Method to control access between network endpoints based on trust scores calculated from information system component analysis
Signatures are generated for modules in a computer system. The signatures can be assembled into an integrity log. The signatures are compared with signatures in a database in an integrity validator. Once signatures are either validated or invalidated, a trust score can be generated. The trust score can then be used to determine whether the computer system should be granted access to a resource using a policy.
1. A storage medium having stored thereon instructions that, when executed by a machine, result in:
receiving ( 705 ) a first plurality of signatures corresponding to a plurality of modules in a machine;
comparing ( 715 , 720 ) the first plurality of signatures for the plurality of modules with a second plurality of signatures in a database ( 205 );
identifying ( 725 ) a first subset of the plurality of modules for which the corresponding signatures are found in the database ( 205 ) and ( 730 ) a second subset of the plurality of modules for which the corresponding signatures are not found in the database ( 205 ); and
generating ( 740 ) a trust score for the machine based on the first subset of the plurality of modules for which the corresponding signatures are found in the database ( 205 ) and a second subset of the plurality of modules for which the corresponding signatures are not found in the database ( 205 ).
2. A storage medium according to claim 1 , wherein said storage medium has stored thereon further instructions that, when executed by the machine, result in controlling ( 810 , 815 , 820 ) access to a resource ( 145 ) on a network ( 110 , 135 ) based on the trust score.
3. A storage medium according to claim 2 , wherein controlling ( 810 , 815 , 820 ) access to a resource ( 145 ) on a network ( 110 , 135 ) based on the trust score includes:
accessing ( 810 ) a policy ( 230 ) for access to the resource ( 145 ) on the network ( 110 , 135 ); and
using ( 820 ) the policy ( 230 ) to control access to the resource ( 145 ) based on the trust score.
4. A storage medium according to claim 3 , wherein using ( 820 ) the policy ( 230 ) to control access to the resource ( 145 ) based on the trust score includes granting full access to the resource ( 145 ) if the trust score exceeds a threshold score ( 235 , 240 ) according to the policy ( 230 ).
5. A storage medium according to claim 3 , wherein using ( 820 ) the policy ( 230 ) to control access to the resource ( 145 ) based on the trust score includes granting partial access to the resource ( 145 ) if the trust score is higher than a first threshold score ( 235 , 240 ) but lower than a second threshold score ( 235 , 240 ) according to the policy ( 230 ).
6. A storage medium according to claim 3 , wherein using ( 820 ) the policy ( 230 ) to control access to the resource ( 145 ) based on the trust score includes denying access to the resource ( 145 ) if the trust score is lower than a threshold score ( 235 , 240 ) according to the policy ( 230 ).
7. A storage medium according to claim 1 , wherein generating ( 740 ) a trust score includes weighting generating ( 740 ) at least a first module more highly than at least a second module in generating the trust score.
8. A storage medium according to claim 1 , wherein receiving ( 705 ) a first plurality of signatures includes receiving an integrity log including the first plurality of signatures corresponding to the plurality of modules.
9. A storage medium according to claim 1 , wherein:
wherein said storage medium has stored thereon further instructions that, when executed by the machine, result in:
forwarding ( 535 ) the signatures corresponding to the second subset of the plurality of modules for which the corresponding signatures are not found in the database ( 205 ) to a second database ( 205 ) of signatures; and
receiving from the second database ( 205 ) a third subset of the plurality of modules for which the corresponding signatures are found in the second database ( 205 ) and a fourth subset of the plurality of modules for which the corresponding signatures are not found in the second database ( 205 ); and
generating ( 740 ) a trust score includes generating ( 740 ) the trust score based on the first subset of the plurality of modules for which the corresponding signatures are found in the database ( 205 ) and the third subset of the plurality of modules for which the corresponding signatures are found in the third database ( 205 ).
10. A storage medium according to claim 1 , wherein:
receiving ( 705 ) a first plurality of signatures corresponding to a plurality of modules includes receiving ( 705 ) the first plurality of signatures and a plurality of identifiers for the plurality of modules; and
comparing ( 715 , 720 ) the first plurality of signatures for the plurality of modules with a second plurality of signatures in a database ( 205 ) includes comparing ( 715 , 720 ) the first plurality of signatures for the plurality of modules with the second plurality of signatures in the database ( 205 ) using the plurality of identifiers for the plurality of modules.
11. An article according to claim 1 , wherein said storage medium has stored thereon further instructions that, when executed by the machine, result in transmitting the trust score to the machine.