PATENT CLAIM ANALYSIS

Application Number: 16388509
Application Type: Utility
Filing Date: 2019-04
Publication Date: 2019-08
Patent Classification: ["726", "023000"]

Abstract:
A technique for detecting malware looks at startup hooks that may be created by malware to assist in ensuring that the malware is started upon a reboot of a programmable device. After enumerating startup hooks in the system, startup hooks associated with untrusted executables are deleted. If the startup hook is restored, that is an indication that the untrusted executable may be malware. An indication may then be passed to an anti-malware software to analyze the executable further.

Claim (Index 8):
At least one machine readable medium comprising instructions which, when executed, cause at least one processor to at least:\n process a reputation associated with a target executable, the reputation determined by:\n removing a startup item associated with the target executable from a programmable device; \n determining whether the startup item is restored to the programmable device within a time period after the removal; \n when the startup item is determined to be restored to the programmable device within the time period, setting the reputation of the target executable to a negative reputation; and \n when the startup item is determined to not be restored within the time period, setting the reputation of the target executable to a positive reputation; \n when the reputation of the target executable is a positive reputation, update a whitelist to include the target executable; when the reputation of the target executable is a negative reputation, update a blacklist to include the target executable; and provide the whitelist and the blacklist to the programmable device.

Metadata:
- Claim Count in Document: 50.0
- Percentile: 100.0
- Lexical Diversity: 1.64706
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15391387', '15392770', '12840032', '15070468', '12695005']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2137783717043767
- 35 USC 102 Novelty (BERT): 0.4969696210535045
- Combined Prediction Score: 0.2420974966392894
- Mean Citation Score: 142.92111400000005
- Max Citation Score: 229.87244
- Similarity Product: 170.21278065248012

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test