PATENT CLAIM ANALYSIS

Application Number: 15865509
Application Type: Utility
Filing Date: 2018-01
Publication Date: 2018-08
Patent Classification: ["726", "025000"]

Abstract:
The present invention relates to methods, network devices, and machine-readable media for an integrated environment for a method of environment security validation through controlled computer network exploitation. A set of parameters is received from an operator over the network. Based on these parameters an attack campaign is performed on the environment. In the course of the campaign, vulnerable hardware and software in the attacked network are identified. In another scenario, vulnerable hardware and software are mitigated until vendors provide official patches.

Claim (Index 1):
A method for determining the success or failure of an attempted exploitation of an endpoint connected to a network environment, the method comprising:\n providing agent software at an endpoint, the agent software initially configured for executing a limited set of instructions, the set comprising instructions for:\n selecting environment attributes; \n decrypting loader instructions based on the selected environment attributes decrypting a communications instruction according to the loader instructions, wherein the communications instruction is an instruction for the endpoint that specifies parameters according to which it will attempt to and communicate with a management server over the network environment; \n generating a heartbeat signal for communication with a management server; \n waiting a configured time period for an acknowledgement signal to be sent from the management server to the endpoint; \n determining whether or not the acknowledgement signal was received at the endpoint in response to the heartbeat signal; and \n if an acknowledgement signal is received at the endpoint in response to the heartbeat signal, then resetting the heartbeat time interval to transmit a subsequent heartbeat signal from the endpoint to the management server; and \n deleting the agent software from the endpoint if decryption of communication instructions or loader instructions fail or if no acknowledgement signal is received after a predetermined amount of time; \n at the management server, generating an instruction message for the agent software executing at the endpoint, wherein the instruction message comprises instructions for at least:\n loading a modular package of instructions for collecting specified endpoint parameters; \n collecting the specified endpoint parameters according to the instructions; \n transmitting the collected endpoint parameters to the management server; \n executing an exploit at the endpoint, the exploit to be provided subsequently; \n determining if the exploit is successful in execution at the endpoint; \n transmitting the success determination to the management server over the communications network; \n at the management server:\n determining an exploit for application at the endpoint, wherein the exploit is determined based on the collected endpoint parameters; \n providing the determined exploit to the endpoint through the network environment; \n receiving the success determination from the endpoint; \n based on the success determination, generating a further instruction for execution at the endpoint.

Metadata:
- Claim Count in Document: 1.0
- Percentile: 86.0
- Lexical Diversity: 1.55172
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['13879533', '10054307', '14675380', '12043673', '12102482']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2121067196917366
- 35 USC 102 Novelty (BERT): 0.4782069036960784
- Combined Prediction Score: 0.2387167380921708
- Mean Citation Score: 116.4984872
- Max Citation Score: 119.40475
- Similarity Product: 79.48604329118133

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 0
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test