Contextual risk monitoring

Abstract

Systems, methods, and related technologies for device monitoring and device risk monitoring are described. In certain aspects, an indicator associated with a security risk is set based on communication between a first device having an associated elevated security risk and a second device. The indicator can be stored and may be used as a basis for performing a security action.

What is claimed is: 
     
         1 . A method comprising:
 accessing a first indicator associated with a first device, wherein the first indicator indicates a security risk level;   accessing communication information associated with the first device;   determining, by a processing device, a second device in communication with the first device based on the communication information;   setting a second indicator associated with the second device based on information associated with the first device; and   storing the second indicator associated with the second device.   
     
     
         2 . The method of  claim 1 , wherein the second indicator is set based on a bandwidth usage associated with communication between the first device and the second device. 
     
     
         3 . The method of  claim 1 , wherein the communication of the second device with the first device comprises a communication sent from the first device to the second device. 
     
     
         4 . The method of  claim 1 , wherein the communication of the second device with the first device comprises a communication sent from the second device to the first device. 
     
     
         5 . The method of  claim 1 , wherein the communication of the second device with the first device comprises an attempted communication from the first device to the second device. 
     
     
         6 . The method of  claim 1 , wherein the second indicator associated with the second device indicates a medium risk level. 
     
     
         7 . The method of  claim 1  further comprising:
 displaying the second indicator associated with the second device. 
 
     
     
         8 . The method of  claim 1 , further comprising:
 performing an action on the second device based on the second indicator.   
     
     
         9 . The method of  claim 1 , wherein the communication of the first and second device is associated with a protocol. 
     
     
         10 . A system comprising:
 a memory; and   a processing device, operatively coupled to the memory, to:
 access a first indicator associated with a first device, wherein the first indicator indicates an elevated security risk; 
 access communication information associated with the first device; 
 determine, by a processing device, a second device in communication with the first device based on the communication information, wherein the communication information comprises information associated with a communication from the first device to the second device; 
 set a second indicator associated with the second device based on information associated with the first device; and 
 store the second indicator associated with the second device. 
   
     
     
         11 . The system of  claim 10 , wherein the second indicator is set based on a bandwidth usage associated with communication between the first device and the second device. 
     
     
         12 . The system of  claim 10 , wherein the processing device further to perform a security action based on the second indicator. 
     
     
         13 . The system of  claim 10 , wherein the communication from the first device to a second device comprises an attempted communication from the first device to the second device. 
     
     
         14 . The system of  claim 10 , wherein the second indicator associated with the second device indicates a medium risk level. 
     
     
         15 . The system of  claim 10 , wherein the processing device further to display the first indicator associated with a first color and the second indicator associated with a second color. 
     
     
         16 . The system of  claim 10 , wherein the second indicator is determined based on communication associated with a protocol. 
     
     
         17 . A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to:
 access a first indicator associated with a first device, wherein the first indicator indicates an elevated security risk;   access communication information associated with the first device;   determine, by the processing device, a second device in communication with the first device based on the communication information, wherein the communication information comprises information associated with a communication from the second device to the first device;   set a second indicator associated with the second device based on information associated with the first device; and   store the second indicator associated with the second device.   
     
     
         18 . The non-transitory computer readable medium of  claim 17 , wherein the processing device further to perform a security action based on the second indicator. 
     
     
         19 . The non-transitory computer readable medium of  claim 17 , wherein the communication from the second device to the first device comprises an attempted communication from the second device to the first device. 
     
     
         20 . The non-transitory computer readable medium of  claim 17 , wherein the second indicator is determined based on communication associated with a selected protocol.