PATENT CLAIM ANALYSIS

Application Number: 15993453
Application Type: Utility
Filing Date: 2018-05
Publication Date: 2019-03
Patent Classification: ["726", "025000"]

Abstract:
Methods and systems for carrying out multiple campaigns of penetration testing using different lateral movement strategies for discovering and reporting security vulnerabilities of a networked system, the networked system comprising a plurality of network nodes interconnected by one or more networks.

Claim (Index 20):
A penetration testing system for penetration testing of a networked system , the penetration testing system comprising:\n a. a set-up module including:\n i. one or more set-up processors; and \n ii. a set-up non-transitory computer readable storage medium for instructions execution by the one or more set-up processors, the set-up non-transitory computer readable storage medium having stored instructions to select a plurality of lateral movement strategies from a group of two or more lateral movement strategies that are available to be used in penetration testing campaigns; \n b. a penetration-testing-campaign module including:\n i. one or more penetration-testing-campaign processors; and \n ii. a penetration-testing-campaign non-transitory computer readable storage medium for instructions execution by the one or more penetration-testing-campaign processors, the penetration-testing-campaign non-transitory computer readable storage medium having stored instructions to execute a plurality of penetration testing campaigns, wherein (i) the number of penetration testing campaigns in the plurality of penetration testing campaigns is equal to the number of lateral movement strategies in the selected plurality of lateral movement strategies, (ii) for each specific lateral movement strategy in the selected plurality of lateral movement strategies there is a corresponding penetration testing campaign in the plurality of penetration testing campaigns that uses the specific lateral movement strategy as the lateral movement strategy of the attacker of the corresponding penetration testing campaign, and (iii) for any two penetration testing campaigns in the plurality of penetration testing campaigns and for any specific information item of penetration testing campaigns other than lateral movement strategy, values of the specific information item in the two penetration testing campaigns are equal; and \n c. a reporting module, including:\n i. one or more reporting processors; and \n ii. a reporting non-transitory computer readable storage medium for instructions execution by the one or more reporting processors, the reporting non-transitory computer readable storage medium having stored instructions to report at least one security vulnerability determined to exist in the networked system according to results of the plurality of penetration testing campaigns executed by the penetration testing campaign module, the instructions to report including at least one of (i) instructions to cause a display device to display a report including information about the at least one security vulnerability, (ii) instructions to store the report including information about the at least one security vulnerability in a file, and (iii) instructions to electronically transmit the report including information about the at least one security vulnerability.

Metadata:
- Claim Count in Document: 1.0
- Percentile: 93.0
- Lexical Diversity: 1.19444
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15869128', '15681692', '15837975', '15983309', '15911170']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.3105970602892832
- 35 USC 102 Novelty (BERT): 0.5546922192942871
- Combined Prediction Score: 0.3350065761897836
- Mean Citation Score: 350.9057620000001
- Max Citation Score: 423.7366
- Similarity Product: 383.6432535617352

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test