Method to control access between network endpoints based on trust scores calculated from information system component analysis
Signatures are generated for modules in a computer system. The signatures can be assembled into an integrity log. The signatures are compared with signatures in a database in an integrity validator. Once signatures are either validated or invalidated, a trust score can be generated. The trust score can then be used to determine whether the computer system should be granted access to a resource using a policy.
1. An apparatus, comprising:
a database arranged to store a first plurality of signatures for a first plurality of modules;
a receiver to receive a second plurality of signatures corresponding to a second plurality of modules in a machine;
a validator operative to compare at least a received one of the second plurality of signatures with the one or more of plurality of signatures in the database, to identify a first subset of the second plurality of modules for which the corresponding signatures are found in the database, and to identify a second subset of the second plurality of modules for which the corresponding signatures are not found in the database; and
a trust score generator to generate a trust score for the machine based on the first subset of the second plurality of modules for which the corresponding signatures are found in the database and the second subset of the second plurality of modules for which the corresponding signatures are not found in the database.
2. An apparatus according to claim 1 , wherein the first plurality of signatures for the first plurality of modules includes a first plurality of hashes for the plurality of modules.
3. An apparatus according to claim 1 , wherein:
the apparatus further comprises a transmitter to transmit the signatures corresponding to the second subset of the second plurality of modules for which the corresponding signatures are not found in the database to a second database of signatures;
the receiver is operative to receive from the second database a second trust score; and
the trust score generator is operative to generate the trust score based on the first subset of the plurality of modules for which the corresponding signatures are found in the database and the second trust score.
4. An apparatus according to claim 1 , wherein:
the database is arranged to store a first plurality of identifiers for the first plurality of modules;
the receiver is operative to receive a second plurality of identifiers for the second plurality of modules in the machine; and
the validator is operative to compare the second plurality of signatures with the plurality of signatures in the database using the second plurality of identifiers for the plurality of modules in the machine.
5. An apparatus according to claim 1 , further comprising a policy to control access to a resource, the policy including a threshold score to receive full access to the resource.
6. An apparatus according to claim 5 , the policy further comprising a second threshold score to receive partial access to the resource.
7. An apparatus according to claim 1 , wherein the receiver is operative to receive a signature of a module to add to the database.
8. An apparatus according to claim 1 , further comprising a transmitter to transmit said trust score to the machine.
9. A method, comprising:
receiving a first plurality of signatures corresponding to a plurality of modules in a machine;
comparing the first plurality of signatures for the plurality of modules with a second plurality of signatures in a database;
identifying a first subset of the plurality of modules for which the corresponding signatures are found in the database and a second subset of the plurality of modules for which the corresponding signatures are not found in the database; and
generating a trust score for the machine based on the first subset of the plurality of modules for which the corresponding signatures are found in the database and a second subset of the plurality of modules for which the corresponding signatures are not found in the database.
10. A method according to claim 9 , further comprising controlling access to a resource on a network based on the trust score.
11. A method according to claim 10 , wherein controlling access to a resource on a network based on the trust score includes:
accessing a policy for access to the resource on the network; and
using the policy to control access to the resource based on the trust score.
12. A method according to claim 11 , wherein using the policy to control access to the resource based on the trust score includes granting full access to the resource if the trust score exceeds a threshold score according to the policy.
13. A method according to claim 11 , wherein using the policy to control access to the resource based on the trust score includes granting partial access to the resource if the trust score is higher than a first threshold score but lower than a second threshold score according to the policy.
14. A method according to claim 11 , wherein using the policy to control access to the resource based on the trust score includes denying access to the resource if the trust score is lower than a threshold score according to the policy.
15. A method according to claim 9 , wherein generating a trust score includes weighting at least a first module more highly than at least a second module in generating the trust score.
16. A method according to claim 9 , wherein receiving a first plurality of signatures includes receiving an integrity log including the first plurality of signatures corresponding to the plurality of modules.
17. A method according to claim 9 , wherein:
the method further comprises:
forwarding the signatures corresponding to the second subset of the plurality of modules for which the corresponding signatures are not found in the database to a second database of signatures; and
receiving from the second database a third subset of the plurality of modules for which the corresponding signatures are found in the second database and a fourth subset of the plurality of modules for which the corresponding signatures are not found in the second database; and
generating a trust score includes generating the trust score based on the first subset of the plurality of modules for which the corresponding signatures are found in the database and the third subset of the plurality of modules for which the corresponding signatures are found in the third database.
18. A method according to claim 9 , wherein:
receiving a first plurality of signatures corresponding to a plurality of modules includes receiving the first plurality of signatures and a plurality of identifiers for the plurality of modules; and
comparing the first plurality of signatures for the plurality of modules with a second plurality of signatures in a database includes comparing the first plurality of signatures for the plurality of modules with the second plurality of signatures in the database using the plurality of identifiers for the plurality of modules.
19. A method according to claim 9 , further comprising transmitting the bust score to the machine.