Microsoft Technology Licensing, LLC

Nitzan Frogel

Meir Baruch Blachman

Itamar Azulay

Nir Mardiks Rappaport

Tomer Cherni

Sunil Kadam

Amy Hariharan Dang

Hassan Almandil

Yibing Chen

Mark-Gil Parayno

Methods, systems and computer program products are provided for multi-layer, browser-based context emulation detection, which may be implemented by a proxy for browsers. A policy may be enforced against requests if a request context indicates a restricted context. Context may be detected and indicated in a response header and body based on one or more context detection/indication rules. Context may be indicated by marking or not marking resources indicated in responses. Code may be injected to cause the client web browser to indicate context. A response may be forwarded to the client with a response header context, a response body context, and/or injected code, which a client browser may process to generate a request with one or more indications of request context.

Multi-layer browser-based context emulation detection

Systems and methods are described for converting a resource from a first format that is normally rendered by a web browser using a file viewer that prevents monitoring user actions with respect to the resource on behalf of a proxy server into a second format that enables such monitoring. The proxy server injects code into a web page requested by the web browser to cause the web browser to mark a uniform resource locator (URL) of an element that is created by the web page. Upon detecting a request containing the marked URL, the proxy server examines the response corresponding to the request to determine if the response includes a resource in the first format. If the response includes a resource in the first format, the proxy server converts the resource into the second format and transmits the resource to the web browser in the second format.

System and method for monitoring user actions with respect to a resource presented by a web browser

Automated and semi-automated document redaction technology is disclosed herein. In certain example embodiments, 'context-aware' redaction is provided. Automated techniques are used to identify a set of potentially sensitive item(s) within a document. The potentially sensitive item(s) are filtered based on contextual information, such an entity identifier (e.g. person identifier, person group identifier identifying a group of multiple people, organization identifier etc.), resulting in a filtered set of redaction candidate(s). The filtered redaction candidate(s) may, for example, be redacted from the document automatically, or outputted as suggestions in an assisted redaction tool, e.g. via a document redaction graphical user interface. Other example embodiments consider selective redaction when uploading and/or downloading documents via a proxy server, to prevent intended or unintended release of potentially sensitive information, e.g. in a web browsing context.

Detection and removal of predefined sensitive information types from electronic documents

A tenant network of a cloud services platform performs the rewriting of code included in a web page. For example, a proxy service communicatively coupled to a plurality of browser applications belonging to the same tenant network and a server receives a request, from a first browser, for a web page hosted by the server. The web page is returned to the proxy service, and the proxy service identifies code component(s) thereof for rewriting. The proxy service provides the identified code component(s) to a second browser included in the same tenant network as the first browser that is configured to rewrite the code component(s). After rewriting the code component, the second browser provides the rewritten code component(s) to the proxy service, which forwards the web page, along with the rewritten code component(s), to the first browser for execution and rendering.

Growing community of inventors

Tel Aviv, Israel

Nitzan Frogel