PATENT CLAIM ANALYSIS

Application Number: 15892670
Application Type: Utility
Filing Date: 2018-02
Publication Date: 2018-06
Patent Classification: ["726", "023000"]

Abstract:
Detecting malicious files is disclosed, including: executing a candidate file; monitoring the execution of the candidate file; generating a monitored action record corresponding to the execution of the candidate file; determining that at least one malicious action included in the monitored action record is included in a preset malicious action set; and determining that the candidate file is a malicious file.

Claim (Index 3):
The method of  claim 1 , further comprising generating the preset malicious action set, including by:\n creating a first training sample set and a second training sample set, wherein the first training sample set comprises at least one malicious sample file and the second training sample set comprises at least one non-malicious sample file; executing the first training sample set to generate a first sample action record and executing the second training sample set to generate a second sample action record; determining a corresponding occurrence frequency for each action type in the first sample action record and the second sample action record; generating a first sample action set based on a first preset occurrence frequency threshold value and a second sample action set based on a second preset occurrence frequency threshold value, wherein the first sample action set comprises zero or more action types included in the first sample action record whose corresponding occurrence frequencies are greater than the first preset occurrence frequency threshold value, and wherein the second sample action set comprises zero or more action types included in the second sample action record whose corresponding occurrence frequencies are greater than the second preset occurrence frequency threshold value; and determining the preset malicious action set based at least in part on the first sample action set and the second sample action set.

Metadata:
- Claim Count in Document: 20.0
- Percentile: 88.0
- Lexical Diversity: 2.0
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: True
- Related Applications: ['15149938', '15431162', '12402861', '14805408', '11931563']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2520917045194982
- 35 USC 102 Novelty (BERT): 0.5028876270470045
- Combined Prediction Score: 0.2771712967722488
- Mean Citation Score: 171.537376
- Max Citation Score: 308.04056
- Similarity Product: 293.2029162915135

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test