PATENT CLAIM ANALYSIS

Application Number: 16109379
Application Type: Utility
Filing Date: 2018-08
Publication Date: 2019-01
Patent Classification: ["726", "023000"]

Abstract:
A security system detects anomalous activity in a network. The system logs user activity, which can include ports used, compares users to find similar users, sorts similar users into cohorts, and compares new user activity to logged behavior of the cohort. The comparison can include a divergence calculation. Origins of user activity can also be used to determine anomalous network activity. The hostname, username, IP address, and timestamp can be used to calculate aggregate scores and convoluted scores.

Claim (Index 1):
A computer-implemented method for detecting an anomalous activity in a network, the method being implemented by one or more computer readable storage devices configured to store computer executable instructions, and by one or more hardware computer processors in communication with the one or more computer readable storage devices configured to execute the computer executable instructions, the method comprising:\n logging, to the one or more computer readable storage devices, user activity for a plurality of users in the network; sorting the plurality of users into a plurality of cohorts; detecting a new activity by a first user of the first plurality of users, wherein the first user is sorted into a first cohort of the plurality of cohorts; determining an origin of the new activity; determining the probability that the new activity is an attack based, at least in part, on the origin of the new activity; and generating, based at least in part on the probability that the new activity is an attack, an indicator of a potential anomaly.

Metadata:
- Claim Count in Document: 51.0
- Percentile: 96.0
- Lexical Diversity: 1.8
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['14970317', '15224443', '15462540', '15201856', '12059076']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.3260199962712582
- 35 USC 102 Novelty (BERT): 0.5684802544285875
- Combined Prediction Score: 0.3502660220869912
- Mean Citation Score: 339.0878620000001
- Max Citation Score: 427.70728
- Similarity Product: 354.9864555255604

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test