System and method for classifying network devices

A system for classifying a device accessing a computer network, the system comprising a processor and memory and the processor executes computer-readable instructions from the memory to enable the functionality of the following modules and engines:

• a monitoring module configured to determine fields of interest that are indicators for classifying the device;
• a packet processing engine configured to review a network traffic flow associated with the device, wherein the network traffic is a UDP traffic flow;
• a device classification engine configured to:
• extract and decrypt field values from a packet associated with the network traffic flow, wherein the extracted field values comprise an application standardized field from a header of the traffic flow;
• compare the extracted field values with values of the fields of interest to determine at least one device attribute;
• and
• classify the device associated with the network traffic flow based on the comparison.