Microsoft Technology Licensing, LLC

Jason Joseph Weber

George G Robertson

Cenk Ergan

Murali R Krishnan

Stella Yick Chan

M David Fields, Jr

Michael D Decker

Bongshin Lee

Roland Lucas Fernandez

Walter V Von Koch

Christian Olaf Abeln

Brian E Manthos

Katerina V Sedova

Karen Elizabeth Parker Anderson

Matthew P Kotsenas

Qiang Chen

Morten Holm-Peterson

Gur Kimchi

Danyel Aharon Fisher

Brian Scott Ruble

Rico Mariani

Christian Fortini

Brian L Welcker

B Scott Ruble

Matthew Ryan Miller

Pengxiang Zhao

Michael Victor Ehrenberg

Tobin R Titus

Jakob Peter Nielsen

William Guthrie Morein

John Hazen

Benjamin L Chronister

Joshua W Lee

Charles Strempler

Abhishek Sagar

Jordan Thomas Rabet

Mara Beth Fortini

Colin Pacitti

Daniel Libby

Barry James Givens

Anjali S Parikh

Christian Stockwell

Michael David Mccormack

Brian Keith Catlin

Sinclaire Renee Hamilton

Richard Joseph Murillo

Jatinder Singh Mann

Matthew Jay Kotler

Curtis Glenn Wong

Benjamin Edward Rampson

C Douglas Hodges

Justin Rogers

David Francis Gainer

Li-Hsin Huang

Rahul Sudhir Kumar

Richard Keith James

Christian Seifert

Rossen Atanassov

Timothy Garry Dwyer

Christian Bernd Schormann

Lev Boris Nachmanson

Meir Shmouely

Timothy R Sullivan

Samuel R Fortiner

Omer Rosenbaum

Todd G Roshak

Paul Sean Harrington

Sean Boon

Praveen Kumar Muralidhar Rao

Sergey Z Malkin

R Scott Briggs

Kedar Hirve

Michael Christopher Connolly

Gregory Bershansky

Ali Alabbas

James H Jen

Fredric W Pullen, Iii

Ian Michael Dunmore

Alexandre Gorev

Robert G Lefferts

Reed A Vawter

Aaron Rodriguez Hernandez

Nathan Paul McCoy

Ahmed K Kamal

Thomas Michael Casey

Yuval Peled

Yi Ming Zhou

Kieran Chin Cheong

Kelly Laurence Ford

Mikkel Ronne Jakobsen

Olga Kulyk

Kipper V Jewsbury

Aaron T Burcham

James Kal Yu Lau

M David Fields

Rupo Zhang

Grant A Watters

Paresh Maisuria

Nerses Ghevondyan

Yuanzhe Wang

Embodiments of the technology described herein identify and mitigate phishing attempts by analyzing user input received at the operating system level. Initially, a credential, such as a username or password, is registered with the threat detection system. The technology described herein intercepts user input at the operating system level, generates a hash of the input, and compares it with a hash of a credential being monitored. The technology described herein will perform a threat assessment when a secret entry is detected. The threat assessment may use the application context and the network context as inputs to the assessment. When the threat assessment results in an unknown classification or when the snapshot is otherwise requested, a snapshot is captured to supplement the threat assessment. Based on user settings, the snapshot is consumed by a snapshot phishing machine learning model. Various mitigation actions may be taken when a threat is detected.

Snapshot phishing detection and threat analysis

The technology described herein identifies and mitigates phishing attempts by analyzing user input received at the operating system level. Initially, a credential, such as a username or password, is registered with the threat detection system. The technology described herein intercepts user input at the operating system level, generates a hash of the input, and compares it with a hash of a credential being monitored. A credential entry is detected when a hash for the character string entered matches a hash for a credential being monitored. The technology described herein will perform a threat assessment when a secret entry is detected. The threat assessment may use the application context and the network context as inputs to the assessment. Various mitigation actions may be taken when a threat is detected.

Credential input detection and threat analysis

Techniques for mitigating timing attacks via dynamically triggered time dilation are provided. According to one set of embodiments, a computer system can track a count of application programming interface (API) calls or callbacks made by a program within each of a series of time buckets. The computer system can further determine that the count exceeds a threshold count for a predefined consecutive number of time buckets. Upon making this determination, the computer system can trigger time dilation with respect to the program, where the time dilation causes the program to observe a dilated view of time relative to real time.

Mitigating timing attacks via dynamically triggered time dilation

Techniques for mitigating timing attacks via dynamically scaled time dilation are provided. According to one set of embodiments, a computer system can enable time dilation with respect to a program, where the time dilation causes the program to observe a dilated view of time relative to real time. Then, while the time dilation is enabled, the computer system can track a count of application programming interface (API) calls or callbacks made by a program within each of a series of time buckets and, based on counts tracked for a range of recent time buckets, scale up or scale down a degree of the time dilation.

Mitigating timing attacks via dynamically scaled time dilation

A system (and corresponding methodology) by which a user can interact directly with visual data is provided. The system employs associations and relationships between visual data objects to automatically update objects based upon a change in other objects. The innovation also provides specialized controls (e.g., dashboard tools/controls) that facilitate manipulation of visual data. As there can be numerous manners in which a user can interact with visualization data, the innovation enables a specialized set of controls to be identified and provided to a user thereby reducing overwhelming effects of a large number of controls.

Dashboard controls to manipulate visual data

Techniques for coalescing graphics operations are described. In at least some embodiments, multiple graphics operations can be generated to be applied to a graphical element, such as a graphical user interface (GUI). The graphics operations can be coalesced into a single renderable graphics operation that can be processed and rendered.

Coalescing graphics operations

In one or more embodiments, an application program interface (API) is provided and enables an entity, such as an application, script, or other computing object to register to receive callbacks immediately and, without specifying a time constraint. In this approach, the API does not rely on a timer, such as a system timer. Rather, a non-timer based queue, such as a message queue-type approach is utilized. Specifically, callbacks that are registered through this API can be placed on the message queue and work associated with the registered callback can be performed through the normal course of processing messages and events in the message queue. Over time, such results in a callback pattern that allows an associated web browser and applications such as web applications to remain responsive, while increasing performance and power efficiencies.

Power efficient callback patterns

Techniques for synchronization points for state information are described. In at least some embodiments, synchronization points are employed to propagate state information among different processing threads. A synchronization point, for example, can be employed to propagate state information among different independently-executing threads. Accordingly, in at least some embodiments, synchronization points serve as inter-thread communications among different independently-executing threads.

Synchronization points for state information

Various embodiments align callbacks to a scripting component that enable the scripting component to update animation, with a system's refresh notifications. Specifically, an application program interface (API) is provided and implemented in a manner that generates and issues a callback to the scripting component when the system receives a refresh notification. This provides the scripting component with a desirable amount of time to run before the next refresh notification.

Aligning script animations with display refresh

The claimed subject matter relates to an architecture that can support a declarative model-based approach to designing, constructing, and rendering visualizations. By complying with a declarative descriptor, components can be readily customized by way of modifications to the model&#x2014;declaratively specifying suitable features, behaviors, appearances and so forth. The descriptors that conform to the model can also facilitate connecting to various data sources and performing data transformation operations. Moreover, the descriptors that conform to the model can declaratively specify relationships based upon a scene layout. Accordingly, the architecture can further describe the scene layout and provide features based upon the layout.

Declarative approach for visualization

Various embodiments provide approaches for measuring the rendering times of a webpage that can be browser-independent. In at least some embodiments, as a web page is rendered, video data of the webpage is captured and analyzed to ascertain when the webpage, or portions thereof, have likely been completely rendered. In at least some embodiments, image processing can be performed on captured video data to ascertain, from observed pixel changes over time, when the webpage has likely been rendered.

Measuring web page rendering time

Various types of data can be collected into a data set and related content and/or related concepts across the data in the data set and/or across search histories can be displayed as a visual representation. The related content/concepts can be presented as a function of incremental revealing of relationships. After reviewing the visual representation, a user can customize the data set and relationships by specifically excluding a related data segment. The visual representation can be applied across multiple searches or other obtained data. Through interaction with the visual representation, a user can drill down into common linkages of the data to more narrowly focus on a subset of the data and/or to refocus a search result and/or to provide annotations.

Using visual techniques to manipulate data

A visualization development system is provided. The system includes a visualization tool to develop one or more visualizations and a grammar engine that operates with the visualization tool to automatically detect visualization problems during the development of the visualizations.

Grammar checker for visualization

Systems and methods for applying both profile and user customizations to an application user interface are provided. Profile customizations, created for a specialized use or field, are adapted to an application user interface, which has command-menu-toolbar contributions from various add-in modules. The user has access to the customizations through a user interface. Then, as a user is customizing the application, through commands, toolbars, and menus, the user customizations are tagged. A priority and group is assigned to each customization to allow for relative positioning of each customization. The difference between the user's final desired state and a reset state is computed. This difference computation is used to track the changes made to the application and to assist in resets of the customizations.

Method and system for customizations in a dynamic environment

Growing community of inventors

Kirkland, WA, United States of America

Jason Joseph Weber