CPC H04L 41/16 (2013.01) [G06F 18/214 (2023.01); G06F 18/24 (2023.01); H04L 41/0806 (2013.01); H04L 41/0893 (2013.01); H04L 67/12 (2013.01)] | 20 Claims |
1. A method comprising:
training, by a device classification service and using feature vectors that represent how frequently one or more traffic features were observed in a network during different time windows among a plurality of time windows, a cascade of machine learning classifiers to label one or more devices in the network with a device type;
receiving, at the device classification service, traffic features of traffic associated with a particular device in the network;
using, by the device classification service, the cascade of machine learning classifiers to assign a device type label to the particular device based on the traffic features of the traffic associated with the particular device; and
initiating, by the device classification service and based on the device type label assigned to the particular device, enforcement of a network policy regarding the particular device.
|