Steven Townsend

US Patent:

7530093, May 5, 2009

Filed:

Apr 30, 2004

Appl. No.:

10/836810

Inventors:

Anders Samuelsson - Redmond WA, US
Steven Townsend - Seattle WA, US
Thomas Fakes - Redmond WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 17/00
H04K 1/00
H04L 9/00

US Classification:

726 1, 713105

Abstract:

Techniques for securing applications and operating systems are provided. In an embodiment, the system notifies a user that a security enforcement action is being taken even though the condition prompting the action is detected by a security engine that executes in kernel mode. The security engine enforces security policies that help to ensure that a vulnerability of an application or operating system cannot be exploited. In an embodiment, the security system may solicit input from a user relating to a security enforcement action even though the condition prompting the action is detected by a security engine that executes in kernel mode. Security policies may be defined as sets of rules, each having a condition and an action. The security system thus enables kernel mode components to provide notifications to a user or solicit input from the user.

US Patent:

20060005227, Jan 5, 2006

Filed:

Jul 1, 2004

Appl. No.:

10/882438

Inventors:

Anders Samuelsson - Redmond WA, US
Thomas Fakes - Redmond WA, US
Arindam Chatterjee - Issaquah WA, US
Art Shelest - Sammamish WA, US
Mark Vayman - Redmond WA, US
Rajesh Dadhia - Redmond WA, US
Saveen Reddy - Redmond WA, US
Shirish Koti - Redmond WA, US
Steven Townsend - Seattle WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

G06F 17/00

US Classification:

726001000

Abstract:

Languages for expressing security policies are provided. The languages comprise rules that specify conditions and actions. The rules may be enforced by a security engine when a security enforcement event occurs. The languages support data separation, dynamic evaluation, and ordered rule scope. By separating data from logic, security engines may only need to be updated with a portion of rules that change. With dynamic evaluation, expressions of rules may be evaluated dynamically, such as by querying a database, when a security engine enforces a rule. With ordered rule scope, when a security enforcement event implicates a number of rules simultaneously, the rules may be enforced in a deterministic and logically organized manner.