Microsoft Technology Licensing, LLC

Adam Shostack

John Eugene Neystadt

Lawrence William Osterman

Arie Friedman

Ivan Medvedev

Gregory Aaron Kohanim

John Neystadt

Evaluating a threat model for structural validity and descriptive completeness. A threat modeling application provides a progress factor or other overall score associated with the structural validity and descriptive completeness of the threat model being evaluated. The structural validity is evaluated based on a data flow diagram associated with the threat model. The descriptive completeness is evaluated by reviewing descriptions of threat types in the threat model. The progress factor encourages modelers to provide effective models to a model reviewer, thus saving time for the model reviewer.

Evaluating the effectiveness of a threat model

Aspects of the subject matter described herein relate to collecting anonymous and traceable telemetry. In aspects, a telemetry source may obtain a certificate or other data from an escrow certificate issuer. The certificate includes information usable by a certificate collector to verify that the certificate is valid, but does not include information usable to identify the telemetry source to the telemetry collector.

Collecting anonymous and traceable telemetry

Growing community of inventors

Seattle, WA, United States of America

Adam Shostack