Information enhanced classification

1. A method comprising:

accessing network traffic from a network, wherein the network traffic is associated with a plurality of entities;

selecting an entity of the plurality of entities;

determining one or more values associated with one or more properties associated with the entity, wherein the one or more values are accessed from the network traffic or other sources of device information;

determining that the one or more properties are insufficient to classify the entity;

in response to determining that the one or more properties are insufficient to classify the entity:

applying one or more heuristics to the one or more properties associated with the entity to generate a search query based on the one or more values associated with the one or more properties associated with the entity, wherein the one or more heuristics comprise at least one of words or terms applied to the one or more properties to provide context to the one or more properties, and wherein the entity comprises a computing device coupled to the network;

performing the search query based on the one or more values previously determined;

receiving a search query result, wherein the search query result comprises a plurality of webpages associated with the entity;

accessing a keyword list comprising a plurality of keywords or terms associated with one or more entity classifications; and

accessing data from a webpage of the plurality of webpages, wherein the data comprises one or more additional values associated with one or more additional properties of the computing device, wherein the one or more additional values are identified based a comparison of the data from the webpage and the keyword list;

determining, by a processing device, a classification result of the entity based on the data from the webpage of the plurality of webpages and the one or more values associated with the one or more properties associated with the entity accessed from the network traffic; and

storing the classification result.

2. The method of claim 1 further comprising:

performing an action based on the classification result.

3. The method of claim 1 , wherein the classification result is determined using a model trained based on data from the plurality of webpages.

4. The method of claim 1 , wherein the classification result is determined based on a database comprising data based on the plurality of webpages.

5. The method of claim 1 further comprising:

extracting text from the webpage of the plurality of webpages.

6. The method of claim 1 further comprising:

determining one or more keyword matches of the plurality of keywords and data from the webpage, wherein the classification result is based on at least one keyword of the keyword list.

7. The method of claim 6 further comprising:

determining a keyword count for a keyword matched from the keyword list and the data from the webpage, wherein the classification result is based on the keyword count.

8. A system comprising:

a memory; and

a processing device, operatively coupled to the memory, to:

access network traffic from a network, wherein the network traffic is associated with a plurality of entities;

select an entity of the plurality of entities;

determine one or more values associated with one or more properties associated with the entity, wherein the one or more values are accessed from the network traffic or other sources of device information;

determine that the one or more properties are insufficient to classify the entity;

in response to determining that the one or more properties are insufficient to classify the entity:

apply one or more heuristics to the one or more properties associated with the entity to generate a search query based on the one or more values associated with the one or more properties associated with the entity, wherein the one or more heuristics comprise at least one of words or terms applied to the one or more properties to provide context to the one or more properties, and wherein the entity comprises a computing device coupled to the network;

perform the search query based on the one or more values previously determined;

receive a search query result, wherein the search query result comprises a plurality of webpages associated with the entity;

access a keyword list comprising a plurality of keywords or terms associated with one or more entity classifications; and

access data from a webpage of the plurality of webpages, wherein the data comprises one or more additional values associated with one or more additional properties of the computing device, wherein the one or more additional values are identified based a comparison of the data from the webpage and the keyword list;

determine, by the processing device, a classification result of the entity based on the data from the webpage of the plurality of webpages and the one or more values associated with the one or more properties associated with the entity accessed from the network traffic; and

store the classification result.

9. The system of claim 8 , the processing device further to:

perform an action based on the classification result.

10. The system of claim 8 , wherein the classification result is determined using a model trained based on data from the plurality of webpages.

11. The system of claim 8 , wherein the classification result is determined based on a database comprising data based on the plurality of webpages.

12. The system of claim 8 , the processing device further to:

extract text from the webpage of the plurality of webpages.

13. The system of claim 8 , the processing device further to:

determine one or more keyword matches of the plurality of keywords and data from the webpage, wherein the classification result is based on at least one keyword of the keyword list.

14. The system of claim 13 , the processing device further to:

determine a keyword count for each keyword matched from the keyword list and the data from the webpage, wherein the classification result is based on at least one keyword count.

15. A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to:

access network traffic from a network, wherein the network traffic is associated with a plurality of entities;

select an entity of the plurality of entities;

determine one or more values associated with one or more properties associated with the entity, wherein the one or more values are accessed from the network traffic or other sources of device information;

determine that the one or more properties are insufficient to classify the entity;

in response to determining that the one or more properties are insufficient to classify the entity:

apply one or more heuristics to the one or more properties associated with the entity to generate a search query based on the one or more values associated with the one or more properties associated with the entity, wherein the one or more heuristics comprise at least one of words or terms applied to the one or more properties to provide context to the one or more properties, and wherein the entity comprises a computing device coupled to the network;

perform the search query based on the one or more values previously determined;

receive a search query result, wherein the search query result comprises a plurality of webpages associated with the entity;

access a keyword list comprising a plurality of keywords or terms associated with one or more entity classifications; and

access data from a webpage of the plurality of webpages, wherein the data comprises one or more additional values associated with one or more additional properties of the computing device, wherein the one or more additional values are identified based a comparison of the data from the webpage and the keyword list;

determine, by the processing device, a classification result of the entity based on the data from the webpage of the plurality of webpages and the one or more values associated with the one or more properties associated with the entity accessed from the network traffic; and

store the classification result.

16. The non-transitory computer readable medium of claim 15 , wherein the instructions further cause the processing device to:

performing an action based on the classification result.

17. The non-transitory computer readable medium of claim 15 , wherein the classification result is determined using a model trained based on data from the plurality of webpages.

18. The non-transitory computer readable medium of claim 15 , wherein the classification result is determined based on a database comprising data based on the plurality of webpages.