Patent ID: 9027125
Filing Date: 2015-05-05
Classification: G06F,H04L

Abstract:
1. A system for providing network flow level remediation at a network element based upon a runtime risk correlation for an infected computing device or an application that is not operating with integrity and executing on a computing device, the system comprising: a network trust agent configured to subscribe to and receive system warnings regarding reputation of the computing device; an endpoint trust agent, on the computing device, configured to monitor local device activities at runtime and receive endpoint threat intelligence; an event and behavior correlation engine configured to correlate risk based on inputs received from a plurality of sensory inputs configured to monitor network activity of the computing device and applications executing thereon, system configuration for the computing device and applications executing thereon, resource utilization by the computing device and applications running thereon, and integrity of the computing device and applications running thereon; a trust orchestration server configured to: a remediation engine configured to receive real time directives for control of the infected computing device or the application that is not operating with integrity running on the computing device and provide said system warnings regarding reputation of the computing device to orchestration or policy enforcement point services.