DETERMINING A REPUTATION OF A NETWORK ENTITY

摘要

An example method can include monitoring a network to identify flows between nodes in the network. Once flows have been identified, the flows can be tagged and labelled according to the type of traffic they represent. If a flow represents malicious or otherwise undesirable traffic, it can be tagged accordingly. A request can then be made for a reputation score of an entity which can identify one or more nodes of the network.

主权项

1. A computer-implemented method, comprising:
monitoring, by a network traffic monitoring system, network traffic data for a plurality of nodes of a network; analyzing, by the network traffic monitoring system, the network traffic data to classify a type of traffic for each flow of a plurality of flows; receiving, to the network traffic monitoring system from a requestor, a request for a reputation score associated with one or more nodes of the network; identifying, by the network traffic monitoring system, the type of traffic for one or more flows associated with the one or more nodes; determining, by the network monitoring system, the reputation score associated with the one or more nodes based on the type of traffic for the one or more flows associated with the one or more nodes; and sending, by the network traffic monitoring system, the reputation score to the requestor.