Social trust based security model

摘要

Making a trust decision is disclosed. One or more members of a social trust network are polled for information associated with a trust decision about a computing environment. The information includes information collected automatically with respect to activities of one or more of the one or more members of the social trust network. At least one action is taken based at least in part on the information.

主权项

1. A method for evaluating the trustworthiness of computing resources, at least a portion of the method being performed by a computing system comprising at least one processor, the method comprising:
detecting an attempt by a user to access a computing resource associated with a computing environment; receiving, from a social trust network server, information relevant to evaluating the trustworthiness of the computing resource, wherein:
the information includes a unified score that identifies the trustworthiness of the computing resource; andthe unified score is derived at least in part from an integrity rating associated with at least one member of a social trust network that has previously accessed the computing resource, the integrity rating identifying the overall computing health of the member of the social trust network; determining, based at least in part on the unified score associated with the computing resource, that the computing resource represents a potential security risk; and blocking the user's attempt to access the computing resource.