PATENT CLAIM ANALYSIS

Application Number: 16035124
Application Type: Utility
Filing Date: 2018-07
Publication Date: 2018-11
Patent Classification: ["726", "023000"]

Abstract:
A method for querying a knowledge base of malicious hosts numbered from  1  through N. The method includes providing a network of computers, which has a plurality of unknown malicious host machines. In a specific embodiment, the malicious host machines are disposed throughout the network of computers, which includes a worldwide network of computers. The method includes querying a knowledge base including a plurality of known malicious hosts, which are numbered from  1  through N, where N is an integer greater than 1. In a preferred embodiment, the knowledge base is coupled to the network of computers. The method includes receiving first information associated with an unknown host from the network; identifying an unknown host and querying the knowledge base to determine if the unknown host is one of the known malicious hosts in the knowledge base, and outputting second information associated with the unknown host based upon the querying process.

Claim (Index 1):
A computer-implemented method for tracking machines on a network of computers, the method comprising:\n identifying a malicious host coupled to the network of computers; determining a first IP (Internet Protocol) address and a first set of one or more attributes associated with the malicious host during a first time period; calculating a first attribute fuzzy GUID (Globally Unique Identifier) for the first IP address and the first set of one or more attributes; identifying an unknown host during a second time period when the malicious host is in a latent state, the unknown host being associated with a second IP address and a second set of one or more attributes during the second time period; calculating a second attribute fuzzy GUID for the second IP address and the second set of one or more attributes; determining, based on the first attribute fuzzy GUID and the second fuzzy GUID, if the malicious host has moved from the first IP address to the second IP address; and responsive to determining that the malicious host has moved from the first IP address to the second IP address, blocking access to one or more segments of the network of computers by one or more hosts associated with one or more of the first IP address and the second IP address.

Metadata:
- Claim Count in Document: 1.0
- Percentile: 95.0
- Lexical Diversity: 2.52308
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['11550395', '13372480', '14298823', '14455874', '13442857']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.336243297159172
- 35 USC 102 Novelty (BERT): 0.5695587215749333
- Combined Prediction Score: 0.3595748396007481
- Mean Citation Score: 392.60593200000005
- Max Citation Score: 465.13245
- Similarity Product: 425.45982710679175

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 0
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test