Method and system of providing an integrated reputation service

• US 20070214506A1
• Filed: 03/07/2006
• Published: 09/13/2007
• Est. Priority Date: 03/07/2006
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Thomas, Michael, Rao, Anup
• Granted Patent: US 7,802,304 B2
• Time in Patent Office: Days
• US Class Current: 726/25
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/1491 using deception as countermeasure, e.g. honeypots, honeynets, decoys or entrapment

Abstract

Reputation information, associated with a source that utilizes different communication formats, is accessed. First reputation information for one of the communication formats used by the source is correlated with second reputation information for another of the communication formats used by the source. A reputation measure is determined. The reputation measure provides a measure of the source'"'"'s reputation, using the first and second reputation information.

Claims

1. A system for providing an integrated reputation service, said system comprising:

an accessor for accessing a set of reputation information for a plurality of communication formats associated with a source;

a receiving component coupled to said accessor, wherein said receiving component is configured to receive said reputation information associated with said source;

a correlator coupled to said accessor, wherein said correlator is operative to correlate first reputation information for one communication format of said communication formats associated with said source and second reputation information for another communication format of said communication formats associated with said source; and

a reputation measurer coupled to said accessor, wherein said reputation measurer is operative to determine a reputation measure using said first and second reputation information.

2. The system as recited in claim 1 wherein said receiving component is also configured to receive a request for third reputation information for at least one of said communication formats associated with said source.

3. The system as recited in claim 1 further comprising a transmitting component coupled to said accessor, wherein said transmitting component is operative to transmit third reputation information to a client.

4. The system as recited in claim 1 further comprising a honeypot account component coupled to said accessor, wherein said honeypot account component is operative to deploy a honeypot account associated with a Voice over Internet Protocol system.

5. The system as recited in claim 1 wherein said communication formats are selected from the group consisting of:

voice over Internet Protocol, instant message, and electronic mail.

6. The system as recited in claim 1 wherein said accessor is operative to access said reputation information from a resource selected from the group consisting of:

a service provider and a honeypot account.

7. The system as recited in claim 1 wherein an identifier for said source of at least one of said communication formats is selected from the group consisting of:

IP address of said source, authentication of said source'"'"'s address, authentication of said source'"'"'s domain, and said source'"'"'s Uniform Resource Identifier.

8. The system as recited in claim 1 wherein said reputation information is categorized by said communication formats.

9. A method for providing an integrated reputation service, said method comprising:

accessing reputation information associated with a source, wherein said source utilizes a plurality of different communication formats;

correlating first reputation information for said source for one of said communication formats and second reputation information for said source for another of said communication formats; and

determining a reputation measure using said first and second reputation information, wherein said reputation measure provides a measure of said source'"'"'s reputation.

10. The method as recited in claim 9 further comprising receiving a request for third reputation information for said source for at least one of said communication formats.

11. The method as recited in claim 9 further comprising transmitting third reputation information for said source for at least one of said communication formats to a client.

12. The method as recited in claim 9 further comprising deploying a honeypot account associated with a Voice over Internet Protocol system.

13. The method as recited in claim 9 wherein said reputation information is categorized by said communication formats.

14. A system for providing integrated reputation service, said system comprising:

means for accessing reputation information associated with a source, wherein said source utilizes a plurality of different communication formats;

means for correlating first reputation information for said source for one of said communication formats and second reputation information for said source for another of said communication formats; and

means for determining a reputation measure using said first and second reputation information, wherein said reputation measure provides a measure of said source'"'"'s reputation.

15. The system as recited in claim 14 further comprising means for receiving a request for third reputation information for said source for at least one of said communication formats.

16. The system as recited in claim 14 further comprising means for transmitting third reputation information for said source for at least one of said communication formats to a client.

17. The system as recited in claim 14 further comprising means for deploying a honeypot account associated with a Voice over Internet Protocol system.

18. The system as recited in claim 14 wherein an identifier of at least one of said communication formats for said source are selected from the group consisting of:

IP address of said source, authentication of said source'"'"'s address, authentication of said source'"'"'s domain, and said source'"'"'s Uniform Resource Identifier.

19. The system as recited in claim 14 wherein said reputation information is categorized by said communication formats.

20. A computer-usable medium having computer-readable program code embodied therein for implementing a method of providing integrated reputation service, said method comprising:

accessing reputation information associated with a source, wherein said source utilizes a plurality of different communication formats;

correlating first reputation information for said source for one of said communication formats and second reputation information for said source for another of said communication formats; and

determining a reputation measure using said first and second reputation information, wherein said reputation measure provides a measure of said source'"'"'s reputation.