Charles S Reis

US Patent:

8239939, Aug 7, 2012

Filed:

Jun 27, 2006

Appl. No.:

11/426785

Inventors:

John Dunagan - Sammamish WA, US
Opher Dubrovsky - Redmond WA, US
Saher Esmeir - Redmond WA, US
Charles S Reis - Redmond WA, US
Jiahe Helen Wang - Issaquah WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 29/06
G06F 12/14

US Classification:

726 22, 713161, 713187, 713188, 726 2, 726 11, 726 23, 726 25, 726 14, 705 28, 705 38, 705 80, 715778, 715765

Abstract:

An exemplary computer-implementable method () transforms information to reduce or eliminate risk of exploitation of a software service and includes receiving information () in response to a request, transforming the information () to produce transformed information and sending the transformed information (). An exemplary firewall server () includes server software () that allows the firewall server () to receive information from a resource () via a network and to send information to a client computer () and a browser protection component () for transforming the information to prevent exploitation of a vulnerability of browser software () on the client computer (). Various other exemplary methods, devices, systems, etc. , are also disclosed.

US Patent:

8375443, Feb 12, 2013

Filed:

Sep 27, 2011

Appl. No.:

13/246786

Inventors:

Charles Reis - Seattle WA, US
Peter Hallam - Seattle WA, US
Loren Kohnfelder - Bellevue WA, US

Assignee:

Google Inc. - Mountain View CA

International Classification:

G06F 11/00

US Classification:

726 22, 707103, 707202, 707E1701, 717 5, 717106, 717125, 717126, 726 25

Abstract:

A safe environment is established for running untrusted code in a system whose trusted libraries include native code. Annotations are applied to code in the system libraries to identify safe and unsafe code, and analysis tools reveal whether code outside the system libraries is able to trigger any unsafe behavior.

US Patent:

8484465, Jul 9, 2013

Filed:

Dec 7, 2011

Appl. No.:

13/313569

Inventors:

Charles Reis - Seattle WA, US
Adam Barth - Stanford CA, US

Assignee:

Google Inc. - Mountain View CA

International Classification:

H04L 29/06

US Classification:

713167, 713164, 726 11, 718 1

Abstract:

Methods and systems for sharing a security model with heterogeneous virtual machines (VMs) are provided. A method for sharing a security model with heterogeneous VMs may include making a direct function call to an object model from each of two or more heterogeneous VMs using a direct binding generated for the respective VM based on the respective VM and a security policy. The direct bindings of the two or more heterogeneous VMs share the security policy. The method may also include ensuring only one of the two or more heterogeneous VMs interacts with the object model at a time. A system for sharing a security model with heterogeneous VMs may include a heterogeneous VM manager and a heterogeneous VM scheduler. The system may further include a principal tracker and a proxy component.