PATENT CLAIM ANALYSIS

Application Number: 15862067
Application Type: Utility
Filing Date: 2018-01
Publication Date: 2018-07
Patent Classification: ["726", "024000"]

Abstract:
A plurality of events associated with each of a plurality of computing nodes that form part of a network topology are monitored. The network topology includes antivirus tools to detect malicious software prior to it accessing one of the computing nodes. Thereafter, it is determined that, using at least one machine learning model, at least one of the events is indicative of malicious activity that has circumvented or bypassed the antivirus tools. Data is then provided that characterizes the determination. Related apparatus, systems, techniques and articles are also described.

Claim (Index 10):
The method of  claim 1 , wherein the at least one machine learning model uses unsupervised learning methods that characterize qualitative changes on a node based on corresponding monitored events.

Metadata:
- Claim Count in Document: 1.0
- Percentile: 86.0
- Lexical Diversity: 1.65
- Patent Class: 726.0
- Transitional Phrase Type: none
- Component Type: 0
- Foreign Priority: False
- Related Applications: ['15588131', '14691027', '15441952', '14340397', '14620048']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2875950133756872
- 35 USC 102 Novelty (BERT): 0.4929854742157513
- Combined Prediction Score: 0.3081340594596937
- Mean Citation Score: 155.88214599999995
- Max Citation Score: 177.03743
- Similarity Product: 113.41543722174706

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test