Claims:WE CLAIM:
1. A method for providing computer network security, the method comprising:
gathering, via a processor, threat information from one or more sources;
deriving, via the processor, security intelligence based on the threat information;
determining, via the processor, a security measure based on the security intelligence; and
dynamically applying, via the processor, the security measure to a computer network using a set of virtual appliances and a set of virtual switches.

2. The method of claim 1, wherein deriving the security intelligence comprises determining one or more potential security threats by applying at least one of a filter, an analytics, and a reputation based heuristic on the threat information.

3. The method of claim 2, wherein determining the security measure comprises determining a corresponding security measure for each of the one or more potential security threats.

4. The method of claim 1, further comprising triggering an alert based on the security intelligence.

5. The method of claim 1, wherein dynamically applying comprises mapping the security measure to the set of virtual appliances and the set of virtual switches.

6. The method of claim 5, wherein dynamically applying comprises dynamically deploying the set of virtual appliances based on the mapping.

7. The method of claim 5, wherein dynamically applying comprises dynamically programming the set of virtual switches using a plurality of packet filters to steer network traffic based on the mapping.
8. The method of claim 1, wherein each of the set of virtual appliances is a virtual machine for performing a pre-defined task and is implemented using network function virtualization.

9. The method of claim 1, wherein each of the set of virtual switches is programmed using software defined networking.

10. The method of claim 1, wherein each of the set of virtual appliances emulates at least one of a firewall, an intrusion prevention system (IPS), a deep packet inspection (DPI), and a network traffic shaper.

11. A system for providing computer network security, the system comprising:
at least one processor; and
a computer-readable medium storing instructions that, when executed by the at least one processor, cause the at least one processor to perform operations comprising:
gathering threat information from one or more sources;
deriving security intelligence based on the threat information;
determining a security measure based on the security intelligence; and
dynamically applying the security measure to a computer network using a set of virtual appliances and a set of virtual switches.

12. The system of claim 11, wherein deriving the security intelligence comprises determining one or more potential security threats by applying at least one of a filter, an analytics, and a reputation based heuristic on the threat information.

13. The system of claim 12, wherein determining the security measure comprises determining a corresponding security measure for each of the one or more potential security threats.

14. The system of claim 11, wherein dynamically applying comprises mapping the security measure to the set of virtual appliances and the set of virtual switches.

15. The system of claim 14, wherein dynamically applying comprises:
dynamically deploying the set of virtual appliances based on the mapping; and
dynamically programming the set of virtual switches using a plurality of packet filters to steer network traffic based on the mapping.

16. The system of claim 11, wherein each of the set of virtual appliances is a virtual machine for performing a pre-defined task, is implemented using network function virtualization, and emulates at least one of a firewall, an intrusion prevention system (IPS), a deep packet inspection (DPI), and a network traffic shaper.

17. The system of claim 11, wherein each of the set of virtual switches is programmed using software defined networking.

18. A non-transitory computer-readable medium storing computer-executable instructions for:
gathering threat information from one or more sources;
deriving security intelligence based on the threat information;
determining a security measure based on the security intelligence; and
dynamically applying the security measure to a computer network using a set of virtual appliances and a set of virtual switches.

Dated this 5th day of October, 2015

Swetha SN
Of K&S Partners
Agent for the applicant
, Description:TECHNICAL FIELD
This disclosure relates generally to computer network, and more particularly to a system and method for providing computer network security.