Microsoft Technology Licensing, LLC

John Hazen

Sean O Lyndersay

Israel Hilerio

Tanvi Surti

Chee Chen Tong

Jason Joseph Weber

Matthew Ryan Miller

Pengxiang Zhao

Brian E Manthos

Tobin R Titus

Daniel Libby

Jordan Thomas Rabet

Colin Pacitti

Tyler Kien Beam

Steven J Ball

Sermet Iskin

Scott B Graham

Kavitha Radhakrishnan

Katrina M Blanch

Allen Kim

Guillermo Enrique Rueda Quintero

Matthew Miller

Techniques for mitigating timing attacks via dynamically triggered time dilation are provided. According to one set of embodiments, a computer system can track a count of application programming interface (API) calls or callbacks made by a program within each of a series of time buckets. The computer system can further determine that the count exceeds a threshold count for a predefined consecutive number of time buckets. Upon making this determination, the computer system can trigger time dilation with respect to the program, where the time dilation causes the program to observe a dilated view of time relative to real time.

Mitigating timing attacks via dynamically triggered time dilation

Techniques for mitigating timing attacks via dynamically scaled time dilation are provided. According to one set of embodiments, a computer system can enable time dilation with respect to a program, where the time dilation causes the program to observe a dilated view of time relative to real time. Then, while the time dilation is enabled, the computer system can track a count of application programming interface (API) calls or callbacks made by a program within each of a series of time buckets and, based on counts tracked for a range of recent time buckets, scale up or scale down a degree of the time dilation.

Mitigating timing attacks via dynamically scaled time dilation

Techniques for extension interaction with applications are described. Generally, an extension represents functionality for extending, modifying, customizing, and/or supplementing native functionality of an application. Techniques discussed herein provide a common extension platform that enables an extension to interact with multiple different applications utilizing components of the platform. The common extension platform, for instance, exposes a set of common extension application programming interfaces (APIs) that provide a common interaction surface between extensions and applications.

Extension configuration and interaction

Extension interaction with applications

Methods, systems, and computer program products are provided for enabling selective file system access by applications. An application is installed in a computing device. An application manifest associated with the application is received. The application manifest indicates one or more file types that the application is allowed to access. The indicated file type(s) are registered in a location accessible by a broker service. The application is launched as an application process. The application process is isolated in an application container. The application container prevents direct access by the application process to file system data. An access request related to first data of the file system data is received at the broker service from the application process. Access by the application process to the first data is enabled when the broker service determines that a file type of the first data is included in the registered file type(s).

Selective file access for applications

Platform for extension interaction with applications

Growing community of inventors

Kirkland, WA, United States of America

John Hazen