Steven Craig Townsend

US Patent:

7430760, Sep 30, 2008

Filed:

Dec 5, 2003

Appl. No.:

10/729823

Inventors:

Steven Townsend - Seattle WA, US
Thomas Fakes - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 9/00

US Classification:

726 13, 726 12, 726 14

Abstract:

A programming interface includes a first group of functions related to communicating a new security policy to multiple security engines. Each of the multiple security engines is configured to replace an existing security policy with the new security policy. The programming interface also includes a second group of functions related to communicating an indication of each security engine's readiness to implement the new security policy.

US Patent:

7530093, May 5, 2009

Filed:

Apr 30, 2004

Appl. No.:

10/836810

Inventors:

Anders Samuelsson - Redmond WA, US
Steven Townsend - Seattle WA, US
Thomas Fakes - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 17/00
H04K 1/00
H04L 9/00

US Classification:

726 1, 713105

Abstract:

Techniques for securing applications and operating systems are provided. In an embodiment, the system notifies a user that a security enforcement action is being taken even though the condition prompting the action is detected by a security engine that executes in kernel mode. The security engine enforces security policies that help to ensure that a vulnerability of an application or operating system cannot be exploited. In an embodiment, the security system may solicit input from a user relating to a security enforcement action even though the condition prompting the action is detected by a security engine that executes in kernel mode. Security policies may be defined as sets of rules, each having a condition and an action. The security system thus enables kernel mode components to provide notifications to a user or solicit input from the user.

US Patent:

7657923, Feb 2, 2010

Filed:

Jul 23, 2004

Appl. No.:

10/898463

Inventors:

Steven Townsend - Seattle WA, US
Thomas Fakes - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 29/06

US Classification:

726 1

Abstract:

A framework for a security system is described. The framework may be used to track which security engines are available to enforce security policies. A security engine is a software resource that enforces security policies designed to help ensure that a vulnerability of an application or operating system cannot be exploited. The framework may be used to maintain a holistic view of a status of computing devices that a security system is configured to operate with. The framework may enforce security policies uniformly across components of a security system by providing an application program interface. The security system may broker security enforcement events and security policies. By providing these services, the framework presents a unified model for interactions between software components and the security system.

US Patent:

20060005227, Jan 5, 2006

Filed:

Jul 1, 2004

Appl. No.:

10/882438

Inventors:

Anders Samuelsson - Redmond WA, US
Thomas Fakes - Redmond WA, US
Arindam Chatterjee - Issaquah WA, US
Art Shelest - Sammamish WA, US
Mark Vayman - Redmond WA, US
Rajesh Dadhia - Redmond WA, US
Saveen Reddy - Redmond WA, US
Shirish Koti - Redmond WA, US
Steven Townsend - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 17/00

US Classification:

726001000

Abstract:

Languages for expressing security policies are provided. The languages comprise rules that specify conditions and actions. The rules may be enforced by a security engine when a security enforcement event occurs. The languages support data separation, dynamic evaluation, and ordered rule scope. By separating data from logic, security engines may only need to be updated with a portion of rules that change. With dynamic evaluation, expressions of rules may be evaluated dynamically, such as by querying a database, when a security engine enforces a rule. With ordered rule scope, when a security enforcement event implicates a number of rules simultaneously, the rules may be enforced in a deterministic and logically organized manner.