PATENT CLAIM ANALYSIS

Application Number: 16151085
Application Type: Utility
Filing Date: 2018-10
Publication Date: 2019-01
Patent Classification: ["726", "022000"]

Abstract:
This disclosure provides techniques for pooling and searching network security events reported by multiple sources. As information representing a security event is received from one source, it is searched against a central or distributed database representing events reported from multiple, diverse sources (e.g., different client networks). Either the search or correlated results can be filtered and/or routed according at least one characteristic associated with the networks, for example, to limit correlation to events reported by what are presumed to be similarly situated networks. The disclosed techniques facilitate faster identification of high-relevancy security event information, and thereby help facilitate faster threat identification and mitigation. Various techniques can be implemented as standalone software (e.g., for use by a private network) or for a central pooling and/or query service. This disclosure also provides different examples of actions that can be taken in response to search results.

Claim (Index 7):
The apparatus of  claim 6 , wherein:\n the instructions when executed are to cause the at least one computer to determine the correlation by identifying at least one first internet protocol (IP) address associated with the possible threat to the first network and also with the possible threats to the subset of one or more of the respective, diverse networks; the information representing the possible threat to the first network and the possible threats to the one or more respective, diverse networks in the subset also collectively include one or more second IP addresses corresponding to one or more of (i) the first network or (ii) one of the respective, diverse networks; the instructions when executed are to further cause the at least one computer to sanitize information conveyed by the notification message to the destination, by formatting said notification message in a manner where no second IP address is included.

Metadata:
- Claim Count in Document: 8.0
- Percentile: 97.0
- Lexical Diversity: 1.72043
- Patent Class: 726.0
- Transitional Phrase Type: none
- Component Type: 0
- Foreign Priority: False
- Related Applications: ['14615202', '15651924', '15373662', '14819443', '15620596']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2970203666625346
- 35 USC 102 Novelty (BERT): 0.5135638972165706
- Combined Prediction Score: 0.3186747197179382
- Mean Citation Score: 252.19002200000003
- Max Citation Score: 335.8075
- Similarity Product: 219.75858982115983

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test