PATENT CLAIM ANALYSIS

Application Number: 16008374
Application Type: Utility
Filing Date: 2018-06
Publication Date: 2018-10
Patent Classification: ["726", "024000"]

Abstract:
Disclosed are devices, systems, apparatus, methods, products, media and other implementations, including a method that includes obtaining hardware-based micro-architectural data, including hardware-based micro-architectural counter data, for a hardware device executing one or more processes, and determining based, at least in part, on the hardware-based micro-architectural data whether at least one of the one or more processes executing on the hardware device corresponds to a malicious process. In some embodiments, determining based on the hardware-based micro-architectural data whether the at least one of the one or more processes corresponds to a malicious process may include applying one or more machine-learning procedures to the hardware-based micro-architectural data to determine whether the at least one of the one or more processes corresponds to the malicious process.

Claim (Index 14):
A system for detection of anomalous program execution, the system comprising:\n a hardware device executing one or more processes; and an antivirus engine in communication with the hardware device, the antivirus engine configured to:\n obtain hardware-based micro-architectural data representative of a trace of micro-architectural activities performed by a process, from the one of the one or more processes executing on the hardware device, over a time period, the hardware-based micro-architectural data including hardware-based microarchitectural counter data; and \n determine based on the hardware-based micro-architectural data representative of the micro-architectural activities performed by the process executing on the hardware device over the period of time, and on multiple data sets of micro-architectural data representative of respective traces of activities performed by different anomalous processes executable on the hardware device during respective time periods, whether the process executing on the hardware device corresponds to one of the different anomalous processes.

Metadata:
- Claim Count in Document: 50.0
- Percentile: 94.0
- Lexical Diversity: 2.53704
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['14778043', '14494758', '12954454', '14707977', '14086574']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2147682777361104
- 35 USC 102 Novelty (BERT): 0.4978577612892905
- Combined Prediction Score: 0.2430772260914285
- Mean Citation Score: 178.319346
- Max Citation Score: 268.35562000000004
- Similarity Product: 234.03496642040847

Labels:
- Claim Label 101: 0
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 0
- Label 101 Adjusted: 0

Dataset: test