Patent ID: 7765594
Filing Date: 2010-07-27
Classification: H04L

Abstract:
1. A method of enhancing security capability of a network, comprising: detecting a security threat associated with an affected device on the network; selecting a plurality of candidate devices, other than the affected device, based on network topology; sending to the plurality of candidate devices other than the affected device an initial request to collect and report data associated with the affected device, the initial request including authentication information used by the plurality of candidate devices to verify the identity of a sender, wherein the plurality of candidate devices do not ordinarily collect and report data associated with the affected device during normal state of operation; receiving from each of the plurality of candidate devices an initial report of data collected by the candidate device in response to the initial request; using the respective initial reports to select, from among the plurality of candidate devices, based on one or more selection criteria, a deputy device to be deputized to perform a deputized function that is not ordinarily performed by the deputy device with respect to the affected device; sending to the deputy device a request to perform, with respect to the affected device, a deputized function that is not ordinarily performed by the deputy device; receiving response data from the deputy device; processing the response data; and freeing the deputy device from performing the deputized function; wherein the deputy device performs the deputized function at least in part by configuring a network communication interface on the deputy device to receive a network communication not designated for said network communication interface, the deputized function including at least one of: generating log information and disabling a service.