PATENT CLAIM ANALYSIS

Application Number: 16250006
Application Type: Utility
Filing Date: 2019-01
Publication Date: 2019-05
Patent Classification: ["726", "023000"]

Abstract:
Processor(s) for detecting malicious software. A hardware virtual machine monitor (HVMM) operates under a host OS. Container(s) initialized with network application template(s) operate under a guest OS VM. A detection module operates under the guest OS VM includes a trigger detection module, a logging module and a container command module. The trigger detection module monitors activity on container(s) for a trigger event. The logging module writes activity report(s) in response to trigger event(s). The container command module issues command(s) in response to trigger event(s). The command(s) include a container start, stop and revert commands. A virtual machine control console operates under the host OS and starts/stops the HVMM. A container control module operates under the guest OSVM and controls container(s) in response to the command(s). The server communication module sends activity report(s) to a central collection network appliance that maintains a repository of activities for infected devices.

Claim (Index 21):
An apparatus, comprising:\n a memory; and a hardware processor communicatively coupled to the memory, the hardware processor configured to execute a virtual machine monitor at least partially stored in the memory, the virtual machine monitor configured to provide a first level of virtualization, the hardware processor configured to execute, using the virtual machine monitor, a plurality of virtual environments to provide a second level of virtualization, the second level of virtualization operating within the first level of virtualization, each virtual environment from the plurality of virtual environments configured to execute an application from a plurality of applications, the plurality of virtual environments configured to isolate each application from the plurality of applications from the remaining applications from the plurality of applications, the hardware processor configured to monitor behavior of the application within a virtual environment from the plurality of virtual environments to detect unauthorized activity of the application within the virtual environment.

Metadata:
- Claim Count in Document: 59.0
- Percentile: 99.0
- Lexical Diversity: 2.71233
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['14808681', '12558841', '15841913', '15459563', '12059454']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2890835551351388
- 35 USC 102 Novelty (BERT): 0.5726127258281863
- Combined Prediction Score: 0.3174364722044435
- Mean Citation Score: 386.554632
- Max Citation Score: 452.76294
- Similarity Product: 425.0583175999546

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 0
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test