PATENT CLAIM ANALYSIS

Application Number: 15746411
Application Type: Utility
Filing Date: 2018-01
Publication Date: 2018-07
Patent Classification: ["726", "023000"]

Abstract:
A computer implemented method of detecting unauthorized access to a protected network by monitoring a dynamically updated deception environment, comprising launching, on one or more decoy endpoints, one or more decoy operating system (OS) managing one or more of a plurality of deception applications mapping a plurality of applications executed in a protected network, updating dynamically a usage indication for a plurality of deception data objects deployed in the protected network to emulate usage of the plurality of deception data objects for accessing the deception application(s) wherein the plurality of deception data objects are configured to trigger an interaction with the deception application(s) when used, detecting usage of data contained in the deception data object(s) by monitoring the interaction and identifying one or more potential unauthorized operations based on analysis of the detection.

Claim (Index 20):
A system for detecting unauthorized access to a protected network by monitoring a dynamically updated deception environment, comprising:\n a program store storing a code; and at least one processor on at least one decoy endpoint coupled to said program store for executing said stored code, said code comprising:\n code instructions to launch at least one decoy operating system (OS) managing at least one of a plurality of deception applications mapping a plurality of applications executed in a protected network; \n code instructions to update dynamically a usage indication for a plurality of deception data objects deployed in said protected network to emulate usage of said plurality of deception data objects for accessing said at least one deception application, said plurality of deception data objects are configured to trigger an interaction with said at least one deception application when used; \n code instructions to detect usage of data contained in at least one of said plurality of deception data objects by monitoring said interaction; and \n code instructions to identify at least one potential unauthorized operation based on an analysis of said detection.

Metadata:
- Claim Count in Document: 1.0
- Percentile: 86.0
- Lexical Diversity: 2.17391
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15175048', '15406731', '15448581', '15679180', '15691786']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2918901921783965
- 35 USC 102 Novelty (BERT): 0.4910917520350447
- Combined Prediction Score: 0.3118103481640614
- Mean Citation Score: 231.264882
- Max Citation Score: 245.67525
- Similarity Product: 186.0349206606299

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 0
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test