PATENT CLAIM ANALYSIS

Application Number: 16106748
Application Type: Utility
Filing Date: 2018-08
Publication Date: 2018-12
Patent Classification: ["726", "025000"]

Abstract:
A computing device generates a simulated attack for testing a cybersecurity system. A user of a networked system of computers is selected. A user definition defines a normal network usage behavior of the selected user. A current simulation time is initialized. Netflow data is generated and written to an output file for the selected user based on a profile definition of the selected user until a user simulation is complete. The profile definition is selected based on the current simulation time. Attack netflow data is generated and written to the output file based on the selected attack until an attack simulation is complete. The written netflow data is sorted in time order. The sorted netflow data is streamed to a cybersecurity system to determine a response by the cybersecurity system to the streamed data.

Claim (Index 21):
A computing device comprising:\n a processor; and a computer-readable medium operably coupled to the processor, the computer-readable medium having computer-readable instructions stored thereon that, when executed by the processor, cause the computing device to\n select a user of a networked system of computers, wherein a user definition defines a normal network usage behavior of the selected user; \n initialize a current simulation time; \n (a) generate netflow data for the selected user based on a profile definition of the selected user, wherein the profile definition is selected based on the current simulation time; \n (b) write the generated netflow data to an output file with the current simulation time; \n (c) update the current simulation time; \n (d) repeat (a) to (c) until a user simulation is complete based on the current simulation time; \n select an attack on the networked system of computers, wherein an attack definition defines an attack behavior; \n initialize the current simulation time to an attack initiation time determined from the attack definition; \n (e) generate attack netflow data based on the selected attack; \n (f) write the generated attack netflow data to the output file with the current simulation time; \n (g) update the current simulation time; \n (h) repeat (e) to (g) until an attack simulation is complete based on the attack definition; \n sort the written netflow data in time order; and \n stream the sorted netflow data to a cybersecurity system to determine a response by the cybersecurity system to the streamed data.

Metadata:
- Claim Count in Document: 57.0
- Percentile: 96.0
- Lexical Diversity: 2.69811
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['16020282', '15418867', '15711666', '15389506', '15206267']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.263328847058475
- 35 USC 102 Novelty (BERT): 0.5199117537364586
- Combined Prediction Score: 0.2889871377262734
- Mean Citation Score: 202.27553200000003
- Max Citation Score: 334.39612
- Similarity Product: 257.2283273671484

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test