Microsoft Technology Licensing, LLC

Ambrose Thomas Treacy

Robert Andrew Little

Venkatesh Veeraraghavan

Bryant Fong

Benoit Schmitlin

Javier Dalzell

Christian Roy

Maithili Dandige

Brian M Jones

Marcin Sawicki

Christopher M White

Eric B Fox

Jonathan Bailor

David Charles LeBlanc

Karthikeyan Subramanian

Daniel Robert Snyder

Shandan Zhou

Saurabh Agarwal

Benjamin J Bunker

Christopher Cushen White

Aaron E Erlandson

Walter David Pullen

Sanjay Ramanujan

Gowtham Natarajan

Aaron Everett Erlandson

Elizabeth Jeanne Sheldon

Bikramjit S Kalra

Maitreyee Ramprasad Joshi

Vinayak Ramnath Karnataki

Neha Keshari

Yash Purohit

David Leblanc

Maithili V Dandige

A method for minimizing allocation failures in a cloud computing system without overprovisioning may include determining a predicted supply for a virtual machine series in a system unit of the cloud computing system during an upcoming time period. The predicted supply may be based on a shared available current capacity and a shared available future added capacity for the virtual machine series in the system unit. The method may also include predicting an available capacity for the virtual machine series in the system unit during the upcoming time period. The predicted available capacity may be based at least in part on a predicted demand for the virtual machine series in the system unit during the upcoming time period and the predicted supply. The method may also include taking at least one mitigation action in response to determining that the predicted demand exceeds the predicted supply during the upcoming time period.

Capacity management in a cloud computing system using virtual machine series modeling

An extensible mechanism for providing access control for logical objects in a network environment. A security broker is able to dynamically register one or more claims providers, each of which can assert one or more claims about logical objects. The claims providers may be purpose built or may be third party applications which expose data or business rules for use. Claims may be augmented by additional claims providers after the original claim is asserted. The applicability of claims may be scope limited either at the time the claims provider is registered or when the user requests that a security token be issued.

Extensible mechanism for securing objects using claims

Embodiments are described for blocking the opening of a file. Some embodiments include receiving a request to open a file. In response, a portion of the file's data is examined to determine a true file format for the file. A determination is then made as to whether the true file format of the file has been set as blocked. Based on the determination that the file format is blocked from opening, the file is prevented from being loaded into memory and from being accessed. A message is then displayed to a user indicating that the file has been blocked from opening.

File blocking mitigation

Embodiments are described for removing malicious code from a file in a first file format by converting the file into a converted file of a second file format. In embodiments, converting the file eliminates malicious code embedded within the file from being stored in the converted file. The conversion is performed within a restricted computer process that has restricted privileges limiting its access to an operating system and an underlying computer system. As a result, even if malicious code embedded within the file executes while the file is being converted into the converted file, the damage to a computer system is mitigated because of the limited privileges provided to the restricted process.

File conversion in restricted process

Methods and systems are provided for allowing software applications capable of reading and saving Extensible Markup Language (XML) representations of documents to quickly and efficiently detect the presence of executable code contained in a given document being read or saved by the software applications. Examples of executable code include, but are not limited to macros, VBA macros, OLE code, OCX or ActiveX controls, embedded executable objects, and the like.

Anti-virus security information in an extensible markup language document

Growing community of inventors

Woodinville, WA, United States of America

Ambrose Thomas Treacy