IoT device discovery and identification
AssigneePalo Alto Networks, Inc.
InventorsJun Du, Yilin Zhao
Life of this patent
Estimating the term…
Abstract
Techniques for performing Internet of Things (IoT) device identification are disclosed. Information associated with a network communication of an IoT device is received. A determination of whether the IoT device has been classified has been made. In response to determining that the IoT device has not been classified, a two-part classification process is performed, where a first portion includes an inline classification, and a second portion includes a subsequent verification of the inline classification. A result of the classification process is provided to a security appliance configured to apply a policy to the IoT device.
Claims21
A system, comprising:
- a processor configured to:
- receive information associated with a network communication of an IoT device;
- determine whether the IoT device has previously been classified;
- in response to determining that the IoT device has not previously been classified, perform a two-part classification process to determine an identification of the IoT device, wherein a first portion of the classification process comprises an inline classification of the IoT device, and wherein a second portion of the classification process comprises a subsequent verification of the inline classification of the IoT device;
- and
- provide a result of the classification process to a security appliance configured to apply a policy to the IoT device based at least in part on the result;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
A method, comprising:
- receiving information associated with a network communication of an IoT device;
- determining whether the IoT device has previously been classified;
- in response to determining that the IoT device has not previously been classified, performing a two-part classification process to determine an identification of the IoT device, wherein a first portion of the classification process comprises an inline classification of the IoT device, and wherein a second portion of the classification process comprises a subsequent verification of the inline classification of the IoT device;
- and
- providing a result of the classification process to a security appliance configured to apply a policy to the IoT device based at least in part on the result.
A computer program product embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
- receiving information associated with a network communication of an IoT device;
- determining whether the IoT device has previously been classified;
- in response to determining that the IoT device has not previously been classified, performing a two-part classification process to determine an identification of the IoT device, wherein a first portion of the classification process comprises an inline classification of the IoT device, and wherein a second portion of the classification process comprises a subsequent verification of the inline classification of the IoT device;
- and
- providing a result of the classification process to a security appliance configured to apply a policy to the IoT device based at least in part on the result.
Dependencies are inferred from the claim text.