Communication-based reputation system

摘要

A communication between an entity and a host is identified. Reputation information associated with a set of other entities that communicate with the host is identified. A reputation score associated with the host is generated based on the reputation information associated with a set of other entities. A reputation score associated with the entity is generated based on the reputation score associated with the host.

主权项

1. A computer-implemented method of providing security against a first entity that communicates with a host, the method comprising:
identifying reputation information indicating reputations of second entities that communicate with the host; generating a host reputation score indicating a reputation of the host based on the reputation information indicating reputations of the second entities that communicate with the host; generating, by a computer, an entity reputation score indicating a likelihood that the first entity that communicates with the host is malware based on the host reputation score indicating the reputation of the host, the first entity comprising a file or software application that communicates with the host when executing on a first client; and transmitting the entity reputation score to the first client for malware remediation.