Patent ID: 8181253
Filing Date: 2012-05-15
Classification: G06F,H04L

Abstract:
1. A computer-implemented method for reducing security risk in a computer network, the method comprising: collecting, by a processing device, from a plurality of computers in the network information about computer usage, security incidents, and communications between computer users; retrieving, for each computer user, a user profile comprising at least a personal and professional information of the user, and a plurality of risk factors associated with the user; calculating, for each computer user, values for the plurality of risk factors in the user profile based on the computer usage information collected from the computer of each user; calculating, for each computer user, a user security rating based on the values of one or more risk factors of the plurality of risk factors in the user profile; adjusting a security rating of at least one computer user based on (i) the personal or professional information of said at least one computer user, and (ii) the security rating of at least one other computer user with whom said at least one computer user communicated; selecting security settings for the plurality of computers based on the security ratings of the users of said computers; and applying the selected security setting to the plurality of computers to reduce security risk in the computer network.