comprises monitoring, by a security agent installed on a device, communication between the device and external devices. The method comprises determining a level of in-device protection for each device based on available protection thereof. The method further comprises employing, by the security agent, an associated security policy for communications originating from the device, based on the level of in-device protection; such as resources utilized for employing security policies for communications originating from devices are correlated with the protection levels thereof. The method may further comprise enabling sharing security workload between device having trusted security agents to improve performance efficiency thereof.

Claims23

Dependent claims

A method comprising:

monitoring, by a security agent, installed on a device, communication between the device and external devices, wherein the external devices comprise at least a first device and a second device;
determining a first level of in-device protection for the first device;
determining a second level of in-device protection for the second device, wherein the second level is a higher protection level than the first level;
employing, by the security agent, a first security policy for communications originating from the first device, wherein the first security policy is determined based on the first level of in-device protection;
and
employing, by the security agent, a second security policy for communications originating from the second device, wherein the second security policy is determined based on the second level of in-device protection,
wherein the second policy utilizes more resources than the first security policy.

4 more elements

A method comprising:

identifying a connection between a first device and a second device, wherein the first device is protected by a first security agent installed thereon, wherein the first security agent is configured to monitor communications between the first device and external devices, wherein the second device is protected by a second security agent installed thereon, wherein the second security agent is configured to monitor communications between the second device and external devices,
wherein the first device is configured to perform a first security workload, wherein the second device is configured to perform a second security workload;
allocating at least a portion of the first security workload and the second security workload between the first device and the second device, whereby improving efficiency of performing the first security workload and the second security workload.

Dependencies are inferred from the claim text.

Cyber-Security in Heterogeneous Networks

Life of this patent

Cyber-Security in Heterogeneous Networks

Life of this patent

Abstract

Claims23