PATENT CLAIM ANALYSIS

Application Number: 16160856
Application Type: Utility
Filing Date: 2018-10
Publication Date: 2019-03
Patent Classification: ["726", "023000"]

Abstract:
A system, method and computer program product for detecting distributed denial-of-service (DDoS) attacks is provided. Current aggregated flow information for a defined period of time is analyzed. It is determined whether network flow increased above a defined flow threshold value to a second data processing system connected to a network within the defined period of time based on analyzing the current aggregated flow information. In response to determining that the network flow has increased above the defined flow threshold value to the second data processing system connected to the network within the defined period of time, it is determined that the second data processing system is under a DDoS attack.

Claim (Index 14):
A computer program product for detecting distributed denial-of-service (DDoS) attacks, the computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions executable by a first data processing system to cause the first data processing system to perform a method comprising:\n analyzing, by the first data processing system, current aggregated flow information for a defined period of time; determining, by the first data processing system, whether network flow increased above a defined flow threshold value to a second data processing system connected to a network within the defined period of time based on the analyzing of the current aggregated flow information; responsive to the first data processing system determining that the network flow has increased above the defined flow threshold value to the second data processing system connected to the network within the defined period of time, determining, by the first data processing system, that the second data processing system is under a DDoS attack; monitoring, by the first data processing system, current local network flow information corresponding to data packets received by the first data processing system via the network; generating, by the first data processing system, a current local network flow information message containing the current local network flow information; computing, by the first data processing system, a hash value of the current local network flow information message; and broadcasting, by the first data processing system, the current local network flow information message to a plurality of randomly selected data processing systems connected to the network based on the hash value of the current local network flow information message.

Metadata:
- Claim Count in Document: 56.0
- Percentile: 97.0
- Lexical Diversity: 2.10714
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15718092', '15811929', '10419548', '10723450', '12126976']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2490383145973988
- 35 USC 102 Novelty (BERT): 0.4996033981060143
- Combined Prediction Score: 0.2740948229482604
- Mean Citation Score: 233.971918
- Max Citation Score: 293.6757
- Similarity Product: 290.80122658320664

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test