PATENT CLAIM ANALYSIS

Application Number: 15937897
Application Type: Utility
Filing Date: 2018-03
Publication Date: 2019-10
Patent Classification: ["455", "410000"]

Abstract:
Advanced persistent threats to a mobile device are detected and prevented by leveraging the built-in mandatory access control (MAC) environment in the mobile operating system in a “stateful” manner. To this end, the MAC mechanism is placed in a permissive mode of operation wherein permission denials are logged but not enforced. The mobile device security environment is augmented to include a monitoring application that is instantiated with system privileges. The application monitors application execution parameters of one or more mobile applications executing on the device. These application execution parameters including, without limitation, the permission denials, are collected and used by the monitoring application to facilitate a stateful monitoring of the operating system security environment. By assembling security-sensitive events over a time period, the system identifies an advanced persistent threat (APT) that otherwise leverages multiple steps using benign components. Once an APT has been detected, a mitigation action (e.g., terminating the malicious process) is undertaken.

Claim (Index 9):
The apparatus as described in  claim 8  wherein the program code is further configured to take an action to mitigate the advanced persistent threat upon determining that the set of security-sensitive events match against the signature.

Metadata:
- Claim Count in Document: 53.0
- Percentile: 90.0
- Lexical Diversity: 1.70874
- Patent Class: 455.0
- Transitional Phrase Type: none
- Component Type: 0
- Foreign Priority: False
- Related Applications: ['15010067', '15547402', '14615020', '14751662', '13172979']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.6926964561783011
- 35 USC 102 Novelty (BERT): 0.4878788301379193
- Combined Prediction Score: 0.6722146935742629
- Mean Citation Score: 148.85777199999995
- Max Citation Score: 168.27083000000005
- Similarity Product: 110.48650636456254

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test