Microsoft Technology Licensing, LLC

Tuple Software LLC

Craig Henry Wittenberg

Antony S Williams

C Douglas Hodges

Srinivasa R Koppolu

Robert George Atkinson

Edward K Y Jung

Paul J Leach

Barry B MacKichan

Clemens Alden Szyperski

Richard Douglas Hill

Alexander A Mitchell

Jin Li

Jan Stephen Gray

Satish Ramchandra Thatte

James M Lyon

Weili Zhong McClenahan

Shannon J Chan

Rushmi U Malaviarachchi

Gopal Krishna R Kakivaya

Rebecca Ann Norlander

Piyush Gupta

Tom Corbett

Eric Wendell Johnson

Palamalai Gopalakrishnan

Christian Paquin

Jeremy Michael Bares

Johann Posch

Ritchie Nicholas Hughes

Christopher Grant Ashton

Scott G Robinson

Antonty S Williams

David Dominic Anderson

Kim Cameron

Christopher Wellington Brumme

David T Jones

Michael Joseph Toutonghi

Jack Wilson Stokes, Iii

Arun K Nanda

Hervey O Wilson

Tariq Sharif

Seetharaman Harikrishnan

Mark Wahl

Christian Seifert

Andrew D Padawer

Ram Shankar Siva Kumar

Yogesh Kant Roy

Timothy William Burrell

Daniel L Mace

Sorabh Kumar Gandhi

Mark B Grossman

Lucas R Melton

Richard Randall

Vivek Sanjeev Tejwani

Gil Lapid Shafriri

Haijun Zhai

Abhishek Pathak

Anisha Mazumder

Steven P Smith

Ming Hao

Rohit Sanjay Galwankar

Alex Weinert

Phil Stradling

Matthew Penarczyk

Dave Shute

Himanshu Chandola

Crispin Goswell

Ryan M Beieler

Walter L Hill

Gregory F Whitten

A computing system is provided, including a processor and memory storing instructions that cause the processor to execute a domain name service (DNS) log analyzer configured to identify a container identifier associated with a DNS request and a destination IP address associated with a DNS response to the DNS request, using one or more DNS logs, a fleet management system record analyzer configured to identify a first service associated with the container identifier and a second service associated with the destination IP address, using one or more fleet management system logs, and a dependency map generator configured to generate a service-to-service dependency map between the identified first service and the identified second service.

Generating service-to-service dependency map from DNS and fleet management system logs

Techniques are described herein that are capable of performing an aggregation-based determination of resiliency of a cloud computing service to chaos events. Chaos events are executed against a cloud computing service during a time frame that includes multiple time periods. For each chaos event, service health indexes (SHIs) that correspond to the time periods are calculated. Each SHI indicates an extent to which indicators, which represent respective measurements of performance of the cloud computing service during the respective time period, satisfy respective criteria. The SHIs for each chaos event are analyzed to provide a respective resiliency score. At least some of the resiliency scores of the respective chaos events are aggregated to provide an aggregated resiliency score, which represents resiliency of the cloud computing service to the chaos events.

Aggregation-based determination of cloud computing service resiliency to chaos events

Embodiments described herein provide enhanced computer- and network-based methods, techniques, and systems for incorporating indoor and outdoor location technology to automatically discover, track, and publish ad-hoc engagement opportunities for computer-aided facilitation of dynamic connections between end-users and different levels of engagement in a dynamic venue setting. In one embodiment, the ACES server the ACES server comprises one or more functional components/modules that work together to provide automatic notification of ad-hoc engagement opportunities and/or events and multiple levels of engagement in a dynamic venue setting to client devices currently present in the venue. For example, an ACES server may comprise a client device and location processing engine, a layered identification and security support, a message brokering component, interfaces to third party services and content, an ad-hoc opportunity and event determination, tracking, and notification engine, a dynamic interest and attribute matching rule engine, and a common user interface engine.

Ad-hoc venue engagement system

Provided herein are methods, systems, and computer program products for intelligent detection of multistage attacks which may arise in computer environments. Embodiments herein leverage adaptive graph-based machine-learning solutions that can incorporate rules as well as supervised learning for detecting multistage attacks. Multistage attacks and attack chains may be detected or identified by collecting data representing events, detections, and behaviors, determining relationships among various data, and analyzing the data and associated relationships. A graph of events, detections, and behaviors which are connected by edges representing relationships between nodes of the graph may be constructed and then subgraphs of the possibly enormous initial graph may be identified which represent likely attacks.

Intelligent system for detecting multistage attacks

Identify a set or session of processes as having certain characteristics. A method obtains a known set or session of processes, wherein the known set or session of processes has the certain characteristics. A set or session of processes to be evaluated is obtained. A weighted similarity measure is performed between the known set or session of processes and the set or session of processes to be evaluated. The weighted similarity measure is performed element wise, where a comparison is performed for each defined element in the set or session of processes to be evaluated against elements in the known set or session of processes.

Large scale malicious process detection

In a networking environment, multiple end-users applications running on computing devices may operate behind a respective NAT device. Information transferred from one end-user application to another can be accomplished by establishing a connection from one private network to another. The NAT device translates information related to an end-user application operating within a private network to information that is understood by the public network environment. This translated information is communicated to the associated NAT device of the intended recipient. The NAT device of the intended recipient translates the public environment related information to information for the end-user in the private network.

Network address translation traversals for peer-to-peer networks

Binding a security artifact to a service provider. A method includes generating a pseudonym for a security artifact. The pseudonym is an identifier of the security artifact to the service provider that is unique to the service provider in that the pseudonym is not used to identify the security artifact to other service providers. Further, the pseudonym uniquely identifies the particular security artifact to the service provider even when a user has available a number of different security artifacts to authenticate to the same service provider to access a user account for the user. The method further includes providing the pseudonym for the security artifact to the service provider. The pseudonym for the security artifact is bound with a user account at the service provider for a user associated with the security artifact.

Cryptographic device that binds an additional authentication factor to multiple identities

The present invention relates to an XML application framework (XAF). XAF applications are data driven such that all operations with the computer system are data focused. In addition, the components used in the XAF application are instantiated and connected according to how the data is displayed and what type of data is used. Applications within XAF comprise a user interface (UI) connector, an action module, and a data connector. UI connectors receive UI events and connect the UI event to an action module. The action module generates a standard format action from the UI event and sends it to the data connector. The data connector translates the standard format action into a data-specific action that changes data in a data store. A data connector then sends a standard format data representation corresponding to the changed data back to the UI connector to provide the changed data to the UI.

XML application framework

A secure collaboration mechanism between two organizations may be created based on a set of security system definitions provided by a receiving organization to a providing organization. The providing organization may create a shared portal that has a federated access between both organizations and has access and other security functions. The data collection process may be automated using digitally signed forms or other documents to analyze the security practices of the receiving organization and create a shared portal that has increased or decreased security provisions compared to the providing organization's standard procedures. The collaboration mechanism may be implemented in a bilateral arrangement, a hub and spoke arrangement, and a multilateral arrangement.

Automated security analysis for federated relationship

Creating a token for use by an entity when digitally signing documents. In a computing environment, a digital identity representation for an entity is accessed. The digital identity representation includes information identifying identity attributes about the entity and capabilities of an identity provider that provides tokens for use by the entity. Context information is accessed. The context information includes information about one or more of which, how or where the attributes for the entity identified in the digital identity representation will be used. A security token is created from the information in the digital identity representation and the context information. The security token makes assertions by the identity provider. The assertions are based on the information in the digital identity representation. The token further includes information related to at least a portion of the context information.

Digitally signing documents using identity context information

A method and system for retrieving and maintaining presentation data in a presentation cache is provided. In a preferred embodiment, a presentation cache object provides a presentation cache with multiple cache entries. Each entry contains an indication of the format of the presentation data and the presentation data stored in that particular format. In addition, other information, such as the advisees of advisory connections for notification of cache updates, can be maintained. The presentation cache object responds to requests for retrieving source object data by returning presentation data cached within the presentation cache when it is available. In addition, the presentation cache object determines when it should delegate requests to the source object and when it can satisfy them on its own. The presentation cache object can return presentation data to a requesting client program even if the server program implementing the source object is unavailable or not running. The presentation cache object can also choose to persistently store its cache entries so that the presentation cache is maintained when the source object is closed. In addition, client programs can provide control over the frequency and subject of presentation data updates within the presentation cache.

Method and system for caching presentation data

Growing community of inventors

Mercer Island, WA, United States of America

Craig Henry Wittenberg