PATENT CLAIM ANALYSIS

Application Number: 15867696
Application Type: Utility
Filing Date: 2018-01
Publication Date: 2018-05
Patent Classification: ["726", "013000"]

Abstract:
A cyber threat attenuation system. The system comprises a cyber threat data store, a plurality of sensor control points (SCPs), wherein at least one SCP is located in each local area network (LAN) segment of an enterprise network, and an analytics correlation system (ACS). Each SCP comprises a plurality of sensor applications that analyze data packets transported by the LAN segment in which the SCP is located and transmits a notification identifying the transmitting sensor, an identity of the source of the data packet, an identity of the destination of the data packet, and a notification reason to the data store. The ACS comprises an application that determines unusual data packet traffic in the enterprise network and transmits a notification comprising information about the unusual data packet traffic and an identity of a host computer associated with the unusual data packet traffic to the data store.

Claim (Index 11):
A method of attenuating cyber threats, comprising:\n for each of a plurality of sensor control points (SCPs), analyzing, by each sensor application of a plurality of sensor applications executing in a local area network (LAN) segment of an enterprise network, data packets transmitted on the LAN segment based on at least one criterion identified by the sensor application, wherein at least one SCP is located in each local area network (LAN) segment of the enterprise network; responsive to a data packet satisfying the at least one criterion, transmitting, by the sensor application, a notification identifying the sensor application as a transmitting sensor, an identity of the source of the data packet, an identity of the destination of the data packet, and a notification reason to a cyber threat data store, wherein one of the plurality of sensor applications comprises a threat listed host sensor application; configuring, by a threat list application executing stored in a non-transitory memory and executed by a processor of a computer system, a threat listed host sensor application in each of the SCPs based on threat list data from a threat list data store, where the threat list data store comprises a list of threat entries, each entry identifying an external host computer located outside of the enterprise network and metadata about the external host computer and the threat it poses; analyzing, by a rules engine application stored in a non-transitory memory and executed by a processor of the computer system, a plurality of notifications from the threat list application and one or more of the plurality of SCPs identifying a first host computer including a notification from a threat listed host sensor application that identifies the first host computer as the destination for a data packet sent by or the source for a data packet sent to a first external host computer identified in the threat list hosted sensor application that created the notification, wherein the first host computer is one of a plurality of host computers in the enterprise network; and based on rules configured into the rules engine application and responsive to the analysis, transmitting, by the rules engine application, an alarm to a user interface.

Metadata:
- Claim Count in Document: 1.0
- Percentile: 86.0
- Lexical Diversity: 2.31429
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['14943973', '14885857', '14147105', '13744074', '14244884']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2628135310017582
- 35 USC 102 Novelty (BERT): 0.5627492504519745
- Combined Prediction Score: 0.2928071029467798
- Mean Citation Score: 241.142302
- Max Citation Score: 445.8981
- Similarity Product: 397.7653792642951

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 0

Dataset: test