Microsoft Technology Licensing, LLC

Other

Puhazholi Vetrivel

Melissa Wood Dunn

Ashvin Mathew

Philip Newman

Ashish Mishra

Sudhakar Narayanamurthy

Joseph N Coco

Shawn Bracewell

Nayana Ramdas Mutha

Ward Beattie

Russell Lee Simpson, Jr

Suresh C Palani

Ejike E Ofuonye

Troy Mayhan

Brian M Jones

Krishna Kumar Parthasarathy

Cem Paya

Russell L Simpson, Jr

Danpo Zhang

Binyan Chen

Laurel S Abbott

Manas Singh

Philip K Newman

A computing system includes a processor and memory coupled to the processor and storing instructions that, when executed by the processor provide a user interface module. The user interface module is configured to generate a tracker definition user interface having a threat parameter selection user interface element configured to receive a selection of at least one threat parameter, the tracker definition user interface also having a threat value user interface element configured to receive input specifying a threat value to match for the specified at least one threat parameter. The processor is configured to save a tracker based on the selection of at least one threat parameter and the threat value, and wherein the processor is configured to access a threat data store and execute the tracker against the threat data store to provide a tracker result.

Configurable cyber-attack trackers

Malicious activity data is obtained, that is indicative of attempted attacks on a computing system. Clusters of targets are identified and it is determined whether the malicious activity preferentially targets one cluster of targets over other. Also, low prevalence attacks are identified and it is determined whether a low prevalence attack has a high concentration in one or more of the target clusters. If the malicious activity either preferentially targets a cluster, or a low prevalence attack has a high concentration in a cluster, then the attack is identified as a targeted attack, so that remediation steps can be taken.

Detection and identification of targeted attacks on a computing system

Threat intelligence management is provided in a security and compliance environment. A threat explorer platform or module of a security and compliance service may detect, investigate, manage, and provide actionable insights for threats at an organizational level. Working with a data insights platform that collects different types of signals (metadata, documents, activities, etc.) and correlates in a multi-stage evaluation, the threat intelligence module may provide actionable visual information on potential threats, affected areas, and actionable insights derived from internal threat data and external information using contextual correlation of data within the data insight platform. User experience may be dynamically adjusted at multiple levels based on context and allow users to drill down arbitrarily deep.

Threat intelligence management in security and compliance environment

Consent management between a client and a network server. In response to a request for consent, a central server determines if requested user information is included in a user profile associated with a user and if the user has granted consent to share the requested user information. A user interface is provided to the user via a browser of the client to collect the requested user information that is not included in the user profile and the consent to share the requested user information from the user. After receiving the user information provided by the user via the user interface, the service provided by the network server is allowed access to the received user information, and the central server updates the user profile. Other aspects of the invention are directed to computer-readable media for use with profile and consent accrual.

Profile and consent accrual

A method, system, and computer-readable medium are provided for managing consent between online entities to perform tasks. The consent mechanism uses an asynchronous protocol for submitting consent requests, managing consent requests, and resolving consent requests. An application that requires consent to perform a task submits a request for consent to the consent mechanism. The resolving authority obtains pending request information from the consent mechanism and sends the consent mechanism request resolution information. The application obtains resolved request information from the consent mechanism. If the resolved request is approved, the consent mechanism allows the application to perform the task. If the resolved request is denied, the consent mechanism does not allow the application to perform the task.

Consent mechanism for online entities

A system and method for facilitating remote access of an application available via a stateless protocol is provided. Such applications are typically accessed via the World Wide Web portion of the Internet (the 'Web') using a browser application and an HTTP protocol. The system can include one or more components for caching data associated with the remote access, the data comprising state and/or user specific information. The state and/or user specific information can be stored in a user context object (UCO). One or more user context objects can be managed by a user context manager that facilitates locating user context objects and reclaiming memory associated with user context objects that are no longer necessary to support remote access of the application accessed via a stateless protocol.

System and method for managing states and user context over stateless protocols

Methods, systems, computer program products, and data structures for displaying data on a web browser interface where the data in its native format is not displayable on a web browser interface. A network server receives a request for content from a network device where the request includes a request for data that is not displayable on a web browser. The network server identifies a template, which will be used to transform non-displayable data into displayable content. The network server accesses non-displayable data that is stored on a data server and processes the accessed non-displayable data according to the identified template in order to transform it into displayable content. A template may include HTML code as well as customized tags. The customized tags are consumed by a rendering engine, which executes certain functions to modify the data, making it displayable content. Once transformed, displayable content is sent to the network device.

Template architecture and rendering engine for web browser access to databases

Growing community of inventors

Redmond, WA, United States of America

Puhazholi Vetrivel