PATENT CLAIM ANALYSIS

Application Number: 16030637
Application Type: Utility
Filing Date: 2018-07
Publication Date: 2018-11
Patent Classification: ["726", "001000"]

Abstract:
Techniques for integrating a honey network with a target network environment (e.g., an enterprise network) to counter IP and peer-checking evasion techniques are disclosed. In some embodiments, a system for integrating a honey network with a target network environment includes a device profile data store that includes a plurality of attributes of each of a plurality of devices in the target network environment; a virtual clone manager executed on a processor that instantiates a virtual clone of one or more devices in the target network environment based on one or more attributes for a target device in the device profile data store; and a honey network policy that is configured to route an external network communication from the virtual clone for the target device in the honey network to an external device through the target network environment.

Claim (Index 1):
A system, comprising:\n a processor coupled to a memory, wherein the processor is configured to:\n receive a malware sample at a cloud security service for detonation on a virtual clone for a target device in a honey network, wherein the malware sample is based at least in part on a suspicious network communication destined for the target device in a target network environment that was detected at a firewall device in the target network environment; \n detonate the malware sample executed on the virtual clone for the target device in the honey network, wherein the virtual clone is executed in an instrumented virtual machine (VM) environment; and \n route an external network communication that was initiated from the malware sample executed on the virtual clone for the target device in the honey network to an external device through the target network environment based on a honey network policy for proxying the external communication through the firewall device in the target network environment to the external device based on a honey network routing table that provides a mapping between a first IP address of the virtual clone and a second IP address of the target device to counter IP and peer-checking evasion techniques, wherein the external device is external to the target network environment and is external to the honey network.

Metadata:
- Claim Count in Document: 1.0
- Percentile: 95.0
- Lexical Diversity: 2.33871
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['14503145', '15802314', '15277785', '14503143', '14503125']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.296984748765894
- 35 USC 102 Novelty (BERT): 0.5413061915753526
- Combined Prediction Score: 0.3214168930468399
- Mean Citation Score: 355.320612
- Max Citation Score: 384.80786
- Similarity Product: 328.57938690853365

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test