PATENT CLAIM ANALYSIS

Application Number: 16274479
Application Type: Utility
Filing Date: 2019-02
Publication Date: 2019-06
Patent Classification: ["726", "022000"]

Abstract:
Techniques are described for detecting anomalous behavior in program execution. In one example, a method includes logging occurrence of one or more key run time events during execution of a program. Each key run time event has a corresponding key run time event data structure associated with the program, and logging includes storing records associated with the key run time events, wherein each record is based on the key run time event data structure associated with the key run time event. The method further includes analyzing the records to determine if a current pattern of key run time events associated with the program during execution matches an expected pattern of key run time events and generating a security alert if the current pattern of key run time events does not match the expected pattern of key run time events for the program.

Claim (Index 20):
The computer system of  claim 17 , wherein the program instructions to log occurrence of one or more key run time events further include program instructions to monitor recurrent events, wherein the program instructions for monitoring recurrent events include:\n program instructions to identify a sequence of two or more key run time events, wherein each key run time event has a different key run time event type; program instructions to initialize a first log record for logging computer operations associated with the sequence of two or more key run time events; and program instructions to determine if the computer operations associated with the sequence of two or more key run time events occurred within an expected amount of time, wherein the expected amount of time is a function of a frequency and a delta threshold.

Metadata:
- Claim Count in Document: 50.0
- Percentile: 99.0
- Lexical Diversity: 2.36508
- Patent Class: 726.0
- Transitional Phrase Type: none
- Component Type: 0
- Foreign Priority: False
- Related Applications: ['14932467', '14986967', '15588131', '14016741', '15252761']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2971221455013632
- 35 USC 102 Novelty (BERT): 0.5574100914468193
- Combined Prediction Score: 0.3231509400959088
- Mean Citation Score: 219.405466
- Max Citation Score: 434.23065
- Similarity Product: 337.573554579109

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test