Methods of providing security for data distributions in a data network and related devices, networks, and computer program products

1. A method of operating a data network including a first network device and a second network device, the method comprising:

providing data for distribution from the first network device to the second network device;

providing a first risk factor associated with the data wherein the first risk factor characterizes a sensitivity of the data with the respect to unauthorized access to the data;

providing a second risk factor associated with the second network device wherein the second risk factor characterizes a degree of network intrusion associated with the second net work device;

assessing a risk of distribution based on consideration of the first and second risk factors;

blocking the distribution of data to the second network device if the risk of distribution exceeds a threshold; and

allowing the distribution of data to the second network device if the risk of distribution does not exceed the threshold;

wherein assessing the risk of distribution comprises summing the first and second risk factors, and wherein blocking the distribution of data comprises blocking the distribution of data if the sum including the first and second risk factors exceeds the threshold.

2. A method according to claim 1 , further comprising:

providing a third risk factor associated with the first network device;

wherein assessing the risk of distribution comprises assessing the risk of distribution based on consideration of the first, second, and third risk factors.

3. A method according to claim 1 , wherein the first risk factor associated with the data is based on at least one of a search for keywords included in the data, input from a creator of the data, a form of the data, a setting of the data, an owner of the data, and/or a classification of the data.

4. A method according to claim 1 , wherein the second risk factor associated with the second network device is based on monitored network intrusions associated with the second network device.

5. A method according to claim 1 , wherein the first network device is included in a first network zone comprising a first plurality of network devices, and wherein the second network device is included in a second network zone comprising a second plurality of network devices.

6. A method according to claim 5 , further comprising:

monitoring unauthorized network intrusions of the second plurality of network devices in the second network zone;

wherein the second risk factor is based on monitoring the unauthorized network intrusions of the second plurality of network devices in the second network zone.

7. A method according to claim 5 , further comprising:

allowing a distribution of data from the first network device to another network device in the first network zone without delay.

8. A data network comprising:

first and second network devices, with each of the first and second network devices being configured to transmit and receive data; and

a network gatekeeper coupled between the first and second network devices, the network gatekeeper being configured to receive data from the first network device for distribution to the second network device, to assess a risk of distribution based on consideration of a first risk factor that characterizes a sensitivity of the data with respect to unauthorized access to the data and a second risk factor associated with the second network device, to block the distribution of data to the second network device if the risk of distribution exceeds a threshold, and to allow the distribution of data to the second network device if the risk of distribution does not exceed the threshold;

wherein the second risk factor characterizes a degree of network intrusion associated with the second network device, wherein the network gatekeeper is configured to assess the risk of distribution by summing the first and second risk factors, and wherein the network gatekeeper is configured to block the distribution of data if the sum including the first and second risk factors exceeds the threshold.

9. A computer program product for operating a data network, the computer program product comprising a computer readable storage medium having computer readable program code embodied therein, the computer readable program code comprising:

computer readable program code configured to provide data for distribution from a first network device to a second network device;

computer readable program code configured to provide a first risk factor associated with the data wherein the first risk factor characterizes a sensitivity of the data with respect to unauthorized access to the data;

computer readable program code configured to provide a second risk factor associated with the second network device wherein the second risk factor characterizes a degree of network intrusion associated with the second network device;

computer readable program code configured to assess a risk of distribution based on consideration of the first and second risk factors;

computer readable program code configured to block the distribution of data to the second network device if the risk of distribution exceeds a threshold; and

computer readable program code configured to allow the distribution of data to the second network device if the risk of distribution does not exceed the threshold;

wherein assessing the risk of distribution comprises summing the first and second risk factors, and wherein blocking the distribution of data comprises blocking the distribution of data if the sum including the first and second risk factors exceeds the threshold.

10. A method according to claim 6 , wherein the first network zone includes a first gate keeper between the first network device and all other network devices outside the first network zone. wherein the second network zone includes a second gate keeper between the second network device and all other network devices outside the second network zone, and wherein blocking the distribution of data comprises blocking the distribution of data from the first network device at the first gate keeper in the first network zone.

11. A method according to claim 10 , further comprising:

allowing a distribution of data from the first network device to another network device in the first network zone without delay and without passing through the first gate keeper.

12. A data network according to claim 8 , wherein the gate keeper comprises a first gate keeper, the data network further comprising:

a first network zone comprising a first plurality of network devices wherein the first network device is included in the first network zone and wherein the first gate keeper is between the first network device and all other network devices outside the first network zone;

a second network zone comprising a second plurality of network devices wherein the second network device is included in the second network zone wherein the first gate keeper is configured to monitor unauthorized network intrusions of the second plurality of network devices in the second network zone, and wherein the second risk factor is based on monitoring the unauthorized network intrusions of the second plurality of network devices in the second network zone; and

a second gate keeper in the second network zone wherein the second gate keeper is between the second network device and all other network devices outside the second network zone;

wherein the first gate keeper is configured to block the distribution of data from the first network device at the first gate keeper in the first network zone.

13. A data network according to claim 12 , wherein the first network zone is configured to allow a distribution of data from the first network device to another network device in the first network zone without delay and without passing through the first gate keeper.