Method of assessing real-time security of sequenced packet exchange (SPX) network connection

1. A method of assessing security of a user's connection to a Sequenced Packet Exchange (SPX) network, the method comprising:

providing an SPX network, the SPX network have a plurality of network nodes;

digitally accessing one or more of the plurality of network nodes;

analyzing a transmission passing through one or more of the plurality of network nodes;

identifying a user that initiated the transmission via properties of the transmission;

identifying a plurality of security implementations employed by the user;

determining a coefficient for each of the plurality of security implementations, the coefficient corresponding to a weight given to each of the security implementations for determining a level of security of the transmission;

calculating a security score representative of the level of security of the transmission, the security score being calculated as a function of the security implementations and their corresponding coefficients; and

automatically outputting the security score to the user.

2. The method of claim 1 , wherein the plurality of network nodes include an ingress node, an in-transit node, and an egress node.

3. The method of claim 1 , further comprising the steps of determining security implementations having coefficients below a predetermined threshold, querying a database that identifies the coefficients for each security implementation, and outputting to the user alternative security implementations that have coefficients above the predetermined threshold to replace the security implementations having coefficients below the predetermined threshold.

4. The method of claim 3 , further comprising the step of calculating an improvement value of the security score corresponding to each alternative security implementations, and outputting the calculated improvement values to the user.

5. The method of claim 1 , wherein the step of identifying the user that initiated the transmission includes comparing an IP address of the transmission to a list of known IP addresses for a plurality of users, comparing an origin IMSI or MSISDN of the transmission to a list of known IMSI or MSISDN for a plurality of users, or comparing a unique identifier for an IoT Device to a list of known identifiers for a plurality of user IoT devices.

6. The method of claim 1 , wherein the step of digitally accessing one or more of the plurality of network nodes further includes employing an application programming interface to gain access to the network nodes.

7. The method of claim 1 , wherein the step of identifying a plurality of security implementations employed by the user includes:

identifying the node through which the transmission has traveled;

if the node is an ingress node, determining if the security implementation corresponds to an access over public internet, a VPN connection over public internet, a standard cellular wireless connection, a secure cellular wireless connection, a direct leased line connection using user provided network equipment, or a direct leased line connection using security verified network equipment;

if the node is an in-transit node, determining if the security implementation corresponds to a standard ‘in clear’ transmission, if encryption is enabled, if device analytics are enabled, or if policy enforcement is applied; and

if the node is an egress node, determining if the security implementation corresponds to a Connection to a Customer Application or network using a direct leased line connection using user provided network equipment or corresponds to a connection to a customer application or network using a direct leased line connection using security verified network equipment.

8. A method of assessing security of a user's connection to a Sequenced Packet Exchange (SPX) network, the method comprising:

providing an SPX network, the SPX network have a plurality of network nodes, including an ingress node, an in-transit node, and an egress node;

digitally accessing the ingress node, the in-transit node, and the egress node;

analyzing a transmission passing through the ingress node, the in-transit node, and the egress node;

identifying a user that initiated the transmission via properties of the transmission;

identifying a plurality of security implementations employed by the user at each of the ingress node, the in-transit node, and the egress node;

determining a coefficient for each of the plurality of security implementations, the coefficient corresponding to a weight given to each of the security implementations for determining a level of security of the transmission;

calculating a security score representative of the level of security of the transmission, the security score being calculated as a function of the security implementations and their corresponding coefficients; and

automatically outputting the security score to the user.

9. The method of claim 8 , further comprising the steps of determining security implementations having coefficients below a predetermined threshold, querying a database that identifies the coefficients for each security implementation, and outputting to the user alternative security implementations that have coefficients above the predetermined threshold to replace the security implementations having coefficients below the predetermined threshold.

10. The method of claim 9 , further comprising the step of calculating an improvement value of the security score corresponding to each alternative security implementations, and outputting the calculated improvement values to the user.

11. The method of claim 8 , wherein the step of identifying the user that initiated the transmission includes comparing an IP address of the transmission to a list of known IP addresses for a plurality of users.

12. The method of claim 8 , wherein the step of digitally accessing one or more of the plurality of network nodes further includes employing an application programming interface to gain access to the network nodes.

13. The method of claim 8 , wherein the step of identifying a plurality of security implementations employed by the user includes:

identifying the node through which the transmission has traveled;

if the node is an ingress node, determining if the security implementation corresponds to an access over public internet, a VPN connection over public internet, a standard cellular wireless connection, a secure cellular wireless connection, a direct leased line connection using user provided network equipment, or a direct leased line connection using security verified network equipment;

if the node is an in-transit node, determining if the security implementation corresponds to a standard ‘in clear’ transmission, if encryption is enabled, if device analytics are enabled, or if policy enforcement is applied; and

if the node is an egress node, determining if the security implementation corresponds to a Connection to a Customer Application or network using a direct leased line connection using user provided network equipment or corresponds to a connection to a customer application or network using a direct leased line connection using security verified network equipment.

14. A method of assessing security of a user's connection to a Sequenced Packet Exchange (SPX) network, the method comprising:

providing an SPX network, the SPX network have a plurality of network nodes, including an ingress node, an in-transit node, and an egress node;

digitally accessing the ingress node, the in-transit node, and the egress node;

analyzing a transmission passing through the ingress node, the in-transit node, and the egress node;

identifying a user that initiated the transmission via properties of the transmission;

identifying a plurality of security implementations employed by the user at each of the ingress node, the in-transit node, and the egress node;

determining a coefficient for each of the plurality of security implementations, the coefficient corresponding to a weight given to each of the security implementations for determining a level of security of the transmission;

calculating a security score representative of the level of security of the transmission, the security score being calculated as a function of the security implementations and their corresponding coefficients; and

responsive to the security score below a predetermined security score threshold, automatically transmitting a notification to the user.

15. The method of claim 14 , further comprising the steps of determining security implementations that each have coefficients below a predetermined coefficient threshold, querying a database that identifies the coefficients for each security implementation, and outputting to the user alternative security implementations that have coefficients above the predetermined coefficient threshold to replace the security implementations having coefficients below the predetermined coefficient threshold.

16. The method of claim 15 , further comprising the step of calculating an improvement value of the security score corresponding to each alternative security implementations, and outputting the calculated improvement values to the user.

17. The method of claim 14 , wherein the step of identifying the user that initiated the transmission includes comparing an IP address of the transmission to a list of known IP addresses for a plurality of users.

18. The method of claim 14 , wherein the step of digitally accessing one or more of the plurality of network nodes further includes employing an application programming interface to gain access to the network nodes.

19. The method of claim 14 , wherein the step of identifying a plurality of security implementations employed by the user includes:

identifying the node through which the transmission has traveled;

if the node is an ingress node, determining if the security implementation corresponds to an access over public internet, a VPN connection over public internet, a standard cellular wireless connection, a secure cellular wireless connection, a direct leased line connection using user provided network equipment, or a direct leased line connection using security verified network equipment;

if the node is an in-transit node, determining if the security implementation corresponds to a standard ‘in clear’ transmission, if encryption is enabled, if device analytics are enabled, or if policy enforcement is applied; and

if the node is an egress node, determining if the security implementation corresponds to a Connection to a Customer Application or network using a direct leased line connection using user provided network equipment or corresponds to a connection to a customer application or network using a direct leased line connection using security verified network equipment.