Classification including correlation
AssigneeForescout Technologies, Inc.
InventorsArun Raghuramu, Aveek Kumar Das, Yang Zhang
Life of this patent
Estimating the term…
Abstract
Systems, methods, and related technologies for classification are described. Network traffic from a network may be accessed. One or more values associated with one or more properties associated with an entity may be determined. The one or more values may be determined from the network traffic. A first classification attribute is determined based on the one or more values associated with one or more properties associated with the entity. A second classification attribute is determined, by a processing device, based on the first classification attribute and the one or more values associated with one or more properties associated with the entity. The second classification attribute is stored.
Claims20
A method comprising:
- accessing network traffic from a network, wherein the network traffic is associated with a plurality of entities;
- determining one or more values associated with one or more properties associated with an entity, wherein the one or more values are based on the network traffic;
- determining a first classification attribute based on the one or more values associated with one or more properties associated with the entity;
- determining, by a processing device, a second classification attribute based on the first classification attribute and the one or more values associated with one or more properties associated with the entity;
- and
- storing the second classification attribute.
A system comprising:
- a memory;
- and
- a processing device, operatively coupled to the memory, to:
- access network traffic from a network, wherein the network traffic is associated with a plurality of entities;
- determine one or more values associated with one or more properties associated with an entity, wherein the one or more values are based on the network traffic;
- determine a first classification attribute based on the one or more values associated with one or more properties associated with the entity;
- determine, by a processing device, a second classification attribute based on the first classification attribute and the one or more values associated with one or more properties associated with the entity;
- and
- store the second classification attribute.
A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to:
- access network traffic from a network, wherein the network traffic is associated with a plurality of entities;
- determine one or more values associated with one or more properties associated with an entity, wherein the one or more values are based on the network traffic;
- determine a first classification attribute based on the one or more values associated with one or more properties associated with the entity;
- determine, by the processing device, a second classification attribute based on the first classification attribute and the one or more values associated with one or more properties associated with the entity;
- and
- store the second classification attribute.
Dependencies are inferred from the claim text.