Device classification based on rank

1 . A method comprising:

selecting a device communicatively coupled to a network;

accessing a plurality of device properties;

determining a rank for each of the plurality of device properties based on a scalability of each device property, wherein the respective rank associated with the one or more properties is based on a score function that computes a weighted sum of the scalability and an effectiveness of each device property;

selecting one or more device properties from the plurality of device properties based on a respective associated rank of the one or more device properties;

accessing information associated with the device based on the selected one or more device properties;

determining a classification associated with the device based on the information associated with the device and the selected one or more device properties;

storing the classification associated with the device; and

performing an action based on the classification, wherein the action includes at least one of a remediation action, an informational action, or a logging action.

2 . The method of claim 1 , wherein the rank associated with a property is based on one or more resource costs associated with classifying the device based on the property.

3 . The method of claim 1 , wherein the rank associated with a property is based on an accuracy level associated with the property.

4 . The method of claim 1 , wherein the rank associated with a property is based on a resistance to spoofing associated with the property.

5 . The method of claim 1 , wherein the selecting of the one or more properties is further based on a rank threshold.

6 . The method of claim 1 , wherein the selecting of the one or more properties is further based on whether the one or more properties are passive or active.

7 . The method of claim 1 , wherein the respective rank associated with the one or more properties are dynamically adjustable.

8 . The method of claim 1 further comprising:

in response to a classification confidence value associated with the classification being below a threshold, selecting an additional property based on the respective associated rank of the additional property;

determining an additional classification based on the information associated with the device and based on the additional property and the one or more properties according to the respective ranks of the additional property and the first one or more properties.

9 . The method of claim 8 , wherein the additional property is associated with a larger amount of time than at least one of the one or more properties.

10 . The method of claim 8 , wherein the rank associated with a property is user configurable.

11 . The method of claim 8 , wherein the additional property is selected to resolve a classification conflict.

12 . The method of claim 8 , wherein the additional property is selected to classify a previously unclassified device.

13 . A system comprising:

a memory; and

a processing device, operatively coupled to the memory, to:

select a device communicatively coupled to a network;

access a plurality of device properties;

determine a rank for each of the plurality of device properties based on a scalability of each device property, wherein the respective rank associated with the one or more properties is based on a score function that computes a weighted sum of the scalability and an effectiveness of each device property;

select one or more device properties from the plurality of device properties based on a respective associated rank of the one or more device properties;

access information associated with the device based on the selected one or more device properties;

determine a classification associated with the device based on the information associated with the device and the selected one or more device properties;

store the classification associated with the device; and

perform an action based on the classification wherein the action includes at least one or a remediation action, an informational action, or a logging action.

14 . The system of claim 13 , wherein the rank associated with a property is based on one or more resources associated with the property.

15 . The system of claim 13 , wherein the rank associated with a property is based on an accuracy level associated with the property.

16 . The system of claim 13 , wherein the rank associated with a property is based on a resistance to spoofing associated with the property.

17 . The system of claim 13 , wherein the selecting of the one or more properties is further based on a rank threshold.

18 . A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to:

select a device communicatively coupled to a network; access a plurality of device properties;

determine a rank for each of the plurality of device properties based on a scalability of each device property, wherein the respective rank associated with the one or more properties is based on a score function that computes a weighted sum of the scalability and an effectiveness of each device property;

select one or more device properties from the plurality of device properties based on a respective associated rank of the one or more device properties;

access information associated with the device based on the selected one or more device properties;

determine, by a processing device, a classification associated with the device based on the information associated with the device and the selected one or more device properties;

store the classification associated with the device; and

perform an action based on the classification, wherein the action includes at least one of a remediation action, an informational action, or a logging action.

19 . The non-transitory computer readable medium of claim 18 , wherein the rank associated with a property is based on one or more resources associated with the property.