PATENT CLAIM ANALYSIS

Application Number: 15863257
Application Type: Utility
Filing Date: 2018-01
Publication Date: 2018-05
Patent Classification: ["726", "023000"]

Abstract:
In one embodiment, a traffic model manager node receives data flows in a network and determines a degree to which the received data flows conform to one or more traffic models classifying particular types of data flows as non-malicious. If the degree to which the received data flows conform to the one or more traffic models is sufficient, the traffic model manager node characterizes the received data flows as non-malicious. Otherwise, the traffic model manager node provides the received data flows to a denial of service (DoS) attack detector in the network to allow the received data flows to be scanned for potential attacks.

Claim (Index 13):
An apparatus, comprising:\n one or more network interfaces to communicate with a network as a traffic model manager node; a processor coupled to the one or more network interfaces and configured to execute a process; and a memory configured to store program instructions which include the process executable by the processor, the process comprising:\n receiving a data flow in the network; \n determining a degree to which the received data flow conforms to one or more traffic models classifying particular types of data flows as non-malicious; \n when the degree to which the received data flow conforms to the one or more traffic models is above a threshold,\n characterizing the received data flow as non-malicious, and \n white labeling the received data flow that is characterized as non-malicious, wherein white labeled data flows cause the received data flow characterized as non-malicious to bypass a Denial of Service (DoS) attack detector, and wherein the white labeled data flows are not scanned by the DoS attack detector; and \n \n when the degree to which the received data flow conforms to the one or more traffic models is below the threshold, forward the received data flow to the DoS attack detector in the network, wherein the DoS attack detector scans the received data flow for potential attacks.

Metadata:
- Claim Count in Document: 26.0
- Percentile: 86.0
- Lexical Diversity: 2.19608
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['14338582', '14338526', '11938356', '14338794', '14338653']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2600140960198586
- 35 USC 102 Novelty (BERT): 0.5206829945089346
- Combined Prediction Score: 0.2860809858687662
- Mean Citation Score: 196.397322
- Max Citation Score: 337.69824
- Similarity Product: 296.7243185464668

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test