Microsoft Technology Licensing, LLC

David Nicholas Yost

Alexander Nikolayev

Mihai Costea

Weisheng Li

Ravi Kiran Reddy Poluri

Michael Abraham Betser

Hua Ding

Phanindra Pampati

Methods, systems, and computer storage media for providing a multi-attribute cluster-identifier that supports identifying malicious activity in computing environments. An instance of an activity having an attribute set can be assessed. The attribute set of the instance of the activity is analyzed to determine whether the instance of the activity is a malicious activity. The attribute set of the instance of the activity is compared to a plurality of multi-attribute cluster-identifiers of previous instances of the activity, such that, a determination that the instance of the activity is a malicious activity is made when the attribute set of the instance of the activity corresponds to an identified multi-attribute cluster-identifier. The identified multi-attribute cluster-identifier has a risk score and an attribute set that indicate a likelihood that the instance of the activity is a malicious activity. A visualization that identifies the instance of the activity as a malicious activity is generated.

Campaign intelligence and visualization for combating cyberattacks

Embodiments provide IP address partitioning features that can be used to source outbound email communications, but the embodiments are not so limited. In an embodiment, a computer-based method operates to remove blocked or potentially misused IP addresses from a partition and/or move good or reputable IP addresses from other partitions to account for volumetric shortfalls. A method of one embodiment operates to repair removed IP address reputations as part of recycling and reusing IP addresses. A system of an embodiment is configured in part to remove misused IP addresses from one or more partitions, source reputable IP addresses from other partitions, and/or repair and reuse IP addresses as needed. Other embodiments are included.

Outbound IP address reputation control and repair

Embodiments provide IP address partitioning features that can be used to source outbound email communications, but the embodiments are not so limited. In an embodiment, a computer-based method operates to identify and/or isolate one or more customers that may be misusing one or more IP addresses of a partition. A system of an embodiment is configured in part to divide a partition that includes one or more potentially misused IP addresses into one or more levels of sub-partitions as part of identifying offending or potentially offending customers. Other embodiments are included.

Automatic isolation and detection of outbound spam

Described is a technology by existing IP address blacklist data associated are accessed to statistically determine which IP addresses in the range are spam-related IP addresses. If enough are identified, the rest of the range's IP addresses are considered as likely being spam-related addresses. The entire range may be then added to a range weighted blacklist used to detect spam. Before adding the range to the range weighted blacklist, the addresses may be further processed against known good traffic data and/or safe list data to determine whether an exception exists that indicates a good sender. If there is an exception, the range is not added to the range weighted blacklist; the range may be shrunk and re-processed until added to the weighted blacklist or until the size is too small.

Range weighted internet protocol address blacklist

Methods and computer storage media for communicating an electronic gift suggestion for a first user to a second user are provided. Accessing an online social network profile for a first user created by the first user in an online social network. Determining one or more gift suggestions for the first user and displaying the one or more gift suggestions in the online social network account of a second user. In some embodiment, the gift suggestions for the first user may be based on the social profile of the first user, based on the social profile of the first user utilizing an electronic gift wish list, or based on sales data of purchasers having similar personal information and purchasing history as personal information accessed from the first user's social profile.

Growing community of inventors

Bellevue, WA, United States of America

David Nicholas Yost