Microsoft Technology Licensing, LLC

Opher Dubrovsky

Jiahe Helen Wang

John David Dunagan

Cem Paya

Boaz Ein-Gil

Saher Esmeir

Charles S Reis

Boaz Ein-Gil Haifa

An exemplary computer-implementable method () transforms information to reduce or eliminate risk of exploitation of a software service and includes receiving information () in response to a request, transforming the information () to produce transformed information and sending the transformed information (). An exemplary firewall server () includes server software () that allows the firewall server () to receive information from a resource () via a network and to send information to a client computer () and a browser protection component () for transforming the information to prevent exploitation of a vulnerability of browser software () on the client computer (). Various other exemplary methods, devices, systems, etc., are also disclosed.

Browser protection module

An exemplary computer-implementable method () transforms or 'immunizes' information to reduce or eliminate risk of exploitation of a known vulnerabilty of a software service and includes receiving information () in response to a request, transforming the information () to produce transformed information and sending the transformed information (). An exemplary firewall server () includes server software () that allows the firewall server () to receive information from a resource () via a network and to send information to a client computer () and an immunization component () for immunizing the information to prevent exploitation of a vulnerabilty of browser software () on the client computer (). Various other exemplary methods, devices, systems, etc., are also disclosed.

Immunizing HTML browsers and extensions from known vulnerabilities

Encrypted communications between peers are inspected by a proxy server, for bugs, viruses, malicious software and the like, while the proxy server is prevented from modifying the encrypted communications. A proxy server functioning as a gateway processor between the peers includes a security processor. The security processor is coupled to one of the peers via a channel that is separate from the channel carrying the encrypted communications between the peers. Cryptographic keys needed to decrypt the encrypted communications are provided via the separate channel to the security processor prior to commencement of encrypted communications. The security processor monitors the encrypted communications. The security processor decrypts the monitored encrypted communications without perturbing the encrypted communications. The security processor decrypts the encrypted communications utilizing the previously provided cryptographic keys. The security processor inspects the decrypted communications. If any faults are found, the security processor provides appropriate notification.

Inspecting encrypted communications with end-to-end integrity

Growing community of inventors

Redmond, WA, United States of America

Opher Dubrovsky