Peer-to-peer group vigilance
View Patent ↗Providing peer-to-peer network security includes collecting, by a local trusted network device, local trust data related to behavior of the local trusted network device, receiving, by one or more remote trusted network devices, additional trust data for the local trusted network device, calculating a combined trust score for the local trusted network device based on the local trust data and additional trust data, and modifying activity of the local trusted network device based on the combined trust score.
1. A non-transitory machine readable medium comprising instructions that, when executed, cause a machine to:
collect, by a local trusted network device, local trust data related to behavior of the local trusted network device;
receive, from one or more remote trusted network devices, additional trust data for the local trusted network device;
determine a total number of the one or more remote trusted network devices from which the additional trust data is received,
verify that the total number of the one or more remote trusted network devices satisfies a quorum, and
in response to verifying that the total number of the one or more remote trusted network devices satisfies the quorum:
calculate a combined trust score for the local trusted network device based on the local trust data and the additional trust data; and
modify activity of the local trusted network device based on the combined trust score.
2. The non-transitory machine readable medium of claim 1 , wherein the additional trust data comprises a trust score determined by each of the one or more remote trusted network devices.
3. The non-transitory machine readable medium of claim 1 , wherein the instructions that cause the machine to modify activity of the local trusted network device comprise instructions that cause the machine to restrict network access by the local trusted network device.
4. The non-transitory machine readable medium of claim 1 , wherein the behavior of the local trusted network device comprises network traffic from the local trusted network device.
5. The non-transitory machine readable medium of claim 1 , wherein the behavior of the local trusted network device comprises an indication of physical tampering of the local trusted network device.
6. The non-transitory machine readable medium of claim 1 , wherein the behavior of the local trusted network device comprises a work load of the local trusted network device.
7. A system for providing peer-to-peer network security, comprising:
one or more processors; and
a memory, coupled to the one or more processors, comprising instructions which, when executed by the one or more processors, cause the one or more processors to:
collect, by a local trusted network device, local trust data related to behavior of the local trusted network device, the behavior comprising network traffic related to the local trusted network device;
receive, from one or more remote trusted network devices, additional trust data for the local trusted network device;
determine a total number of the one or more remote trusted network devices from which the additional trust data is received,
verify that the total number of the one or more remote trusted network devices satisfies a quorum, and
in response to verifying that the total number of the one or more remote trusted network devices satisfies the quorum:
calculate a combined trust score for the local trusted network device based on the local trust data and the additional trust data; and
quarantine the local trusted network device based on the combined trust score.
8. The system of claim 7 , wherein the additional trust data comprises a trust score determined by each of the one or more remote trusted network devices.
9. The system of claim 8 , the instructions further causing the one or more processors to:
calculate a local trust score using the local trust data,
wherein the instructions to calculate a combined trust score for the local trusted network device comprises averaging the trust scores determined by each of the one or more remote trusted network devices and the local trust score.
10. The system of claim 7 , wherein the instructions to quarantine the local trusted network device further comprise instructions that when executed cause the one or more processors to restrict network access by the local trusted network device.
11. The system of claim 7 , wherein the behavior of the local trusted network device comprises an indication of physical tampering of the local trusted network device.
12. The system of claim 7 , wherein the behavior of the local trusted network device comprises a work load of the local trusted network device.
13. A method for providing peer-to-peer network security, comprising:
collecting, by a local trusted network device, local trust data related to behavior of the local trusted network device;
receiving, from one or more remote trusted network devices, additional trust data for the local trusted network device;
determining a total number of the one or more remote trusted network devices from which the additional trust data is received,
verifying that the total number of the one or more remote trusted network devices satisfies a quorum, and
in response to verifying that the total number of the one or more remote trusted network devices satisfies the quorum:
calculating a combined trust score for the local trusted network device based on the local trust data and the additional trust data;
determining that the combined trust score does not satisfy a predefined trust threshold score; and
modifying, in response to determining that the combined trust score does not satisfy the predefined trust threshold score, activity of the local trusted network device based on the combined trust score.
14. The method of claim 13 , wherein the additional trust data comprises a trust score determined by one of the one or more remote trusted network devices.
15. The method of claim 13 , wherein the modifying of the activity of the local trusted network device comprises correcting the activity by the local trusted network device.
16. The method of claim 13 , wherein the behavior of the local trusted network device comprises network traffic from the local trusted network device.
17. The method of claim 13 , wherein the behavior of the local trusted network device comprises a temperature change of the local trusted network device.
18. The method of claim 13 , wherein the behavior of the local trusted network device comprises a work load of the local trusted network device.
19. A non-transitory machine readable medium comprising instructions that, when executed, cause a machine to:
collect, by a local trusted network device, first trust data related to behavior of a target remote trusted network device;
receive, from one or more remote trusted network devices, additional trust data for the target remote trusted network device;
determine a total number of the one or more remote trusted network devices from which the additional trust data is received,
verify that the total number of the one or more remote trusted network devices satisfies a quorum, and
in response to verifying that the total number of the one or more remote trusted network devices satisfies the quorum:
calculate a combined trust score for the target remote trusted network device based on the first trust data and the additional trust data; and
transmit a message to modify activity of the target remote trusted network device to the target remote trusted network device based on the combined trust score.
20. The non-transitory machine readable medium of claim 19 , wherein the additional trust data comprises a trust score determined by one of the one or more remote trusted network devices.
21. The non-transitory machine readable medium of claim 19 , wherein the message directs the target remote trusted network device to restrict network access by the target remote trusted network device.