Back to results
US 10,652,116 B2Granted
Device classification
AssigneeForescout Technologies, Inc.
InventorsYang Zhang, Siying Yang
Life of this patent
Estimating the term…
Abstract
Systems, methods, and related technologies for device classification are described. In certain aspects, traffic data associated with a device and data from an external system can be accessed. The data can be processed to determine a device classification for the device. An action can be initiated based on the classification.
Claims15
A method comprising:
- detecting a device coupled to a network in response to the device being coupled to the network;
- accessing first data associated with the device from an agent installed on the device;
- accessing second data associated with the device from an external system, wherein the second data associated with the device comprises traffic data associated with the device;
- analyzing the traffic data of the device;
- determining a classification for the device based on the first data associated with device and the traffic data;
- and
- storing the classification for the device.
4 more elements
A system comprising:
- a memory;
- and
- a processing device, operatively coupled to the memory, to:
- access data associated with a device, wherein the data associated with the device comprises traffic analysis data associated with the device and data received from an external system;
- periodically determine a device type classification for the device based on the data associated with device;
- and
- store the device type classification for the device;
- and
- apply a security policy to classified device based on the device meeting particular criteria of the security policy.
6 more elements
A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to:
- detect a first device being coupled to a network;
- access data associated with the first device, wherein the data associated with the first device comprises data from a second device coupled to the first device, wherein the second device is operable to communicate with the processing device using a first protocol and the second device is operable to communicate with the first device using a second protocol;
- process, by the processing device, the data associated with first device to determine a classification for the first device;
- store the classification of the first device;
- and
- change network access of the first device based on the classification of the first device.
3 more elements
Dependencies are inferred from the claim text.