Method and network for containing the spread of damage from a network element subject to compromise

摘要

A method and computer network for containing the spread of damage from a compromised element. A sensor is arranged to detect suspicious behavior of other identifiable network elements. When such suspicious behavior is detected, the identity of such network element is addressed and input to a directory. Such directory is addressable by various network elements, including network servers and routers or gateways that define choke points of the network, over either a network infrastructure (wide area network) or network interconnections (local area network). Such network architecture permits the various choke point network elements (controllers) to refer to the status of network elements requesting services, such as network configuration, that could result in the spread of damage, when deciding to provide or deny such services.