PATENT CLAIM ANALYSIS

Application Number: 15924460
Application Type: Utility
Filing Date: 2018-03
Publication Date: 2018-09
Patent Classification: ["726", "023000"]

Abstract:
A data recorder stores endpoint activity on an ongoing basis as sequences of events that causally relate computer objects such as processes and files, and patterns within this event graph can be used to detect the presence of malware on the endpoint. The underlying recording process may be dynamically adjusted in order to vary the amount and location of recording as the security state of the endpoint changes over time.

Claim (Index 5):
A method for malware detection comprising:\n instrumenting a first endpoint to monitor a number of causal relationships among a number of computing objects at a first set of logical locations within a computing environment related to the first endpoint; excluding, from the first set of logical locations, at least one logical location associated with a known, good process; recording a sequence of events causally relating the number of computing objects at the first set of logical locations excluding the at least one logical location associated with the known, good process; creating an event graph based on the sequence of events; applying a malware detection rule to the event graph; and remediating the first endpoint when the malware detection rule and the event graph indicate a compromised security state.

Metadata:
- Claim Count in Document: 46.0
- Percentile: 90.0
- Lexical Diversity: 1.32727
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: True
- Related Applications: ['15484830', '15924449', '15130244', '14485759', '14485771']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2633172325540527
- 35 USC 102 Novelty (BERT): 0.556096792074556
- Combined Prediction Score: 0.2925951885061031
- Mean Citation Score: 308.534664
- Max Citation Score: 417.87433
- Similarity Product: 365.4949540129226

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test