PATENT CLAIM ANALYSIS

Application Number: 16190756
Application Type: Utility
Filing Date: 2018-11
Publication Date: 2019-03
Patent Classification: ["726", "023000"]

Abstract:
In one embodiment, a device in a network maintains a plurality of anomaly detection models for different sets of aggregated traffic data regarding traffic in the network. The device determines a measure of confidence in a particular one of the anomaly detection models that evaluates a particular set of aggregated traffic data. The device dynamically replaces the particular anomaly detection model with a second anomaly detection model configured to evaluate the particular set of aggregated traffic data and has a different model capacity than that of the particular anomaly detection model. The device provides an anomaly event notification to a supervisory controller based on a combined output of the second anomaly detection model and of one or more of the anomaly detection models in the plurality of anomaly detection models.

Claim (Index 15):
The apparatus as in  claim 14 , wherein the process when executed is further operable to:\n send a report of the most anomalous scores, wherein the report of most anomalous scores limits the number of anomaly scores that can be associated with any of the different sets of aggregated traffic data.

Metadata:
- Claim Count in Document: 14.0
- Percentile: 98.0
- Lexical Diversity: 2.45455
- Patent Class: 726.0
- Transitional Phrase Type: none
- Component Type: 0
- Foreign Priority: False
- Related Applications: ['15176652', '15176678', '15184252', '15052257', '15092993']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.3295262716228161
- 35 USC 102 Novelty (BERT): 0.5411105113251768
- Combined Prediction Score: 0.3506846955930522
- Mean Citation Score: 300.710986
- Max Citation Score: 397.57083
- Similarity Product: 304.05838406834897

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test