Low-latency identification of network-device properties

A system comprising:

• a processor;
• and
• a memory in communication with the processor, the memory containing program instructions that, when executed by the processor, are configured to cause the processor to perform a method, the method comprising:
• analyzing, by a machine-learning model, a first set of network communications with a first set of inputs;
• inferring, by the machine-learning model and based on the analyzing, that each device is a set of devices exhibits a device property, wherein each device is a party to a network communication in the first set of network communications;
• extracting, from the machine-learning model, a first set of significant inputs that had a significant impact on the determining;
• and
• creating, using the first set of inputs, a rule for identifying the device property, wherein the rule establishes a condition that, when present in a set of real-time network communications, implies that a party to that set of real-time network communications exhibits the device property.

A computer program product, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to:

• analyze, by a machine-learning model, a first set of network communications with a first set of inputs;
• infer, by the machine-learning model and based on the analyzing, that each device is a set of devices exhibits a device property, wherein each device is a party to a network communication in the first set of network communications;
• extract, from the machine-learning model, a first set of significant inputs that had a significant impact on the determining;
• and
• create, using the first set of inputs, a rule for identifying the device property, wherein the rule establishes a condition that, when present in a set of real-time network communications, implies that a party to that set of real-time network communications exhibits the device property.