A federal appeals court has thrown out a $185 million jury verdict against Gen Digital, the maker of Norton antivirus software, ruling that the Columbia University patents underpinning the case cover an abstract idea rather than a genuine technical invention. The decision unwinds years of litigation over a malware-detection technique and sends the dispute back to a lower court for further review. At stake is not just a large damages award but a broader question about how far patent protection can extend into the architecture of cybersecurity software itself.
The patents at issue described a method for spotting "anomalous" behavior in computer programs by running them inside an emulator and comparing their actions against a model of expected function calls - essentially a way of catching malware by noticing when software does something it shouldn't. Columbia argued that Norton's SONAR/BASH detection feature, built into several of its consumer security products, infringed this approach. For everyday users who rely on commercial antivirus tools or on P2P-friendly servers as part of a broader privacy and security setup, the case is a reminder that the detection engines working quietly in the background are themselves the product of contested intellectual property battles, not simply neutral technical plumbing.
Why the Patents Failed the Abstraction Test
Under the Supreme Court's 2014 ruling in Alice Corp. v. CLS Bank, courts must ask first whether a patent claim is directed at an abstract idea, and if so, whether it nonetheless contains an "inventive concept" that elevates it beyond that idea. The district court had initially sided with Columbia, finding the patents aimed at concretely "improving computer virus scanning." The Federal Circuit disagreed, concluding that comparing observed behavior to an expected model - even when executed through an emulator - describes a general method of analysis rather than a specific technical improvement. That distinction matters enormously in software patent law, where claims describing what a system accomplishes, rather than how it accomplishes it in a technically specific way, routinely fail to survive eligibility challenges.
The ruling does not end the case. Because the lower court never reached the second step of the Alice framework, the appeals court sent the eligibility question back for further proceedings, leaving open the possibility that Columbia could still establish an inventive concept sufficient to preserve the patents. In the meantime, the court left largely undisturbed the jury's findings on claim construction, infringement, and willfulness, suggesting that the case will turn almost entirely on this narrower legal question rather than a factual dispute about whether Norton's software actually behaved as Columbia described.
Foreign Sales and a Shrinking Damages Picture
The appeals court also rejected a significant portion of the original damages calculation, ruling that Norton could not be held liable for royalties tied to sales made to customers outside the United States simply because the software was initially distributed from domestic servers. That holding alone erased tens of millions of dollars from the original verdict and reflects a recurring tension in patent law: American patent rights generally stop at the border, even when a company's technical infrastructure for distributing a product is based domestically. As software distribution increasingly relies on global content delivery networks, courts are being forced to draw sharper lines around where, legally speaking, an infringing act actually occurs.
What Happens Next
With the eligibility question unresolved and enhanced damages wiped out following a related ruling involving Norton's outside counsel, the case returns to the district court for a fresh round of analysis. The outcome will shape not only the financial stakes for both companies but also how much latitude future litigants have to patent behavioral-detection techniques that sit at the core of modern cybersecurity software - a question with consequences well beyond this single dispute.