Microsoft Technology Licensing, LLC

Santosh Chandwani

Jayteerth Narasingrao Katti

Jaroslav Dunajsky

Amit Martu Kamat

Aleksandar Boljanac

Ameet Vijay Joshi

Raveendmathan Loganathan

Veera Venkata Stya Sridhar Maddipati

Alexsandar Bojanac

An enhanced pipeline for the generation, validation, and deployment of machine-based predictive models (PMs) is provided. The pipeline analyzes records to generate a graph that indicates various relationships between the records. A user provides a selection of a data element of interest (DEOI). The generated PM predicts values for the DEOI based on input records that do not include values for the DEOI. The user provides selections for values of the DEOI that represent positive outcomes associated with the DEOI. The user provides selections for values of the DEOI that represent negative outcomes associated with the DEOI. A subgraph of the graph is determined based on the DEOI. A relevant set of records is determined based on the subgraph. The PM is automatically trained, validated, and deployed based on the relevant set of records, the DEOI, and the representative values for the DEOI.

Enhanced pipeline for the generation, validation, and deployment of machine-based predictive models

The automatic provisioning of a connection between a public cloud and an on-premises resource in a private network. This allows a connection to be more easily made when an application in the public cloud is to access that on-premises resource in the private network. The automatic provisioning is initiated upon determining that an application running in the public cloud is to access the on-premises resource. The provisioning occurs by identifying a bridging infrastructure that provides access to the on-premises resource. Credentials are then accessed for later use in connecting to the bridging infrastructure. Application-specific credentials are securely provided to the application. The application-specific credentials are usable by an agent on the public cloud to connect to the identified bridging infrastructure. A configuration packages is then created that includes resource-specific credentials, the identity of the on-premises resource and an executable.

Connecting public cloud with private network resources

The automatic establishing of the connection between the public cloud and the on-premises resource. First, the bridging infrastructure is automatic accessed. The bridging infrastructure is configured to interact with a user system within the private network using a first control. For instance, it is this first control that may be represented as an executable within the configuration package used in provisioning the connection. A second control is provided to the application running in the public cloud. The second control is structured such that the at least one application may be used to securely connect via the bridging infrastructure with an on-premises resource of the private network.

Connecting public cloud applications with private network resources

Systems and methods for controlling network access determine that a client computer on the network is in compliance with administrator-defined network health policy standards before the client computer is granted access to the network. A packet exchange mechanism is defined wherein filtering instructions from a server are converted into firewall rules on the client computer to restrict client access to remediation servers on the network. The client computer obtains update patches from the remediation servers to become compliant with network health policy standards.

Controlling network access

A network in which a client receives a network credential, such as a valid network address, following an exchange of messages with a credential server that includes security information. The security information may validate the credential, avoiding rogue devices inadvertently or maliciously distributing credential information that can interfere with clients attempting to connect to the network or with the network itself. If obtaining a network credential requires an exchange of information about the configuration of the client that could reveal security vulnerabilities, the security information may be used to ensure the confidentiality of that configuration information. The security information may be incorporated into messages according to a known protocol, such as by incorporating it into options fields of DHCP messages.

Growing community of inventors

Redmond, WA, United States of America

Santosh Chandwani