Li Chen

20130205152, Aug 8, 2013

Feb 6, 2012

13/366387

Jacob R. Lorch - Bellevue WA, US
Jitendra Padhye - Redmond WA, US
Brian Zill - Bellevue WA, US
Wenbiao Xing - Bellevue WA, US
Wei Wan - Redmond WA, US
Li Chen - Kirkland WA, US

MICROSOFT CORPORATION - Redmond WA

G06F 1/32

713323

The claimed subject matter provides a method for operating a sleep management service. The method include identifying a set of guardians based on a local state for each of a plurality of compute nodes. The method also includes sending a wake request to all sleeping compute nodes in the identified set. The method further includes sending a request to become a guardian to all compute nodes in the identified set. Additionally, the method includes stopping a current guardian from being a guardian if the current guardian is less suitable than a threshold number of current guardians.

20230031591, Feb 2, 2023

Jun 29, 2022

17/853176

- Santa Clara CA, US
Ignacio Javier Alvarez - Portland OR, US
Li Chen - Hillsboro OR, US
Javier Felip Leon - Hillsboro OR, US
David Israel Gonzalez Aguirre - Hillsboro OR, US
Justin Gottschlich - Santa Clara CA, US
Javier Sebastian Turek - Beaverton OR, US

G06F 16/9032
G06F 16/2457
G06F 16/9038

Methods and apparatus to facilitate generation of database queries are disclosed. An example apparatus includes a generator to generate a global importance tensor. The global importance tensor based on a knowledge graph representative of information stored in a database. The knowledge graph includes objects and connections between the objects. The global importance tensor includes importance values for different types of the connections between the objects. The example apparatus further includes an importance adaptation analyzer to generate a session importance tensor based on the global importance tensor and a user query, and a user interface to provide a suggested query to a user based on the session importance tensor.

20200364337, Nov 19, 2020

Aug 3, 2020

16/983468

- Santa Clara CA, US
Li Chen - Hillsboro OR, US

G06F 21/56
G06N 20/00

Systems and methods may be used to classify incoming testing data, such as binaries, function calls, an application package, or the like, to determine whether the testing data is contaminated using an adversarial attack or benign while training a machine learning system to detect malware. A method may include using a sparse coding technique or a semi-supervised learning technique to classify the testing data. Training data may be used to represent the testing data using the sparse coding technique or to train the supervised portion of the semi-supervised learning technique.

20200028865, Jan 23, 2020

May 23, 2019

16/421044

- Santa Clara CA, US
Li Chen - Hillsboro OR, US

H04L 29/06
G06N 20/00
G06N 5/00

Systems and methods may be used to prevent attacks on a malware detection system. A method may include modeling a time series of directed graphs using incoming binary files during training of a machine learning system and detecting, during a time-window of the time series, an anomaly based on a directed graph of the time series of directed graphs. The method may include providing an alert that the anomaly has corrupted the machine learning system. The method may include preventing or remedying corruption of the machine learning system.

20190324744, Oct 24, 2019

Jun 28, 2019

16/457006

- Santa Clara CA, US
David I. Gonzalez Aguirre - Hillsboro OR, US
Shengtian Zhou - Palo Alto CA, US
Justin Gottschlich - Santa Clara CA, US
Li Chen - Hillsboro OR, US

G06F 8/71
G06F 8/75
G06F 8/77
G06N 3/04
G06F 17/28
G06F 16/906
G06F 16/9035
G06F 17/11

Apparatus, systems, articles of manufacture, and methods for a context and complexity-aware recommendation system for efficient software development. An example apparatus includes a current state generator to generate a representation of a current state of a new function, an instruction predictor to generate a first recommended software component based on the current state of the new function, a complexity cost determiner to rank the first recommended software component based on a weighted sum of associated partial cost values, the software component to be ranked against second recommended software components based on a comparison of partial cost values corresponding to respective ones of the second recommended software components, a risk identifier to detect vulnerabilities based on an attack surface of a portion of the first recommended software component, and a ranking determiner to generate a third recommended software component, the third recommended software component corresponding to respective ranking metrics.

20190317965, Oct 17, 2019

Jun 28, 2019

16/457203

- Santa Clara CA, US
Ignacio Javier Alvarez - Portland OR, US
Li Chen - Hillsboro OR, US
Javier Felip Leon - Hillsboro OR, US
David Israel Gonzalez Aguirre - Hillsboro OR, US
Justin Gottschlich - Santa Clara CA, US
Javier Sebastian Turek - Beaverton OR, US

G06F 16/9032
G06F 16/9038
G06F 16/2457

Methods and apparatus to facilitate generation of database queries are disclosed. An example apparatus includes a generator to generate a global importance tensor. The global importance tensor based on a knowledge graph representative of information stored in a database. The knowledge graph includes objects and connections between the objects. The global importance tensor includes importance values for different types of the connections between the objects. The example apparatus further includes an importance adaptation analyzer to generate a session importance tensor based on the global importance tensor and a user query, and a user interface to provide a suggested query to a user based on the session importance tensor.

20190228155, Jul 25, 2019

Mar 29, 2019

16/370849

Abhishek Basak - Hillsboro OR, US
Li Chen - Hillsboro OR, US
Salmin Sultana - Hillsboro OR, US
Erdem Aktas - Beaverton OR, US
Saeedeh Komijani - Mountain View CA, US

G06F 21/56
G06F 12/1027
G06F 21/55
G06N 20/00

Methods, apparatus, systems and articles of manufacture are disclosed for anomalous memory access pattern detection for translational lookaside buffers. An example apparatus includes a communication interface to retrieve a first eviction data set from a translational lookaside buffer associated with a central processing unit; a machine learning engine to: generate an anomaly detection model based upon at least one of a second eviction data set not including an anomaly and a third eviction data set including the anomaly; and determine whether the anomaly is present in the first eviction data set based on the anomaly detection model; and an alert generator to at least one of modify a bit value or terminate memory access operations when the anomaly is determined to be present.

20190163900, May 30, 2019

Jan 11, 2019

16/246187

- Santa Clara CA, US
Jason Martin - Beaverton OR, US
Justin Gottschlich - Santa Clara CA, US
Salmin Sultana - Hillsboro OR, US
Li Chen - Hillsboro OR, US
Wei Li - Hillsboro OR, US
Priyam Biswas - West Lafayette IN, US
Paul Carlson - Hillsboro OR, US

G06F 21/52
G05B 23/02
G06N 20/00
G06F 21/51

Methods, systems, articles of manufacture and apparatus to detect process hijacking are disclosed herein. An example apparatus to detect control flow anomalies includes a parsing engine to compare a target instruction pointer (TIP) address to a dynamic link library (DLL) module list, and in response to detecting a match of the TIP address to a DLL in the DLL module list, set a first portion of a normalized TIP address to a value equal to an identifier of the DLL. The example apparatus disclosed herein also includes a DLL entry point analyzer to set a second portion of the normalized TIP address based on a comparison between the TIP address and an entry point of the DLL, and a model compliance engine to generate a flow validity decision based on a comparison between (a) the first and second portion of the normalized TIP address and (b) a control flow integrity model.