PATENT CLAIM ANALYSIS

Application Number: 16199556
Application Type: Utility
Filing Date: 2018-11
Publication Date: 2019-03
Patent Classification: ["726", "023000"]

Abstract:
Techniques are provided herein for classifying domains based on DNS traffic so that domains that are malicious or associated with malicious activity can be identified. Traffic between one or more domain name system (DNS) resolvers and one or more authoritative name servers hosted on the Internet is analyzed analyzing at a server having network connectivity. A mismatch between a hostname and Internet Protocol (IP) information for the hostname is detected in the traffic and domains included in the traffic are classified based on the detecting.

Claim (Index 8):
An apparatus comprising:\n one or more network interface units configured to enable network connectivity to the Internet from within a recursive domain name system (DNS) cluster; a processor configured to:\n analyze traffic between one or more DNS resolvers in the DNS cluster and one or more authoritative name servers hosted on the Internet; \n detect, in the traffic, an Autonomous System Number (ASN) mismatch between a hostname and Internet Protocol (IP) information for the hostname; \n classify one or more domains included in the traffic as malicious based on detection of the ASN mismatch; and \n block traffic from the one or more domains classified as malicious.

Metadata:
- Claim Count in Document: 42.0
- Percentile: 98.0
- Lexical Diversity: 1.58621
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15226250', '15167881', '14938610', '13750712', '13938983']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2819859284274806
- 35 USC 102 Novelty (BERT): 0.5824216881426273
- Combined Prediction Score: 0.3120295043989953
- Mean Citation Score: 292.9523460000001
- Max Citation Score: 522.4964
- Similarity Product: 414.9833664293766

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test