Proactive inspection technique for improved classification
AssigneeForescout Technologies, Inc.
InventorNaor Kalbo
Life of this patent
Estimating the term…
Abstract
Systems, methods, and related technologies for a proactive inspection system for improved classification of devices are described. A device is discovered on a network that has a first open port number. A file is requested from the device with the first open port number and a filename. The filename has a highest likelihood of being used as a name for the file with the port number. In response to obtaining the file from the device, the device is classified with information held in the file.
Claims20
A method comprising:
- discovering a device on a network that has a first open port number;
- obtaining a filename that has a highest likelihood of being used as a name for a file with the first open port number;
- requesting the file from the device with the first open port number and the filename;
- and
- in response to obtaining the file from the device, classifying the device with information held in the file.
A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to:
- discover a device on a network that has a first open port number;
- obtain a filename that has a highest likelihood of being used as a name for a file with the first open port number;
- request the file from the device with the first open port number and the filename;
- and
- in response to obtaining the file from the device, classify the device with information held in the file.
A system, comprising:
- a memory;
- and
- a processing device, operatively coupled to the memory, to:
- discover a device on a network that has a first open port number;
- obtain a filename that has a highest likelihood of being used as a name for a file with the first open port number;
- request the file from the device with the first open port number and the filename;
- and
- in response to obtaining the file from the device, classify the device with information held in the file.
Dependencies are inferred from the claim text.