Microsoft Technology Licensing, LLC

Marchex, Inc.

Bryce B Baril

Alexander G Gounares

Russell Steven Krajec

Charles D Garrett

Matthew Berk

Input sequence information may be analyzed and quantified using n-gram analysis of inputs received by an application. The sequences of inputs may be represented by n-grams, and the frequency of the various n-grams may indicate the 'real world' uses of the application in production, which may be compared to a test suite whose coverage may be quantified using a similar n-gram analysis. A coverage factor may compare the observed inputs to the application in production to the test suite for the application. The n-grams may be further quantified or prioritized by resource utilization and several visualizations may be generated from the data.

N-gram analysis of inputs to a software application

A tracing system may define an origin for consolidating and comparing trace paths within a traced application. A tracer may define an identifier that may be passed through a tracing route, and the identifier may be defined to capture specific instances or groups of instances of traces. The traces may be consolidated into a graphical representation of the program flow. The identifier may be passed across various boundaries, including function boundaries, library boundaries, application boundaries, device boundaries. An analysis system may consolidate or aggregate trace results having the same identifier, and may render such data graphically or provide statistics using the identified datasets.

User interface for selecting tracing origins for aggregating classes of trace data

Comparisons of different versions of an application may be compared using a behavior model of the application. A behavior model may be derived from n-gram analysis of observations of the application in production. The behavior model may include sequences of inputs received by the application or functions performed by the application, where each sequence is an n-gram observed in tracer data. Each n-gram may be coupled with a resource consumption to give a behavior model with performance data. A regression analysis may apply a behavior model derived from a first version of an application to the performance observations of a new version to create an expected performance metric for the new version. A similarly calculated metric from a previous version may be compared to the metric from a new version to determine an improvement or degradation of performance.

Regression evaluation using behavior models of software applications

Regression testing of an application may gather performance tests for multiple functions within an application and determine when performance changes from one version of the application to another. The analysis may be further broken down by input sequences that may be processed by various functions. A detailed regression analysis may be presented as a heat map or other visualizations. A regression testing system may be launched during a build process by automatically launching a set of performance tests against an application. In many cases, the application may be executed in a system with a known or consistent performance capabilities. The application may be executed and tested in a new version and at least one prior version on the same hardware and software execution environment, so that results may be normalized from one execution run to another. A regression testing system may be deployed as a paid-for service that may integrate into a source code repository.

Automated regression testing for software applications

N-grams of input streams or functions executed by an application may be analyzed to identify security breaches or other anomalous behavior. A histogram of n-grams representing sequences of executed functions or input streams may be generated through baseline testing or production use. An alerting system may compare real time n-gram observations to the histogram of n-grams to identify security breaches or other changes in application behavior that may be anomalous. An alert may be generated that identifies the anomalous behavior. The alerting system may be trained using known good datasets and may identify deviations as bad behavior. The alerting system may be trained using known bad datasets and may identify matching behavior as bad behavior.

Security alerting using n-gram analysis of program execution data

A facility for blocking telephone calls is described. The facility is implemented by a telecommunications system that manages assigned and unassigned telephone numbers. The facility determines that a call originator has made two telephone calls to two different unassigned telephone numbers. The facility adds the call originator to a blacklist for a default time period. If the call originator calls any managed telephone number during the default time period, the facility renews the default time period. After the default time period expires, if the call originator makes additional telephone calls to other unassigned telephone numbers, the facility adds the call originator to the blacklist for a time period that is increased from the default time period. The facility increases the time period with each additional call to an unassigned telephone number. Accordingly, the time period is a function of the number of unassigned telephone numbers called by the call originator.

Growing community of inventors

Lynnwood, WA, United States of America

Bryce B Baril