Patent ID: 11902330
Assignee: JUNIPER NETWORKS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 7:
8. A device, comprising:
one or more memories; and
one or more processors to:
receive data identifying malicious behavior by a compromised endpoint device associated with a network;
receive user identity data identifying a user of the compromised endpoint device associated with the network;
receive endpoint device data identifying the compromised endpoint device and other endpoint devices associated with the network;
receive network device data identifying network devices associated with the network;
utilize the data identifying malicious behavior, the user identity data, and the endpoint device data to generate, based on an identity of the user, a security policy to isolate the malicious behaviors,
wherein the one or more processors, to utilize the data identifying malicious behavior, the user identity data, and the endpoint device data to generate the security policy, are to generate a first security rule for the security policy that causes the user identity data associated with the compromised endpoint device to be added to a traffic feed of the compromised endpoint device;

cause the security policy to be provided to the network devices and the other endpoint devices based on the network device data and the endpoint device data; and
cause one or more of the network devices to perform an action based on the security policy.