PATENT CLAIM ANALYSIS

Application Number: 15987146
Application Type: Utility
Filing Date: 2018-05
Publication Date: 2018-12
Patent Classification: ["726", "023000"]

Abstract:
A multi-engine malicious code scanning method for scanning data sets from a storage device is provided. The method includes, among other steps obtaining at least one data set from a storage device and generating a single forensic image of the data set and also applying a recover data application to the data set to generate a single recovered data set. A scanning is initiated of the single forensic image and the single recovered data set using the selected plurality of malware engines, where each of the malware engines, installed on the indepenent operating systems of the virtual operating system may be run concurrently on the single forensic image and the single recovered data set. A report is generated combining each of the malware engines reporting the results of the scans.

Claim (Index 1):
A multi-engine malicious code scanning method for scanning data sets obtained from a storage device, said method comprising the steps of:\n hosting a plurality of independent operating systems in a virtual cloud environment; each of said plurality of independent operating systems in said cloud environment supporting one malware engine, each malware engine on each respective independent operating system being different from one another such that said virtual operating system is configured to host at least thirty two different malware engines each operating on its own independent operating system; obtaining at least one data set from a storage device by duplicating the data set from the storage device to an image host and generating a single archive forensic image file of said data set, said single archive forensic image file separate from said storage device and stored at said image host; also applying a recover data application to said data set to also generate a single archive recovered data set file said single archive recovered data set file also separate from said storage device and stored at said image host; selecting a plurality of the different malware engines hosted on said virtual operating system in said cloud environment for analyzing said single archive forensic image file and said single archive recovered data set file, wherein said step includes displaying a master control point dashboard to a user for selection of one or more different maleware engines, among said plurality of available different malware engines, for scanning said archive forensic image; initiating independent and simultaneous scannings of said single archive forensic image file and said single archive recovered data set file, without connection to said storage device from which said data set files were obtained, using said selected plurality of different malware engines from said master control point dashboard, wherein each of said different malware engines, hosted in said cloud environment, may be run concurrently, based on a malware engine scanning sequence set from said master control point dashboard, on said single archive forensic image file and said single archive recovered data set file on said image host; and generating a combined report for each of said different malware engines reporting the results of said scans.

Metadata:
- Claim Count in Document: 1.0
- Percentile: 93.0
- Lexical Diversity: 2.07576
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['14845814', '14845643', '15987148', '15276763', '15276761']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2922336916942866
- 35 USC 102 Novelty (BERT): 0.6310615081269514
- Combined Prediction Score: 0.3261164733375531
- Mean Citation Score: 421.026004
- Max Citation Score: 575.8675
- Similarity Product: 558.2787963941693

Labels:
- Claim Label 101: 0
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 0
- Label 101 Adjusted: 0

Dataset: test