Assured pipeline threat detection

#The present disclosure relates to devices, methods, and systems for providing security guard architecture for computing device threat protection.

#Computing devices are utilized for a variety of purposes. For instance, some computing devices are utilized for accomplishing classified, confidential, or high security tasks. These computing devices can be targets for potential penetration to, for example, access and take over control of the system, remove data, and/or tamper with the data or the system. For instance, computing devices controlling power grids or other infrastructure systems, as well as financial, medical, scientific, military, and/or business systems, may be some of the types of systems that could be potential targets, among others.

#Generally, two approaches have been utilized to secure these computing devices. One is the use of one or more firewalls that are designed to identify and reject threats as they attempt to access the secured computing device from an unsecured or lesser secured network. These firewall configurations may be known to the attackers and in some instances can be compromised by them.

#FIG. 1 illustrates an assured pipeline threat detection system in accordance with one or more embodiments of the present disclosure.

#FIG. 2 is a flow chart illustrating an example of a method for threat detection using an assured pipeline in accordance with one or more embodiments of the present disclosure.

#FIG. 3 illustrates a computing device for threat detection using an assured pipeline in accordance with one or more embodiments of the present disclosure.

#Devices, methods, and systems for threat detection using an assured pipeline are described herein. For example, one or more embodiments include receiving a first set of data at a firewall from an unsecured network, moving the first set of data from the firewall to a number of virtual machines, performing a number of threat detection analyses on the first set of data in the number of virtual machines that are organized in a first assured pipeline, and sending the first set of data to a secured target network if no threat was detected.

#Embodiments of the present disclosure can detect threats using a number of assured pipelines. That is, a guard system can detect threats, e.g., security threats, in data from an unsecured network before the data is allowed into a secured network. Furthermore, a guard system can detect security threats in data from a secured network before the data is sent to an unsecured network. A guard system can detect threats in data by employing an assured pipeline that can include a number of virtual machines. The number of virtual machines can include a number of threat detection programs that can detect threats in data.

#In the following detailed description, reference is made to the accompanying drawings that form a part hereof. The drawings show by way of illustration how one or more embodiments of the disclosure may be practiced.