Use of a trust score plan
This disclosure describes techniques that include assessing trust in a system, and in particular, assessing trust for entities based on a trust score plan. In one example, this disclosure describes a method that includes identifying, by the computing system, a selected trust score plan from a plurality of trust score plans associated with a network entity in a computer network; storing, by a computing system, information collected about the network entity in the computer network; determining, by the computing system and based on the identified trust score plan and the stored information, a trust score for the network entity; and modifying, by the computing system and based on the trust score for the network entity, operations within the computer network.
1 . A method comprising:
identifying, by a computing system, a first trust score plan associated with a first network device in a computer network;
identifying, by the computing system, a second trust score plan associated with a second network device in the computer network;
storing, by the computing system, information collected about the first network device and the second network device;
determining, by the computing system and based on the first trust score plan and the stored information, a first trust score for the first network device;
determining, by the computing system and based on the second trust score plan and the stored information, a second trust score for the second network device; and
modifying, by the computing system and based the second trust score not exceeding a threshold, traffic within the computer network to divert traffic away from the second network device.
2 . The method of claim 1 , wherein identifying the first trust score plan includes:
identifying the first trust score plan based on input.
3 . The method of claim 1 , wherein storing information collected about the first network device includes:
storing information received from a plurality of source services.
4 . The method of claim 1 , wherein determining the first trust score includes:
determining the first trust score in response to a trigger.
5 . The method of claim 4 , wherein the trigger is one of:
input, an event, or a periodic alarm.
6 . The method of claim 5 , wherein the trigger includes information about a context in which the trigger was initiated, and wherein identifying the first trust score plan includes:
identifying the first trust score plan based on the context.
7 . The method of claim 1 , further comprising:
enabling, by the computing system, modification of the first trust score plan to generate a modified first trust score plan.
8 . The method of claim 7 , further comprising:
determining, by the computing system and based on the modified first trust score plan and the stored information, a new trust score for the first network device; and
modifying, by the computing system and based on the new trust score for the first network device, operations within the computer network.
9 . The method of claim 1 , wherein determining the first trust score includes:
generating a trust score result that includes the first trust score and supporting information, wherein the supporting information enables reproduction of calculations underlying the first trust score.
10 . The method of claim 1 , wherein modifying traffic includes changing configurations to at least one of:
a router, a firewall, an access control system, an asset management system, or an alarm system.
11 . The method of claim 1 , wherein modifying traffic includes at least one of:
changing routing algorithms, limiting access to one or more network devices, marking one or more network devices as unavailable, or triggering an alarm.
12 . A system comprising processing circuitry and a storage device, wherein the processing circuitry has access to the storage device and is configured to:
identify a first trust score plan associated with a first network device in a computer network;
identify a second trust score plan associated with a second network device in the computer network;
store information collected about the first network device and the second network device;
determine, based on the first trust score plan and the stored information, a first trust score for the first network device;
determine, based on the second trust score plan and the stored information, a second trust score for the second network device; and
modify, based on the second trust score not exceeding a threshold, traffic within the computer network to divert traffic away from the second network device.
13 . The system of claim 12 , wherein to identify the first trust score plan, the processing circuitry is further configured to includes:
identify the first trust score plan based on input.
14 . The system of claim 12 , wherein to store information collected about the first network device, the processing circuitry is further configured to:
store information received from a plurality of source services within the computer network.
15 . The system of claim 12 , wherein to determine the first trust score, the processing circuitry is further configured to:
determine the first trust score in response to a trigger.
16 . The system of claim 15 , wherein the trigger is one of:
input, an event, or a periodic alarm.
17 . The system of claim 16 , wherein the trigger includes information about a context in which the trigger was initiated, and wherein to identify the first trust score plan, the processing circuitry is further configured to:
identify the first trust score plan based on the context.
18 . The system of claim 12 , wherein the processing circuitry is further configured to:
enable modification of the first trust score plan to generate a modified first trust score plan.
19 . The system of claim 12 , wherein to determine the first trust score, the processing circuitry is further configured to:
generate a trust score result that includes the first trust score and supporting information, wherein the supporting information enables reproduction of calculations underlying the first trust score.
20 . Non-transitory computer-readable media comprising instructions that, when executed, configure processing circuitry of a computing system to:
identify a first trust score plan associated with a first network device in a computer network;
identify a second trust score plan associated with a second network device in the computer network;
store information collected about the first network device and the second network device;
determine, based on the first trust score plan and the stored information, a first trust score for the first network device;
determine, based on the second trust score plan and the stored information, a second trust score for the second network device; and
modify, based on the second trust score not exceeding a threshold, traffic within the computer network to divert traffic away from the second network device.