PATENT CLAIM ANALYSIS

Application Number: 16109379
Application Type: Utility
Filing Date: 2018-08
Publication Date: 2019-01
Patent Classification: ["726", "023000"]

Abstract:
A security system detects anomalous activity in a network. The system logs user activity, which can include ports used, compares users to find similar users, sorts similar users into cohorts, and compares new user activity to logged behavior of the cohort. The comparison can include a divergence calculation. Origins of user activity can also be used to determine anomalous network activity. The hostname, username, IP address, and timestamp can be used to calculate aggregate scores and convoluted scores.

Claim (Index 4):
The method of  claim 3 , further comprising:\n receiving the attack origin distribution data for a plurality of countries; and interpolating attack origin distribution data for a country not in the plurality of countries.

Metadata:
- Claim Count in Document: 51.0
- Percentile: 96.0
- Lexical Diversity: 1.8
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['14970317', '15224443', '15462540', '15201856', '12059076']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.3304035963890244
- 35 USC 102 Novelty (BERT): 0.5596113788686187
- Combined Prediction Score: 0.3533243746369838
- Mean Citation Score: 339.0878620000001
- Max Citation Score: 427.70728
- Similarity Product: 266.01556398118976

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test