Risk-based credential management
Risk-based credential management is provided. A request to checkout credentials is received. The credentials are associated with at least one managed resource. A risk value of the request is determined. The determination of the risk value is based, at least in part, on risk information of the requesting device. A determination is made whether to deny the request based, at least in part, on the risk value and a first predetermined threshold of a checkout policy.
1. A method for credential management, the method comprising:
receiving, by one or more hardware processors, from a requesting device, a request to checkout credentials; wherein the credentials are associated with at least one managed resource;
determining, by one or more hardware processors, a risk value of the request, wherein the determination of the risk value is based, at least in part, on risk information of the requesting device; and
determining, by one or more hardware processors, whether to deny the request based, at least in part, on the risk value and a first predetermined threshold of a checkout policy by classifying certain types of malware of the requesting device.
2. The method of claim 1 , wherein determining whether to deny the request comprises:
determining, by one or more processors, that the risk value violates the first predetermined threshold and, in response, denying the request.
3. The method of claim 2 , wherein determining, by one or more processors, whether to deny the request is further based on a security status of each of the at least one managed resources.
4. The method of claim 3 , further comprising:
responsive to determining that the security status indicates that a first managed resource of the at least one managed resource is compromised, denying, by one or more processors, the request.
5. The method of claim 1 , wherein determining whether to deny the request comprises:
determining, by one or more processors, that the risk value does not violate the first predetermined threshold and, in response, granting the request.
6. The method of claim 1 , wherein the credentials authorize access to the at least one managed resource associated with the credentials.
7. The method of claim 1 , wherein the risk value is based, at least in part, on one or more types of risk information that are specified by the checkout policy.
8. The method of claim 7 , wherein the one or more types of risk information identify at least one of: data of the requesting device that matches a malware definition, a version of each of a plurality of programs installed on the requesting device, and a security patch installed on the requesting device.