System, method, and computer program product for selecting a wireless network based on security information

• US 8,966,638 B2
• Filed: 08/23/2013
• Issued: 02/24/2015
• Est. Priority Date: 01/07/2008
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Dey, Sankha S.
• Primary Examiner(s): Jeudy, Josnel
• Application Number:
  US13/974,188
• Publication Number:
  US 20130346602A1
• Time in Patent Office: 550 Days
• Field of Search: 726 27- 30, 726 22- 25, 713187-188, 713193-194
• US Class Current: 726/25
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: H04L 43/04 Processing captured monitoring data, e.g. for logfile generation
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware

Abstract

A system, method, and computer program product are provided for selecting a wireless network based on security information. In use, a plurality of wireless networks is identified. Further, security information associated with each of the wireless networks is collected, such that one of the wireless networks is selected based on the security information.

Claims

1. A method implemented by an apparatus, the method comprising:

receiving a request, from a first client device, identifying one of a plurality of wireless networks;

collecting security information associated with the one of the wireless networks from a second client device, wherein the security information includes an indication of an operating system of the second client device;

receiving an indication of an operating system utilized by the first client device to identify a vulnerability of the first client device;

determining, with the apparatus, a security state of the one of the wireless networks based, at least in part, on the vulnerability and the security information; and

sending the security state for the one of the wireless networks to the first client device.

2. The method of claim 1, wherein the second client device identifies the one of the plurality of wireless networks via a broadcasted signal.

3. The method of claim 1, wherein the apparatus is a central server.

4. The method of claim 1, wherein the security information includes an indication of whether malware, an unidentified application, or a malformed packet has been detected.

5. The method of claim 4, wherein the malware, the unidentified application, or the malformed packet is detected using a security system that comprises an anti-virus scanner.

7. The one or more computer-readable storage media of claim 2, wherein the method is performed by a central server.

9. The method of claim 1, wherein the one of the wireless networks is selected based, at least in part, on a least amount of malware, unidentified applications, or malformed packets detected on the one of the wireless networks.

12. The method of claim 1, further comprising:

connecting the first client device to the one of the wireless networks, based, at least in part, on the security state.

6. One or more non-transitory, computer-readable storage media storing instructions that, when executed, cause a method to be performed, the method comprising:

receiving a request, from a first client device, identifying one of a plurality of wireless networks;

collecting security information associated with the one of the wireless networks from a second client device, wherein the security information includes an indication of an operating system of the second client device;

receiving an indication of an operating system utilized by the first client device to identify a vulnerability of the first client device;

determining a security state of the one of the wireless networks based, at least in part, on the vulnerability and the security information; and

sending the security state for the one of the wireless networks to the first client device.

8. The one or more computer-readable storage media of claim 6, wherein the security information includes an indication of whether malware, an unidentified application, or a malformed packet has been detected.

10. The one or more computer-readable storage media of claim 6, the method further comprising:

determining whether malware, an unidentified application, or a malformed packet occurred on the one of the plurality of wireless networks, based, at least in part, on the security information.

11. The one or more computer-readable storage media of claim 6, wherein the security information includes an indication of a location of the second client device.

13. The one or more computer-readable storage media of claim 6, the method further comprising:

generating a rating for the one of the wireless networks, and providing the rating to the first client device.

18. The one or more computer-readable storage media of claim 6, the method further comprising:

determining whether a number of attack logs is greater than or equal to a predetermined threshold.

19. The one or more computer-readable storage media of claim 6, the method further comprising:

determining whether a number of non-attack logs is greater than or equal to a predetermined threshold.

20. The one or more computer-readable storage media of claim 6, wherein the security information includes an indication of an application installed on the second device.

14. A server, comprising:

a processor; and

a memory coupled to the processor, wherein the server is configured to

receive a request, from a first client device, to identify one of a plurality of wireless networks;

collect security information associated with the one of the wireless networks from a second client device, wherein the security information includes an indication of an operating system of the second client device;

receive an indication of an operating system utilized by the first client device to identify a vulnerability of the first client device;

determine a security state of the one of the wireless networks based, at least in part, on the vulnerability and the security information; and

send a security state for the one of the wireless networks to the first client device.

15. The server of claim 14, wherein the security information includes an indication of whether malware, an unidentified application, or a malformed packet has been detected.

16. The server of claim 14, wherein the server is configured to determine whether malware, an unidentified application, or a malformed packet occurred on the one of the plurality of wireless networks, based, at least in part, on the security information.

17. The server of claim 14, wherein the security information includes an indication of a location of the second client device.

21. The server of claim 14, wherein the server is configured to generate a rating for the one of the wireless networks, and to provide the rating to the first client device.

22. The server of claim 14, wherein the server is configured to determine whether a number of attack logs is greater than or equal to a predetermined threshold.

23. The server of claim 14, wherein the server is configured to determine whether a number of non-attack logs is greater than or equal to a predetermined threshold.

24. The server of claim 14, wherein the security information includes an indication of an application installed on the second device.