David Charles Ladd

7765592, Jul 27, 2010

Apr 22, 2004

10/830334

Yi-Min Wang - Bellevue WA, US
Aaron R. Johnson - Lynnwood WA, US
David C. Ladd - Redmond WA, US
Roussi A. Roussev - Bellevue WA, US
Chad E. Verbowski - Redmond WA, US

Microsoft Corporation - Redmond WA

G06F 21/00
G06F 12/14

726 22, 713187, 714 15

As computer programs grow more complex, extensible, and connected, it becomes increasingly difficult for users to understand what has changed on their machines and what impact those changes have. An embodiment of the invention is described via a software tool, called AskStrider, that answers those questions by correlating volatile process information with persistent-state context information and change history. AskStrider scans a system for active components, matches them against a change log to identify recently updated and hence more interesting state, and searches for context information to help users understand the changes. Several real-world cases are provided to demonstrate the effectiveness of using AskStrider to quickly identify the presence of unwanted software, to determine if a software patch is potentially breaking an application, and to detect lingering components left over from an unclean uninstallation.

20180137401, May 17, 2018

Nov 16, 2016

15/353298

- Redmond WA, US
Bryan Jeffrey SMITH - Snoqualmie WA, US
Andrew White WICKER - Snoqualmie WA, US
Daniel Lee MACE - Bellevue WA, US
David Charles LADD - Snohomish WA, US

Microsoft Technology Licensing, LLC - Redmond WA

G06N 3/00
H04L 29/06
G06N 99/00
G06N 7/00
G06F 17/30
G06F 17/27

A computing system for generating automated responses to improve response times for diagnosing security alerts includes a processor and a memory. An application is stored in the memory and executed by the processor. The application includes instructions for receiving a text phrase relating to a security alert; using a natural language interface with a natural language model to select one of a plurality of intents corresponding to the text phrase; and mapping the selected intent to one of a plurality of actions. Each of the plurality of actions includes at least one of a static response, a dynamic response, and a task. The application includes instructions for sending a response based on the at least one of the static response, the dynamic response, and the task.