Microsoft Technology Licensing, LLC

Dale R Rolf

Ian James McCarty

Henry Lyons

Sencer Nuri Yeralan

David John Janson

Minh Trong Tran

Thomas George Yaryan

Frank Joseph Bussell

Nicholas Allan Schwerzler

Scott Randall Shell

David John Linsley

Md Nazmus Sakib

Daryn Elliot Robbins

Kinshumann

JianMing M Zhou

Sheetal Guttigoli

Robert Charles Webster

Steven T Henderson

Ronald Craig Grumbach

Ian Mccarty

- Kinshumann

Jianming M Zhou

Systems are provided for generating, modifying and using SBOMs for facilitating risk assessment and threat mitigation for corresponding programs, and particularly for large programming builds. The creation and modification of the SBOMs includes processes for omitting declarations referenced in chunk SBOMs of program chunks incorporated into a final programming build associated with a build SBOM, but which are not actually utilized by the final programming build, as well as processes for adding new declarations for code segments that are not declared in the related chunk SBOMs, even though the code segments are utilized by the final programming build. Systems are also configured to use SBOMs in combination with configuration restriction records to assess and resolve threat events in a manner that can prevent unnecessary remedial actions for threat events that appear to be relevant to one or more files or dependencies incorporated into a program.

Systems and processes for creating software bill of materials for large distributed builds

Systems and processes for facilitating edits to software bill of materials

Embodiments are directed to managing software components loaded on a device by identifying a platform manifest having a valid certificate, confirming that the platform manifest is bound to the device, identifying components listed on the platform manifest, confirming that the listed components have a valid certificate, and loading listed components with valid certificates on the device. The components may be binaries and packages for an operating system. The components may be signed in an embedded manner or with detached signatures. The platform manifest may be bound to the device in a manner that allows for identification of unauthorized platform manifests.

Securely defining operating system composition without multiple authoring

Testing a computer system by simulating the computer system activity that would occur under a number of projected user patterns by navigating through a decision tree. Each of the use patterns may perform a number of standard functions (e.g., phone, email, Web, or the like) that are inherent to the computer system. For each of the projected use patterns, weights are assigned to each of the standard functions. A standard function is then selected based on the weight assigned to the standard function given the projected use pattern. Then, a probability tree is navigated to determine a particular test to implement.

Stochastic simulation of computer activity based on user categories

Growing community of inventors

Renton, WA, United States of America

Dale R Rolf