Microsoft Technology Licensing, LLC

Matthew Bryan Jeffries

Varagur Karthikeyan Sriram Iyer

Willson Kulandai Raj David

Vinayak Goyal

William James Griffin

James Richard Sturms

Thomas P Gallagher

Eric Broberg

Matthew Taylor Cohen

A threat protection system provides for detecting links in a document and analyzing whether one of the detected links is a malicious link that may direct a user of the document to a malicious universal resource locator (URL). In one implementation of the described technology, when a user selects a link in a document, a link activation module calls a threat protection client module that performs a reputation check for the link. If the selected link is malicious, the threat protection client module sends a URL of a warning page to the link activation module.

Threat protection in documents

Implementations described herein disclose a system for providing personalized threat protection for users of computer applications. An implementation of a method disclosed herein includes analyzing usage pattern of an application by a client to determine various application functionalities used by the client, identifying security threats related to the various application functionalities used by the client, and changing the configuration settings of the application for the client based on the plurality of security threats.

Personalized threat protection

Methods and computer-readable media are provided for refreshing a page validation token. In response to a request for a form from a client, a server responds with the requested form, a page validation token, and a page token refresh program. The client executes the page token refresh program in response to a request to post the contents of the form to the server computer. The page token refresh program determines whether a preset period of time has elapsed since server computer generated the page validation token. If the period of time has not elapsed, the form is posted to the server with the page validation token and processed by the server computer. If the page timeout has elapsed, the page token refresh program refreshes the page validation token prior to posting the form by requesting an updated page validation token from the server.

Refreshing a page validation token

Techniques are provided for determining a minimum set of permissions for a software component. A first set of minimum permissions is determined for proper execution of the software component. The first set designates one or more permissions. Determining the first set includes performing iterative testing to determine whether one or more user permissions are included in the first set by only disabling one of the user permissions on an iteration. Verification processing may be performed in which a second set of minimum permissions is determined and the first set may be compared to the second set to determine whether the first set is equivalent to the second set.

Growing community of inventors

Sammamish, WA, United States of America

Matthew Bryan Jeffries