Microsoft Technology Licensing, LLC

Jason J Joyce

Graham Arthur Wheeler

Bhalchandra Pandit

Xiong Zhang

Danny B Lange

Hung-Chih Yang

David M Moore

Vishal Kapoor

Sterling M Reasor

Joseph Edwin Johnson, Jr

Charles Andrew Turner

Gregory W Nichols

Michael Jarrett

Jonathan Mark Keller

Santanu Chakraborty

Ahmed S Hussain

Kanwaljit Marok

Nizan Manor

A system includes a processing device configured to execute instructions including accessing messages sent by a first user and other users. The instructions include identifying a first subset of messages that were sent by the first user and identifying a second subset of messages that are related to a first topic and were sent by the first user. The instructions include determining an authority value based on counts of the first and second subsets. The instructions include identifying a third subset of messages that resulted from the other users forwarding the second subset. The instructions include determining a power value based on a count of users that sent the third subset and computing an impact score for the first user on the first topic based on the authority and power values. The instructions include, based on the impact score, contacting the first user in relation to the first topic.

Computer system for automated assessment at scale of topic-specific social media impact

Methods, systems, and computer program products are provided for recovering from false positives of malware detection. Malware signatures that are defective may be causing false positives during software scanning for malware. Such defective malware signatures may be detected (e.g., by user feedback, etc.) and revoked. Computers that are using the malware signatures to detect malware may be notified of the revoked signatures, and may be enabled to re-scan content identified as containing malware using malware signatures that do not include the revoked malware signatures. As such, if the content is determined during the re-scan to not be infected, the content may be re-enabled for usage on the computer (e.g., may be restored from quarantine storage).

Cloud malware false positive recovery

This patent relates to a system for identifying influential users of a social network platform. The system may access records of messages sent or received by a plurality of users. The system can determine a power of a user to reach other users based at least in part on the messages. The system can determine an authority of the user on a topic. The system can also compute an impact score that reflects both the power and the authority of the user on the topic. Such scores may be used to select users based on impact as part of social trend analysis, marketing or other functions.

Social media impact assessment

An anti-malware program monitors the behavior of a system after a system restore to determine the likelihood of a hidden infection of malicious code still existing after the system restore. The anti-malware program observes the dynamic behavior of the system by monitoring conditions that are likely to signify the possibility of an infection thereby necessitating the need to initiate anti-malware detection. The anti-malware program may observe the restoration history, system settings, malware infection history, to determine the likelihood of an existing hidden infection after a system restore.

Augmenting system restore with malware detection

A system for identifying influential users of a social network platform. The system may compute a score for each of multiple users. Such a score may be topic-based, leading to a more accurate identification of influential users. Such a topic-based score may indicate authority and/or impact of a user with respect to a topic. The impact may be computed based on authority combined with other factors, such as power of the user. The authority score may be simply computed, in whole or in part, directly from a tweet log without, for example creating a retweet graph. As a result, the scores may be computed, using MapReduce primitives or other constructs that allow the computations to be distributed across multiple parallel processors. Such scores may be used to select users based on impact as part of social trend analysis, marketing or other functions.

An arrangement for dynamically identifying and intercepting potential software threats before they execute on a computer system is provided in which a file system filter driver (called a 'mini-filter') interfaces with an anti-malware service to selectively generate an alert event and allow the threat to run, in addition to generating an alert event and suspending the threat. The decision to suspend the threat or allow it to run is made through application of a cascading logic hierarchy that includes respective policy-defined actions, user-defined actions, and signature-defined actions. The mini-filter generates the alert event to the anti-malware service whenever a file is opened, or modified and closed. The service uses an engine to scan the file to identify potential threats which are handled though application of the logic hierarchy which provides for configurations defined in a lower tier of the hierarchy to be overridden by those contained in a higher tier.

Detection and dynamic alteration of execution of potential software threats

Growing community of inventors

Redmond, WA, United States of America

Jason J Joyce