Secure communication tunnels specific to network resource

1. A method comprising:

receiving a request from a source device connected to a source network to connect to a selected one of a plurality of destination resources within a destination network;

in response to verifying that a first connection between the source device and the selected destination resource is allowed:

establishing a first secure network communications tunnel between the source device and the selected destination resource, wherein the first secure network communications tunnel inhibits the source device from connecting to a different one of the plurality of destination resources within the destination network; and

terminating the first secure network communications tunnel in response to a detection of a security event.

2. The method of claim 1 further comprising:

detecting a termination of a session established between the source device and the selected destination resource over the secure network communications tunnel, wherein the termination of the session is the security event that results in the termination of the first secure network communications tunnel.

3. The method of claim 1 further comprising:

detecting an intrusion attempt based on an attempted access by the source device to a different one of the plurality of destination resources within the destination network over the first secure network communications tunnel, wherein the intrusion attempt is the security event and results in the termination of the first secure network communications tunnel.

4. The method of claim 1 further comprising:

receiving a set of expected user behaviors corresponding to a user of the source device; and

comparing the set of expected user behaviors to a set of current user behaviors corresponding to the user's use of the selected destination resource over the first secure network communications tunnel, wherein the security event is based on the comparison.

5. The method of claim 1 further comprising:

receiving a set of expected user behaviors corresponding to a user of the source device;

comparing the set of expected user behaviors to a set of current user behaviors corresponding to the user's use of the selected destination resource over the first secure network communications tunnel, wherein the comparison results in a security level;

retrieving a security policy corresponding to the security level; and

triggering a security event in response to the retrieved security policy disallowing access to the selected destination resource.

6. The method of claim 1 further comprising:

receiving a set of expected user behaviors corresponding to a user of the source device;

comparing the set of expected user behaviors to a set of current user behaviors corresponding to the user's use of the selected destination resource over the first secure network communications tunnel; and

disallowing the connection between the source device and the selected destination resource based on the comparison, wherein the disallowing inhibits performance of the establishment of the first secure network communications tunnel.

7. The method of claim 1 further comprising:

receiving a second request from the source device to connect to a different one of the plurality of destination resources within the destination network;

in response to verifying that a second connection between the source device and the different destination resource is allowed:

establishing a second secure network communications tunnel between the source device and the different destination resource, wherein the second secure network communications tunnel is specific to the source device and the different destination resource, and wherein the source device is inhibited from accessing the other destination resources that are connected to the destination network using the second secure network communications tunnel; and

terminating the second secure network communications tunnel in response to a detection of a different security event.

8. An information handling system comprising:

one or more processors;

a memory coupled to at least one of the processors;

a network interface that connects the information handling system to one or more networks; and

a set of computer program instructions stored in the memory and executed by at least one of the processors in order to perform actions comprising:

receiving a request from a source device connected to a source network to connect to a selected one of a plurality of destination resources within a destination network;

in response to verifying that a first connection between the source device and the selected destination resource is allowed:

establishing a first secure network communications tunnel between the source device and the selected destination resource, wherein the first secure network communications tunnel inhibits the source device from connecting to a different one of the plurality of destination resources within the destination network; and

terminating the first secure network communications tunnel in response to a detection of a security event.

9. The information handling system of claim 8 further comprising:

detecting a termination of a session established between the source device and the selected destination resource over the secure network communications tunnel, wherein the termination of the session is the security event that results in the termination of the first secure network communications tunnel.

10. The information handling system of claim 8 further comprising:

detecting an intrusion attempt based on an attempted access by the source device to a different one of the plurality of destination resources within the destination network over the first secure network communications tunnel, wherein the intrusion attempt is the security event and results in the termination of the first secure network communications tunnel.

11. The information handling system of claim 8 further comprising:

receiving a set of expected user behaviors corresponding to a user of the source device; and

comparing the set of expected user behaviors to a set of current user behaviors corresponding to the user's use of the selected destination resource over the first secure network communications tunnel, wherein the security event is based on the comparison.

12. The information handling system of claim 8 further comprising:

receiving a set of expected user behaviors corresponding to a user of the source device;

comparing the set of expected user behaviors to a set of current user behaviors corresponding to the user's use of the selected destination resource over the first secure network communications tunnel, wherein the comparison results in a security level;

retrieving a security policy corresponding to the security level; and

triggering a security event in response to the retrieved security policy disallowing access to the selected destination resource.

13. The information handling system of claim 8 further comprising:

receiving a set of expected user behaviors corresponding to a user of the source device;

comparing the set of expected user behaviors to a set of current user behaviors corresponding to the user's use of the selected destination resource over the first secure network communications tunnel; and

disallowing the connection between the source device and the selected destination resource based on the comparison, wherein the disallowing inhibits performance of the establishment of the first secure network communications tunnel.

14. The information handling system of claim 8 further comprising:

receiving a second request from the source device to connect to a different one of the plurality of destination resources within the destination network;

in response to verifying that a second connection between the source device and the different destination resource is allowed:

establishing a second secure network communications tunnel between the source device and the different destination resource, wherein the second secure network communications tunnel is specific to the source device and the different destination resource, and wherein the source device is inhibited from accessing the other destination resources that are connected to the destination network using the second secure network communications tunnel; and

terminating the second secure network communications tunnel in response to a detection of a different security event.

15. A computer program product stored in a computer readable storage medium, comprising computer program code that, when executed by an information handling system, performs actions comprising:

receiving a request from a source device connected to a source network to connect to a selected one of a plurality of destination resources within a destination network;

in response to verifying that a first connection between the source device and the selected destination resource is allowed:

establishing a first secure network communications tunnel between the source device and the selected destination resource, wherein the first secure network communications tunnel inhibits the source device from connecting to a different one of the plurality of destination resources within the destination network; and

terminating the first secure network communications tunnel in response to a detection of a security event.

16. The computer program product of claim 15 further comprising:

detecting a termination of a session established between the source device and the selected destination resource over the secure network communications tunnel, wherein the termination of the session is the security event that results in the termination of the first secure network communications tunnel.

17. The computer program product of claim 15 further comprising:

detecting an intrusion attempt based on an attempted access by the source device to a different one of the plurality of destination resources within the destination network over the first secure network communications tunnel, wherein the intrusion attempt is the security event and results in the termination of the first secure network communications tunnel.

18. The computer program product of claim 15 further comprising:

receiving a set of expected user behaviors corresponding to a user of the source device; and

comparing the set of expected user behaviors to a set of current user behaviors corresponding to the user's use of the selected destination resource over the first secure network communications tunnel, wherein the security event is based on the comparison.

19. The computer program product of claim 15 further comprising:

receiving a set of expected user behaviors corresponding to a user of the source device;

comparing the set of expected user behaviors to a set of current user behaviors corresponding to the user's use of the selected destination resource over the first secure network communications tunnel, wherein the comparison results in a security level;

retrieving a security policy corresponding to the security level; and

triggering a security event in response to the retrieved security policy disallowing access to the selected destination resource.

20. The computer program product of claim 15 further comprising:

receiving a set of expected user behaviors corresponding to a user of the source device;

comparing the set of expected user behaviors to a set of current user behaviors corresponding to the user's use of the selected destination resource over the first secure network communications tunnel; and

disallowing the connection between the source device and the selected destination resource based on the comparison, wherein the disallowing inhibits performance of the establishment of the first secure network communications tunnel.