PATENT CLAIM ANALYSIS

Application Number: 15886680
Application Type: Utility
Filing Date: 2018-02
Publication Date: 2018-09
Patent Classification: ["726", "023000"]

Abstract:
Techniques for Domain Generation Algorithm (DGA) behavior detection are provided. In some embodiments, a system, process, and/or computer program product for DGA behavior detection includes receiving passive Domain Name System (DNS) data that comprises a plurality of DNS responses at a security device; and applying a signature to the passive DNS data to detect DGA behavior, in which applying the signature to the passive DNS data to detect DGA behavior further comprises: parsing each of the plurality of DNS responses to determine whether one or more of the plurality of DNS responses correspond to a non-existent domain (NXDOMAIN) response.

Claim (Index 15):
The system recited in  claim 2 , wherein the processor is further configured to:\n determine that a first domain name is a DGA generated domain name based on detected DGA behavior using the signature, wherein the first domain name is associated with at least one of the one or more of the plurality of NXDOMAIN responses; sinkhole the first domain name using a sinkholed IP address; and monitor network activity redirected to the sinkholed IP address.

Metadata:
- Claim Count in Document: 2.0
- Percentile: 88.0
- Lexical Diversity: 1.82258
- Patent Class: 726.0
- Transitional Phrase Type: none
- Component Type: 0
- Foreign Priority: False
- Related Applications: ['14754489', '14724679', '15383880', '14068272', '15195954']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.3672835011879485
- 35 USC 102 Novelty (BERT): 0.5847454148004256
- Combined Prediction Score: 0.3890296925491962
- Mean Citation Score: 405.425692
- Max Citation Score: 503.23505
- Similarity Product: 443.6617197424681

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 0

Dataset: test