Microsoft Technology Licensing, LLC

Anthony Blumfield

Jason Garms

Gilad Golan

Saud A Alshibani

Scott Field

Anatoly Victor Koretsky

Edward William Schaefer

Robert Peter Bisso

Andrew J Newman

Ronald A Franczyk

Eitan Klein

Scott A Field

A facility for applying a software patch is described. Using an automatic patching agent, the facility receives the software patch. In response to receiving the software patch, without user intervention, the facility performs the following acts: First, the facility identifies an instance of an executable module that is currently loaded, and to which the received software patch pertains. Second, the facility applies the received software patch to the identified loaded executable module instance to modify the behavior of the identified executable module instance.

Efficient patching

Systems, methods, and/or techniques ('tools') that relate to an automated service for blocking malware hosts are described herein. In different implementations, the tools receive network addresses identifying hosts that are discovered to contain malware. The tools also provide the network addresses to a collection and storage service. Other components provided by the tools receive the network addresses from, for example, a plurality of reporting clients. These components may aggregate the network addresses across the reporting clients, and store instances of the malware and associated malware addresses.

Automated service for blocking malware hosts

A method and system for detecting and managing potential malware utilizes a preliminary signature to scan content and detect potential malware content based upon characteristics that match the preliminary signature. The detected content is detained for a predetermined period of time. If an updated signature is not received, the detained content may be purged, released or quarantined, based upon predetermined content policy. If an updated signature is received, the detained content is released from detention and rescanned with the updated signature. The content is then treated in accordance with the content policy, and again, can be purged, released, or quarantined.

Malware detention for suspected malware

A facility for automatically processing software patches is described. The facility receives in a computing system a distinguished patch package for modifying the behavior of a programmatic entity. The facility automatically extracts from the distinguished patch package (1) patch application information that identifies a distinguished programmatic entity against which the patches to be applied, and (2) patch behavior information that specifies a manner in which to modify the behavior of the distinguished programmatic entity. The facility automatically adds to a patch table a distinguished entry containing the extracted patch application information and patch behavior information.

A facility for augmenting software in a target computer system is described. The facility receives and augmentation specification in the target computer system. The augmentations specification specifies: (a) a function to be augmented, (b) a parameter of the function to be tested, (c) a test to apply to the specified parameter, and (d) and modification to perform to the behavior of the function if the specified test is not satisfied by the specified parameter. When the specified function is invoked on the target computer system, if the specified tested is not satisfied by the specified parameter, the facility performs the specified modification to the behavior of the specified function.

A method and system are disclosed for reliably distributing file data from a single server to multiple client computers using a cyclical multicast approach. By 'cyclical,' it is meant that data is distributed repeatedly onto the network at a certain period. The server transmits metadata asynchronously onto the network via a first communication channel, and file data via a second communication channel. Both data sets are received by one or more client devices operating a data catch module, which listens for metadata and file data from the network via a first and second communication channel. Once the metadata is received, the first channel is disconnected, and the one or more client devices operating the data catch module listen for file data for which the metadata is associated. Any file data not received during one cycle can be received by the client device in a subsequent cycle.

Growing community of inventors

Redmond, WA, United States of America

Anthony Blumfield