| CPC H04L 67/303 (2013.01) [H04L 41/0681 (2013.01); H04L 41/069 (2013.01); H04L 41/082 (2013.01); H04L 41/0853 (2013.01); H04L 41/142 (2013.01); H04L 45/122 (2013.01); H04L 63/20 (2013.01); H04L 67/125 (2013.01)] | 11 Claims |

|
1. A method of managing networked devices, the method comprising:
with a processor coupled with a non-transitory computer readable medium having computer executable instructions:
generating a first set of device attributes for a first device, the first set of device attributes obtained from network traffic data associated with the first device;
generating a second set of device attributes for a second device, the second set of device attributes obtained from network traffic data associated with the second device;
applying, to each of the first set of device attributes and the second set of device attributes, a first clustering operation that assigns devices into clusters based on shared device attributes, the first clustering operation assigning each of the first device and the second device to a first cluster;
updating the second set of device attributes based on additional network traffic data associated with the second device;
applying a second clustering operation that assigns the second device to a second cluster different than the first cluster; and
in response to determining the second clustering operation assigns the second device to the second cluster, initiating a responsive action corresponding to the second device.
|