PATENT CLAIM ANALYSIS

Application Number: 16057143
Application Type: Utility
Filing Date: 2018-08
Publication Date: 2019-01
Patent Classification: ["726", "024000"]

Abstract:
Systems and methods for malware detection techniques, which detect malware by identifying the C&C communication between the malware and the remote host. In particular, the disclosed techniques distinguish between request-response transactions that carry C&C communication and request-response transactions of innocent traffic. Individual request-response transactions may be analyzed rather than entire flows, and fine-granularity features examined within the transactions. As such, these methods and systems are highly effective in distinguishing between malware C&C communication and innocent traffic, i.e., in detecting malware with high detection probability and few false alarms.

Claim (Index 13):
An apparatus comprising:\n an interface, which is configured to monitor communications exchanged in a computer network without having all of the communications pass directly through the interface; a processor, which is connected to the interface and configured with software to filter from the communications at least one request-response transaction having at least one feature indicating a presence of malicious software in the request-response transaction, wherein the processor is further configured with the software to extract the at least one request-response transaction and to identify whether the request-response transaction is exchanged with a malicious software therein.

Metadata:
- Claim Count in Document: 50.0
- Percentile: 96.0
- Lexical Diversity: 1.73333
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: True
- Related Applications: ['13874339', '14060933', '14295758', '13072290', '13726475']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.280561457911346
- 35 USC 102 Novelty (BERT): 0.5363876128211097
- Combined Prediction Score: 0.3061440734023224
- Mean Citation Score: 242.857982
- Max Citation Score: 380.64078
- Similarity Product: 312.39698905247934

Labels:
- Claim Label 101: 0
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 0
- Label 101 Adjusted: 0

Dataset: test