PATENT CLAIM ANALYSIS

Application Number: 16107627
Application Type: Utility
Filing Date: 2018-08
Publication Date: 2019-02
Patent Classification: ["726", "023000"]

Abstract:
A computer-implemented method for detecting anomalies in DNS requests comprises receiving a plurality of DNS requests generated within a predetermined period. The predetermined period includes a plurality of DNS data fragments. The method further includes receiving a first DNS request and selecting a plurality of second DNS requests from the plurality of DNS requests such that each of the second DNS requests is a subset of the first DNS request. The method also includes calculating a count value for each of the DNS data fragments, where each of the count values represents a number of instances the second DNS requests appear within one of the DNS data fragments. In some embodiments, the count values for each of the DNS data fragments can be normalized. The method further includes determining an anomaly trend, for example, based on determining that at least one of the count values exceeds a predetermined threshold value.

Claim (Index 33):
The system of  claim 29 , wherein the determining of the anomaly trend comprises determining that at least one of the count values exceeds a predetermined threshold value.

Metadata:
- Claim Count in Document: 47.0
- Percentile: 96.0
- Lexical Diversity: 2.46154
- Patent Class: 726.0
- Transitional Phrase Type: none
- Component Type: 0
- Foreign Priority: False
- Related Applications: ['15799547', '14937678', '14969947', '15611051', '11158317']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2883298337766629
- 35 USC 102 Novelty (BERT): 0.5509985602918146
- Combined Prediction Score: 0.3145967064281781
- Mean Citation Score: 297.24829599999987
- Max Citation Score: 421.55475
- Similarity Product: 271.4917341878414

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test