Merging and optimizing heterogeneous rulesets for device classification
AssigneeCisco Technology, Inc.
InventorsGrégory Mermoud, Jean-Philippe Vasseur, Pierre-André Savalle
Life of this patent
Estimating the term…
Abstract
In one embodiment, a device classification service receives a plurality of device classification rulesets, each ruleset associating a set of device characteristics with a device type label. The device classification service forms a unified ruleset by resolving a conflict between conflicting device characteristics from two or more of the device classification rulesets. The device classification service trains a machine learning-based device classifier using the unified ruleset. The device classification service classifies, using telemetry data for a device in a network as input to the trained device classifier, the device with the device type label.
Claims20
A method comprising:
- receiving, at a device classification service, a plurality of device classification rulesets, wherein each ruleset of the device classification rulesets comprises rules configured to output a device type label for a particular device based on device data indicative of attributes of the particular device;
- forming, by the device classification service, a unified ruleset by resolving a conflict between conflicting device characteristics from two or more of the device classification rulesets;
- training, by the device classification service, a machine learning-based device classifier using the unified ruleset;
- and
- classifying, by the device classification service and using telemetry data for a device in a network as input to the trained device classifier, the device with the device type label.
An apparatus, comprising:
- one or more network interfaces to communicate with a network;
- a processor coupled to the network interfaces and configured to execute one or more processes;
- and
- a memory configured to store a process executable by the processor, the process when executed configured to:
- receive a plurality of device classification rulesets, wherein each ruleset of the device classification rulesets comprises rules configured to output a device type label for a particular device based on device data indicative of attributes of the particular device;
- form a unified ruleset by resolving a conflict between conflicting device characteristics from two or more of the device classification rulesets;
- train a machine learning-based device classifier using the unified ruleset;
- and
- classify, using telemetry data for a device in a network as input to the trained device classifier, the device with the device type label.
A tangible, non-transitory, computer-readable medium storing program instructions that cause a device classification service to execute a process comprising:
- receiving, at the device classification service, a plurality of device classification rulesets, wherein each ruleset of the device classification rulesets comprises rules configured to output a device type label for a particular device based on device data indicative of attributes of the particular device;
- forming, by the device classification service, a unified ruleset by resolving a conflict between conflicting device characteristics from two or more of the device classification rulesets;
- training, by the device classification service, a machine learning-based device classifier using the unified ruleset;
- and
- classifying, by the device classification service and using telemetry data for a device in a network as input to the trained device classifier, the device with the device type label.
Dependencies are inferred from the claim text.