Determining the reputation of a digital certificate
Particular embodiments described herein provide for an electronic device that can be configured to identifying a digital certificate associated with data and assigning a reputation to the digital certificate, where the digital certificate is classified as trusted if the digital certificate is included in an entry in a whitelist and the digital certificate is classified as untrusted if the digital certificate is included in an entry in a blacklist.
1. At least one non-transitory, computer-readable medium comprising one or more instructions that, when executed by at least one processor, cause the at least one processor to perform a method comprising:
identifying a digital certificate associated with data;
classifying the digital certificate as trusted if the digital certificate is included in an entry in a certificate whitelist, or classifying the digital certificate as untrusted if the digital certificate is included in an entry in a certificate blacklist;
determining a certificate authority that created the digital certificate;
determining a reputation of the certificate authority based on a determination that the digital certificate is not included in the certificate whitelist or the certificate blacklist; and
assigning a reputation to the data based at least in part on the reputation of the certificate authority, wherein the data is classified as trusted if the certificate authority is included in an entry in an authority whitelist or the data is classified as untrusted if the certificate authority is included in an entry in an authority blacklist.
2. The at least one non-transitory, computer-readable medium of claim 1 , wherein the digital certificate is classified as trusted if the certificate authority is included in the entry in the authority whitelist.
3. The at least one non-transitory, computer-readable medium of claim 1 , wherein the digital certificate is classified as untrusted if the certificate authority is included in the entry in the authority blacklist.
4. The at least one non-transitory, computer-readable medium of claim 1 , wherein the reputation of the certificate authority is determined using an entry in a certificate authority reputation database.
5. The at least one non-transitory, computer-readable medium of claim 1 , the method further comprising:
identifying more than one digital certificates associated with the data;
determining a reputation for each of the more than one digital certificates; and
assigning the reputation to the digital certificate, based on the reputation of each of the more than one digital certificates.
6. The at least one non-transitory, computer-readable medium of claim 1 , wherein the reputation of the certificate authority is determined based at least in part on a file prevalence of the certificate authority.
7. An apparatus, comprising:
a memory; and
a processor configured to
identify a digital certificate associated with data;
classify the digital certificate as trusted if the digital certificate is included in an entry in a certificate whitelist, or classify the digital certificate as untrusted if the digital certificate is included in an entry in a certificate blacklist;
determine a certificate authority that created the digital certificate;
determine a reputation of the certificate authority based on a determination that the digital certificate is not included in the certificate whitelist or the certificate blacklist; and
assign a reputation to the data based at least in part on the reputation of the certificate authority, wherein the data is classified as trusted if the certificate authority is included in an entry in an authority whitelist or the data is classified as untrusted if the certificate authority is included in an entry in an authority blacklist.
8. The apparatus of claim 7 , wherein the digital certificate is classified as trusted if the certificate authority is included in the entry in the authority whitelist.
9. The apparatus of claim 7 , wherein the digital certificate is classified as untrusted if the certificate authority is included in the entry in the authority blacklist.
10. The apparatus of claim 7 , wherein the reputation of the certificate authority is determined using an entry in a certificate authority reputation database.
11. The apparatus of claim 7 , wherein the processor is further configured to:
identify more than one digital certificates associated with the data;
determine a reputation for each of the more than one digital certificates; and
assign the reputation to the digital certificate, based on the reputation of each of the more than one digital certificates.
12. The apparatus of claim 7 , wherein the reputation of the certificate authority is determined based at least in part on a file prevalence of the certificate authority.
13. A method, comprising:
identifying a digital certificate associated with data;
classifying the digital certificate as trusted if the digital certificate is included in an entry in a certificate whitelist, or classifying the digital certificate as untrusted if the digital certificate is included in an entry in a certificate blacklist;
determining a certificate authority that created the digital certificate;
determining a reputation of the certificate authority based on a determination that the digital certificate is not included in the certificate whitelist or the certificate blacklist; and
assigning a reputation to the data based at least in part on the reputation of the certificate authority, wherein the data is classified as trusted if the certificate authority is included in an entry in an authority whitelist or the data is classified as untrusted if the certificate authority is included in an entry in an authority blacklist.
14. The method of claim 13 , wherein the digital certificate is classified as trusted if the certificate authority is included in the entry in the authority whitelist.
15. The method of claim 13 , wherein the digital certificate is classified as untrusted if the certificate authority is included in the entry in the authority blacklist.
16. The method of claim 13 , further comprising:
identifying more than one digital certificates associated with the data;
determining a reputation for each of the more than one digital certificates; and
assigning the reputation to the digital certificate, based on the reputation of each of the more than one digital certificates.
17. A system for determining a reputation of a digital certificate, the system comprising:
a memory; and
a processor configured for
identifying the digital certificate, which is associated with data;
classifying the digital certificate as trusted if the digital certificate is included in an entry in a certificate whitelist, or classifying the digital certificate as untrusted if the digital certificate is included in an entry in a certificate blacklist;
determining a certificate authority that created the digital certificate;
determining a reputation of the certificate authority based on a determination that the digital certificate is not included in the certificate whitelist or the certificate blacklist; and
assigning the reputation to the data based at least in part on the reputation of the certificate authority, wherein the data is classified as trusted if the certificate authority is included in an entry in an authority whitelist or the data is classified as untrusted if the certificate authority is included in an entry in an authority blacklist.
18. The system of claim 17 , wherein the digital certificate is classified as trusted if the digital certificate is included in the entry in the certificate whitelist, and the digital certificate is classified as untrusted if the digital certificate is included in the entry in the certificate blacklist.
19. The method of claim 13 , wherein the reputation of the certificate authority is determined based at least in part on a file prevalence of the certificate authority.