PATENT CLAIM ANALYSIS

Application Number: 16190756
Application Type: Utility
Filing Date: 2018-11
Publication Date: 2019-03
Patent Classification: ["726", "023000"]

Abstract:
In one embodiment, a device in a network maintains a plurality of anomaly detection models for different sets of aggregated traffic data regarding traffic in the network. The device determines a measure of confidence in a particular one of the anomaly detection models that evaluates a particular set of aggregated traffic data. The device dynamically replaces the particular anomaly detection model with a second anomaly detection model configured to evaluate the particular set of aggregated traffic data and has a different model capacity than that of the particular anomaly detection model. The device provides an anomaly event notification to a supervisory controller based on a combined output of the second anomaly detection model and of one or more of the anomaly detection models in the plurality of anomaly detection models.

Claim (Index 10):
An apparatus, comprising:\n one or more network interfaces to communicate with a network; a processor coupled to the network interfaces and configured to execute one or more processes; and a memory configured to store a process executable by the processor, the process when executed operable to: maintain a plurality of anomaly detection models for different sets of aggregated traffic data regarding traffic in the network; determine a measure of confidence in a particular one of the anomaly detection models that evaluates a particular set of aggregated traffic data; dynamically replace the particular anomaly detection model with a second anomaly detection model configured to evaluate the particular set of aggregated traffic data and has a different model capacity than that of the particular anomaly detection model; and provide an anomaly event notification to a supervisory controller based on a combined output of the second anomaly detection model and of one or more of the anomaly detection models in the plurality of anomaly detection models.

Metadata:
- Claim Count in Document: 14.0
- Percentile: 98.0
- Lexical Diversity: 2.45455
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15176652', '15176678', '15184252', '15052257', '15092993']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.3018031532100553
- 35 USC 102 Novelty (BERT): 0.5417182674704653
- Combined Prediction Score: 0.3257946646360963
- Mean Citation Score: 300.710986
- Max Citation Score: 397.57083
- Similarity Product: 362.09157964785584

Labels:
- Claim Label 101: 1
- Claim Label 102: 0
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 0
- Label 101 Adjusted: 1

Dataset: test