Method and system for generating an advisory message for an endpoint device

• US 9,203,858 B2
• Filed: 08/22/2006
• Issued: 12/01/2015
• Est. Priority Date: 11/11/2005
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Inventors: Shankar, Rohit, Deshpande, Sumit B., Gudipudi, Srinivas, Zhu, Yidong, Short, Theodore, Pore, Ravi R., Purushothaman, Abhilash V.
• Primary Examiner(s): Daniel, Jr., Willie J
• Application Number:
  US11/466,282
• Publication Number:
  US 20070113080A1
• Time in Patent Office: 3,388 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/67 Risk-dependent, e.g. selecting a security level depending on risk profiles

Abstract

According to one embodiment of the invention, a method for generating an advisory message for an endpoint device includes determining a threat level for the endpoint device by identifying a connection type between the endpoint device and the wireless network. The method also includes determining a second threat level for the endpoint device by identifying a security policy of the endpoint device. The method further includes generating an advisory message for the endpoint device based on the threat levels. The advisory message indicates vulnerability of the endpoint device.

Claims

1. A method for generating an advisory message for an endpoint device in a wireless network, comprising:

determining, by a processor, a first threat level for an endpoint device in the wireless network by identifying a connection type between the endpoint device and the wireless network;

determining, by the processor, a second threat level for the endpoint device by identifying a security policy of the endpoint device; and

based on the first threat level and the second threat level, generating an advisory message for the endpoint device that indicates vulnerability of the endpoint device.

2. The method of claim 1, wherein the security policy comprises a plurality of states of the endpoint device.

3. The method of claim 2, wherein the plurality of states comprises a state indicative of whether the endpoint device allows dual homing.

4. The method of claim 2, wherein the plurality of states comprises a state indicative of whether the endpoint device allows internet sharing.

5. The method of claim 2, wherein the plurality of states comprises a state indicative of whether the endpoint device allows network file sharing.

6. The method of claim 2, wherein the plurality of states comprises a state indicative of whether the endpoint device allows ad-hoc connections.

7. A system for generating an advisory message, comprising:

a wireless network, the wireless network comprising one or more access points; and

an endpoint device operable to connect to the wireless network, the endpoint device comprising;

a processor; and

a storage device, readable by the endpoint device, embodying a program of instructions executable by the processor to perform steps for generating an advisory message, the steps comprising;

determining a first threat level for the endpoint device in the wireless network by identifying a connection type between the endpoint device and the wireless network;

determining a second threat level for the endpoint device by identifying a security policy of the endpoint device; and

based on the first threat level and the second threat level, generating an advisory message for the endpoint device that indicates vulnerability of the endpoint device.

8. The system of claim 7, wherein the security policy comprises a plurality of states of the endpoint device.

9. The system of claim 8, wherein the plurality of states comprises a state indicative of whether the endpoint device allows dual homing.

10. The system of claim 8, wherein the plurality of states comprises a state indicative of whether the endpoint device allows internet sharing.

11. The system of claim 8, wherein the plurality of states comprises a state indicative of whether the endpoint device allows network file sharing.

12. The system of claim 8, wherein the plurality of states comprises a state indicative of whether the endpoint device allows ad-hoc connections.

13. Logic encoded in non-transitory computer-readable media, the logic being operable to:

determine a first threat level for an endpoint device in a wireless network by identifying a connection type between the endpoint device and the wireless network;

determine a second threat level for the endpoint device by identifying a security policy of the endpoint device; and

based on the first threat level and the second threat level, generate an advisory message for the endpoint device that indicates vulnerability of the endpoint device.

14. The logic of claim 13, wherein the security policy comprises a plurality of states of the endpoint device.

15. The logic of claim 14, wherein the plurality of states comprises a state indicative of whether the endpoint device allows dual homing.

16. The logic of claim 14, wherein the plurality of states comprises a state indicative of whether the endpoint device allows internet sharing.

17. The logic of claim 14, wherein the plurality of states comprises a state indicative of whether the endpoint device allows network file sharing.

18. The logic of claim 14, wherein the plurality of states comprises a state indicative of whether the endpoint device allows ad-hoc connections.