Back to results
US 11,115,823 B1Granted
Internet-of-things device classifier
AssigneeRapid7, Inc.
InventorsDeral Heiland, Dustin Myers, Wah-Kwan Lin
Life of this patent
Estimating the term…
Abstract
Methods and systems for classifying a device on a network. The systems and methods may receive network activity data associated with an unknown device. A classifier executing one or more machine learning models may then classify the device as an internet of things (IoT) device or a non-IoT device.
Claims20
A method for classifying a device on a network, the method comprising:
- receiving network activity data associated with a device on a network;
- extracting at least one feature from the network activity data associated with the device on the network;
- providing the at least one extracted feature as input to a classifier executing a machine learning model configured to classify the device as an internet-of-things (IoT) device or a non-IoT device based on the at least one extracted feature;
- receiving a label indicating that the device is an IoT device or a non-IoT device from the classifier executing the machine learning model;
- and
- executing at least one security measure upon receiving the label that the device is an IoT device, wherein the at least one security measure includes banning the IoT device from the network, isolating the IoT device, or setting a limit on data able to be sent from the IoT device.
3 more elements
A system for classifying a device on a network, the system comprising:
- an interface for receiving network activity data associated with a device on a network;
- and
- a processor executing instructions stored on memory to provide:
- a feature extraction module configured to extract at least one feature related to the network activity data associated with the device on the network, and
- a classifier executing a machine learning model configured to:
- receive the at least one extracted feature as input, and
- provide a label indicating that the device is an internet-of-things (IoT) device or a non-IoT device, wherein the processor is further configured to execute at least one security measure upon receiving the label that the device is an IoT device, wherein the at least one security measure includes banning the IoT device from the network, isolating the IoT device, or setting a limit on data able to be sent from the IoT device.
4 more elements
A method for training an internet of things (IoT) device classifier, the method comprising:
- deploying at least one labeled IoT device in a network environment;
- deploying at least one labeled non-IoT device in the network environment;
- receiving network activity data associated with each of the IoT device and the non-IoT device;
- extracting at least one feature related to the network activity data associated with each of the IoT device and the non-IoT device;
- providing the at least one extracted feature associated with each of the IoT device and the non-IoT device and the devices' label to a machine learning model;
- and
- training the machine learning model to, when executed by a classifier, classify an unlabeled device as an IoT device or a non-IoT device based on the at least one extracted feature associated with each of the IoT device and the non-IoT device and the devices' labels.
4 more elements
Dependencies are inferred from the claim text.