Microsoft Technology Licensing, LLC

Henry Lyons

Ashish Parikh

Ram P Papatla

Ian James McCarty

Dale R Rolf

Sencer Nuri Yeralan

David Brooks

Frank Joseph Bussell

Nicholas Allan Schwerzler

David John Janson

Minh Trong Tran

Thomas George Yaryan

Olga Ivanova

Michael Van Snellenberg

Rahul Arun Chabukswar

Rohan S Lam

Systems are provided for generating, modifying and using SBOMs for facilitating risk assessment and threat mitigation for corresponding programs, and particularly for large programming builds. The creation and modification of the SBOMs includes processes for omitting declarations referenced in chunk SBOMs of program chunks incorporated into a final programming build associated with a build SBOM, but which are not actually utilized by the final programming build, as well as processes for adding new declarations for code segments that are not declared in the related chunk SBOMs, even though the code segments are utilized by the final programming build. Systems are also configured to use SBOMs in combination with configuration restriction records to assess and resolve threat events in a manner that can prevent unnecessary remedial actions for threat events that appear to be relevant to one or more files or dependencies incorporated into a program.

Systems and processes for creating software bill of materials for large distributed builds

Systems and processes for facilitating edits to software bill of materials

A usage data collection and evaluation mechanism may collect usage information from various sources and summarize the usage information to determine a role for a system. The role and usage information may be transmitted to a centralized server for aggregation and analysis. The collection and transmission of usage data may be governed by and conform to a privacy agreement and may be collected when an end user agrees to such collection. Role determination may be performed using data collected from a single device, multiple devices, or from a network monitoring system. The usage data collection and evaluation mechanism may determine an installed role base and any changes in the installed role base since a previous report.

Automated role based usage determination for software system

Computer-implemented methods and apparatus are provided for collecting information gathered by an instrumentation mechanism for transport to an information collection facility. In one embodiment, the information that is collected is defined by a configuration file. An application may examine the configuration file, execute one or more queries specified by the configuration file, and write the data which is collected to one or more data structures employed by a transport mechanism in transferring information to the information collection facility. The process of collecting the information may occur periodically, such as nightly. The configuration file may be periodically updated to reflect new information that is to be collected.

Automated collection of information

Growing community of inventors

Seattle, WA, United States of America

Henry Lyons