Microsoft Technology Licensing, LLC

Ali Alabbas

Steven J Becker

Jason Joseph Weber

Christian Seifert

Charles Strempler

Abhishek Sagar

Mara Beth Fortini

Christian Stockwell

Michael David Mccormack

Sinclaire Renee Hamilton

Eric Paul Douglas

Robert G Lefferts

Brian Keith Catlin

Richard Joseph Murillo

Rupo Zhang

Paresh Maisuria

The technology described herein identifies and mitigates phishing attempts by analyzing user input received at the operating system level. Initially, a credential, such as a username or password, is registered with the threat detection system. The technology described herein intercepts user input at the operating system level, generates a hash of the input, and compares it with a hash of a credential being monitored. A credential entry is detected when a hash for the character string entered matches a hash for a credential being monitored. The technology described herein will perform a threat assessment when a secret entry is detected. The threat assessment may use the application context and the network context as inputs to the assessment. Various mitigation actions may be taken when a threat is detected.

Credential input detection and threat analysis

In one embodiment, a computer system detects a notification for a service worker. The service worker being configured to process the notification for a website. The computer system monitors a behavior of the service worker in response to receiving the notification and compares the behavior to one or more policies for the notification to determine that the behavior violated at least one of the one or more policies. The one or more policies describe restrictions on behavior for producing a visible result for the notification or responding to the notification within a time period. The computer system then performs a mitigation action based on the service worker violating the at least one of the one or more policies, the mitigation action restricting an aspect of use of the notification for the website.

Service worker push violation enforcement

In one embodiment, a computer system receives a signal to associate a website with an entity on a user interface. The entity is managed by an operating system running on the computer system. The computer system associates the entity with a push channel that is configured to push updates for the website. The push channel is configured with the entity as an endpoint. An update is received via the push channel at the operating system and the computer system associates the update with the entity by correlating the endpoint of the push channel to the entity. The computer system then causes a notification to be output for the entity on the user interface using the operating system.

Notification updates for saved sites

Growing community of inventors

Sammanish, WA, United States of America

Ali Alabbas