Microsoft Technology Licensing, LLC

Ahmed Awad-idris

Sunil Pai

Pavan Gopal Bandla

Ramin L Halviatti

LiLei Cui

Christopher Michael Jeffords

James Matthew Atkins

Jessica Michelle Satnick

Ravi Kumar Lingamallu

Amritaputra Bhattacharya

Kaymie Sato-Hayashi-Kagawa Shiozawa

Srikanth Bolisetty

Noah Bergman

Ayala Miller

Access to secured items in a computing system is requested instead of being persistent. Access requests may be granted on a just-in-time basis. Anomalous access requests are detected using machine learning models based on historic patterns. Models utilizing conditional probability or collaborative filtering also facilitate the creation of human-understandable explanations of threat assessments. Individual machine learning models are based on historic data of users, peers, cohorts, services, or resources. Models may be weighted, and then aggregated in a subsystem to produce an access request risk score. Scoring principles and conditions utilized in the scoring subsystem may include probabilities, distribution entropies, and data item counts. A feedback loop allows incremental refinement of the subsystem. Anomalous requests that would be automatically approved under a policy may instead face human review, and low threat requests that would have been delayed by human review may instead be approved automatically.

Anomaly-based mitigation of access request risk

Growing community of inventors

Sammamish, WA, United States of America

Ahmed Awad-idris