PATENT CLAIM ANALYSIS

Application Number: 16047427
Application Type: Utility
Filing Date: 2018-07
Publication Date: 2019-06
Patent Classification: ["726", "025000"]

Abstract:
Methods, systems and media for evaluating layered computer security products are provided. In some embodiments, the method comprises: (a) identifying portions of attack data associated with an attack; (b) linking the portions of attack data; (c) testing security products using the linked attack data, at least two of the security products using different portions of the linked attack data; (d) storing the results of the testing; (e) repeating (a)-(d) for multiple attacks; receiving information identifying a subset of the security products from a remote computing device; identifying a first set of detected attacks for each of the plurality of security product using the stored results; determining a number of attacks in a union of each of the first sets of identified attacks; determining a detection rate for the identified security products based on the union and the number of tested attacks; and causing the detection rate to be presented.

Claim (Index 17):
A non-transitory computer-readable medium containing computer executable instructions that, when executed by a processor, cause the processor to perform a method for evaluating layered security products, the method comprising:\n (a) recording attacks on a honey pot in real-time, identify a successful one of the attacks as a known attack, and save attack data associated with the known attack; (b) identifying a plurality of portions of the attack data associated with the known attack, wherein at least one of the plurality of portions of attack data is at least a portion of an executable file delivered by the known attack; (c) testing a plurality of security products using the linked attack data of the known attack, wherein at least two of the security products use different portions of the linked attack data to detect the attack and at least one of the different portions of the linked attack data is the at least a portion of the executable file; (d) storing results of the testing in association with information identifying the known attack; (e) repeating (c) and (d) for a plurality of known attacks; receiving information identifying a subset of the plurality of security products from a remote computing device; identifying for each of the subset of the plurality of security products, a first set of identified known attacks detected by the security product from the plurality of tested known attacks using the stored results; and determining a number of attacks in a union of each of the first sets of identified known attacks.

Metadata:
- Claim Count in Document: 62.0
- Percentile: 95.0
- Lexical Diversity: 2.25
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['14083327', '14685475', '15594049', '15055653', '14974583']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2329776253469017
- 35 USC 102 Novelty (BERT): 0.5532100394521622
- Combined Prediction Score: 0.2650008667574278
- Mean Citation Score: 235.32834
- Max Citation Score: 405.63995
- Similarity Product: 367.6857213609397

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 0
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test