| CPC H04L 63/102 (2013.01) | 20 Claims |

|
1. A method performed by a computing system to manage domain-based security profiles in a content delivery network (CDN), the method comprising:
receiving security events detected by one or more security solutions implemented by one or more CDN instances of the CDN;
determining, for each of a plurality of domains, a risk score for the domain based on the security events;
determining possible next level domains for a CDN instance of the CDN, wherein the CDN instance maintains a domain map that includes mappings between domains and security profiles for those domains and an auto-adjusting list that includes the domains included in the domain map, an order of the auto-adjusting list indicating an eviction priority for the domains included in the auto-adjusting list;
determining an updated order of the auto-adjusting list based on risk scores for the domains included in the auto-adjusting list and the possible next level domains for the CDN instance; and
sending an update to the CDN instance to cause the CDN instance to update the order of the auto-adjusting list to reflect the updated order.
|