Microsoft Technology Licensing, LLC

Michael C Fanning

Timothy Scott Rice

Andrew R Sterland

Scott M Louvau

Frederico A Mameri

Jeffrey Van Gogh

Nicholas Guerrera

Sean Sandys

Charles P Jazdzewski

Christopher M Faucon

Tae Hyung Kim

Felix Gerard Torquil Ifor Andrew

Gregory Bernard Miskelly

Matthew Brigham Hall

Wing Kwong Wan

Akrosh Gandhi

Christopher Michael Henry Faucon

Christopher M H Faucon

George Raymond Derryberry, Jr

Christopher Douglas Edmonds

Jan Stephen Gray

Steven E Lucco

Rico Mariani

Randy S Kimmerly

Krzysztof J Cwalina

Simon Calvert

Elliot H Omiya

Nachiappan Nagappan

Gregg Bernard Miskelly

Lucas James Hoban

Jomo Fisher

Anson Michael Horton

Zachary A Nation

Jacek Andrzej Czerwonka

Robert Alan Paveza

Harold L Pierson, Iii

Evgeny Ivanovich Tvorun

Reza Arbabi

Daniel James Moseley

Benjamin James Anderson

Gary Linscott

Francisco Javier Wong

Andriy Stasyuk

Suvam Mukherjee

Danielle Nicole Gonzalez

Nicolas Yves Couraud

Ani Babaian

Jeffrey T Fisher

Taylor C Woll

Karthik Vivek Nadig

Zhaochuan Gao

Cenk Ergan

Felix G T I Andrew

Benjamin Livshits

Thomas J Ball

Brian M Grunkemeyer

Zhenguang Chen

Barend Hermanus Venter

Eugene Wilson Hodges, Iv

Bradley Moore Abrams

Brent Rector

Gaurav Seth

David Andrew Ross

Laurence Jack Golding

Kenneth A Showman

Srivatsn Narayanan

Jennifer A Hamilton

Curtis Man

Shaofeng Zhu

Gen Lu

Ahmad Khalifa Eesa Ahmad

Bala Neerumalla

Alain Comeau

Christopher Paul Schmich

Nathan Keith Walker

Matthew Thornhill Hall

Jinu Joseph

David Andrew Knise

Pragya Prakash

Alison Lynne Maclellan

Eddy Toshiyuki Okada Nakamura

Johann Rehberger

Graham Calladine

Mark Cartwright

Magnus Madsen

A Michael Horton

Harold L Iii Pierson

Gregg Miskelly

Sean D Sandys

Disclosed systems and methods identify a data record set and determine whether one or more predetermined conditions exist for triggering analysis of one or more records in the data record set. Disclosed embodiments trigger the analysis only in response to determining that the predetermined conditions have been met. Upon triggering the analysis of the data record set, disclosed embodiments identify a subset of the data record set to undergo the analysis while refraining from performing the analysis on the remaining records in the data record set. Further, embodiments identify an analysis model based on a level of analysis to be performed and apply the analysis model to the subset of the data record set to identify any presence of sensitive data. Lastly, disclosed embodiments selectively perform a security process to the data record set in response to detecting the presence of the sensitive data.

Telemetry sampling scanning for exposed secrets and other sensitive data

Techniques for (i) using contextual information associated with an exposed credential to identify a resource that could be accessed using the exposed credential, (ii) identifying a responsible entity of that resource, and (iii) alerting the responsible entity about the exposed credential are disclosed. A credential is determined to be in an exposed state. The exposed credential, if used, could potentially provide an actor access to a resource, despite the fact that the actor should not have access to the resource. The exposed credential is analyzed to determine a context. Based on that context, the resource is identified. A responsible entity associated with the resource is identified. An alert is then sent to that entity.

Enriching exposed credential search results to make them actionable

Static analysis of a code base is expanded beyond finding faults to also find code instances where a particular fault could have occurred but did not. A conformance count reflects code portions that satisfy a specified coding rule per static analysis, and a nonconformance count reflects code portions that do not satisfy the coding rule. Various metrics computed from the conformance count and nonconformance count drive software development quality assessments. For example, bugs or bug categories may be prioritized for developer attention, static analysis tools are evaluated based on the metrics, to reduce noise by eliminating low-value bug alerts. Particular areas of expertise of developers and developer groups are objectively identified. Source code editors are enhanced to provide specific recommendations in context. Other quality enhancements are also provided.

Software development quality assessment

Compression of data that permits direct reconstruction of arbitrary portions of the uncompressed data. Also, the direct reconstruction of arbitrary portions of the uncompressed data. Conventional compression is done such that decompression has to begin either at the very beginning of the data, or at particular intervals (e.g., at block boundaries&#x2014;every 64 kilobytes) within the data. However, the principles described herein permit decompression to begin at any point within the compressed data, without having to decompress any prior portion of the file. Thus, the principles described herein permit random access of the compressed data. In accordance with the principles described herein, this is accomplished by using an index that correlates positions within the uncompressed data with positions within the compressed data.

Compression/decompression using index correlating uncompressed/compressed content

Partial initial construction of a deferred object model. This is done using a map that correlates positions of a hierarchically structured definition and corresponding hierarchical positions within an object model. The map is accessed and used to initially construct a deferred object model that even leaves some of the deferred objects unpopulated. The map is used to determine which parts of the hierarchical object definition no longer need to be parsed in order to construct this initial form of the deferred object model. If a request for an object is detected at some point after the initial construction, and that requested object is not represented even in deferred form in the deferred object model, the system uses the map to find the position of the corresponding object definition in the hierarchical object definition. At that point, the system parses that position, and constructs the object.

Initial loading of partial deferred object model

A data structure that includes border data structures that appear at the respective interfaces between each of at least some of the segments in the data structure. The border does not conform to a data format for any of the elemental data types of the elemental data items represented within the data structure, and does not represent a size of any of the neighboring segments. Second, the data structure also includes an index. When writing the data structure, the writer tracks the position of each of the regions. When all segments and regions have been written, the writer can then write an index that represents the position of each region. The reader can then use that index to quickly read from only those regions of interest, and quickly skip over regions not of interest.

Using border data structure with index

A method for diagnosing computer readable instructions related to transfers of control is disclosed. A state transition of a unit of execution within a logical operation providing an event handler for a Document Object Model is logged during runtime of the computer readable instructions. Diagnostic information of the logical operation is associated with the state transition. The state transition and associated diagnostic information is provided for retrieval at a selected point in the computer readable instructions.

Diagnostics of state transitions

A method includes parsing a text source document to construct a document node tree such that the document node tree includes text offsets indicating the location of the text within the text source document corresponding to each node of the document node tree. The method includes constructing, from the document node tree, a Document Object Model (DOM) and a view node tree that represents the DOM. The constructing of the view node tree includes mapping the view node tree to the document node tree. The method includes providing a running representation of the DOM such that DOM elements of the DOM are linked to the text within the text source document corresponding to the DOM elements via the view node tree and the document node tree.

Linking source code to running element

A method includes parsing a text source document to construct a document node tree such that the document node tree includes text offsets indicating the location of the text within the text source document corresponding to each node of the document node tree. The method includes constructing, from the document node tree, a Document Object Model (DOM) and a view node tree that represents the DOM. The constructing of the view node tree includes mapping the view node tree to the document node tree. The method includes providing a running representation of the DOM and one of tracking a modification to the DOM to provide first change information and tracking a modification to the text source document to provide second change information.

Dynamically updating a running page

Aspects of the subject matter described herein relate to searching. In aspects, a software package may be received and transformed into searchable data. Static and dynamic analysis may be performed on code and data included in the software package. A data structure is created that may index the code, metadata, indexable resources, and analysis artifacts associated with the software package. The data structure may be used to satisfy queries and the transformed data and analysis artifacts may be made available for viewing.

Integrating search with application analysis

A data analysis and transformation engine provides a service that automatically analyzes, formats, and/or reviews changes made to collection of artifacts stored in one or more source control systems in accordance with a user's instructions in a coordinated manner. A user subscribes to the data analysis and transformation engine with instructions on the user's preference for formatting, reviewing, and analyzing an artifact after the artifact was modified and checked into a source control system.

Transactional distributed data analysis and transformation

A method for diagnosing computer readable instructions related to transfers of control is disclosed. A state transition of a unit of execution within a logical operation is logged during runtime of the computer readable instructions. Diagnostic information of the logical operation is associated with the state transition. The state transition and associated diagnostic information is provided for retrieval at a selected point in the computer readable instructions.

A deployment package descriptor may be obtained. One or more application files that include application content in a plurality of different data formats may be obtained. An analysis of the application content included in the obtained one or more application files may be initiated, based on a plurality of different data formats and descriptive information associated with the obtained application files, the descriptive information included in the obtained deployment package descriptor.

Program analysis based on program descriptors

A test object that includes at least one computer program that includes dynamic executable code is obtained. The at least one computer program is transformed into a format that is configured to execute in a hosted isolated computing environment. Directed execution of the at least one computer program is initiated, in the hosted isolated computing environment. Dynamic code vulnerabilities of the at least one computer program are detected, based on the directed execution.

Directed execution of dynamic programs in isolated environments

Disclosed herein are systems, methods, and software to enhance the interoperability of components written in different programming languages. In an implementation, a code service receives a request message communicated by an application component via a message interface in an application environment that is at a layer above a target environment. The request message includes a request to invoke a target component available in the target environment and programmed in a language different from that of the application component. In response to the request, the service identifies at least a service component associated with invoking the target component in the target environment. The service component is executed to invoke the target component via a component interface.

Code service for language-independent dispatch

Growing community of inventors

Redmond, WA, United States of America

Michael C Fanning