Microsoft Technology Licensing, LLC

Craig Alan Gick

Raul Garcia

Vijay Gajjala

Stephane Plante

Erik Ismert

Sameer Tejani

Timothy Arthur Gill

Jack Smith Richins

Ruslan Pavlovich Ovechkin

Adrian Sorin Baras

Pierre N Martin

James T Jacoby

Robert E Walters

Jiazhen Wu

Ajay S Kang

Sung Soo Kang

Liying Jiang

Richard K Costleigh

Luke Jared Lenhart

Embodiments are disclosed for managing and providing access to a collection of digital resources. One embodiment provides a method comprising receiving a request to access a resource for a principal and determining one or more principal groups to which the principal belongs. The method further comprises obtaining resource set membership information indicating a resource set to which the resource belongs, and obtaining resource set access policy information for the resource set to which the resource belongs. The method yet further comprises determining whether the principal is allowed to access the resource based on the principal group membership information and the resource set access policy information, and, if the principal is allowed to access the resource, then permitting access to the resource by the principal.

Discretionary policy management in cloud-based environment

Various technologies and techniques are disclosed for improving configuration of database audits. Multiple audits can be created for a database. Any one of the audits can be turned off without impacting an operation of any remaining audits. Database audits can be ported from one database server instance to another. Database audit metadata is stored in a database separately from a database server instance to which the database is attached. The database can be detached from the database server instance and attached to a second database server instance, with the database audit metadata moving along with the database automatically. Any audits associated with the database audit metadata are automatically activated for the second database server instance. Database audits can be configured using a hierarchical model.

Configuration of multiple database audits

Systems and methods that incorporate fuzzing capabilities within an SQL server to facilitate penetration testing. A fuzzing component associated with the SQL server provides an entry point for accessing the fuzzing system to update explicit user specified parameters associated with SQL, wherein the server's in depth knowledge regarding semantics of the language code (e.g., manner of parsing) can be employed to determine vulnerabilities thereof.

Fuzzing system and method for exhaustive security fuzzing within an SQL server

Growing community of inventors

Woodinville, WA, United States of America

Craig Alan Gick