PATENT CLAIM ANALYSIS

Application Number: 16245770
Application Type: Utility
Filing Date: 2019-01
Publication Date: 2019-07
Patent Classification: ["726", "022000"]

Abstract:
The present invention provides an integrated, context-aware, security system that provides an adaptive endpoint security agent architecture model for a continuously monitoring and recording activity across an enterprise, specifically monitoring activity on endpoints, and subsequently detecting and blocking any malicious processes that may otherwise invade the enterprise and cause issues. The endpoint security agent architecture exposes a well-defined, public interface to the event data generated by the endpoint security agent in the form of a custom programming language by which a user can define the logic that the endpoint security agent executes in response to event data to perform detection of and response to suspicious activity.

Claim (Index 1):
A system for providing an integrated, context-aware, security management framework for an enterprise, the system comprising:\n one or more endpoint devices, each endpoint device comprising a deployed endpoint agent configured to continuously monitor and record activity on the respective endpoint device and further execute one or more sets of detection and response logic rules for managing the detection of, and response to, any activity associated with the respective endpoint device that poses a potential security threat to the enterprise; and a server configured to communicate and exchange data with the one or more endpoint devices over a network, the server comprising a hardware processor coupled to non-transitory, computer-readable memory containing instructions executable by the processor to cause the server to:\n provide a security management platform comprising an interface with which an authorized user associated with the enterprise can interact to monitor endpoint agent activity and manage, in real time, or near-real time, functionality of at least one endpoint agent deployed on one of the one or more endpoint devices; \n receive, via the interface, input from an authorized user for managing functionality of at least one endpoint agent, wherein the input comprises interaction with an integrated development environment (IDE) allowing the authorized user to write, develop, and/or modify, on-the-fly, one or more customized sets of detection and response logic rules to be executed by an endpoint agent; and \n output, to the endpoint agent, a customized set of detection and response logic rules.

Metadata:
- Claim Count in Document: 50.0
- Percentile: 99.0
- Lexical Diversity: 1.71212
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['13559766', '15144702', '13559665', '13559732', '13559692']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2732753065025007
- 35 USC 102 Novelty (BERT): 0.4809196512654978
- Combined Prediction Score: 0.2940397409788005
- Mean Citation Score: 192.631384
- Max Citation Score: 204.39082
- Similarity Product: 151.65759528177026

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test