Microsoft patents system to grade security tools that flag threats
Microsoft has filed a patent for a "disruptor validation engine" that evaluates the accuracy of security tools detecting malicious activity. The system uses machine learning to assign a probability score to each alert, determining how likely the threat is real. It then uses these scores to calculate a quality grade for the security tool itself.
In the filing’s own words
Systems and methods herein provide a disruptor validation engine and its related functions. In an aspect, a disruptor validation engine may determine disruption alerts issued by one or more disruptors, where a disruption alert indicates potential malicious activity within a tenant environment. Responsive to receiving the disruption alerts, the disruptor validation engine may generate a probability grade for a respective disruption alert. The probability grade may indicate a likelihood that the potential malicious activity triggering the disruption alert is actually malicious. The disruptor validation engine may then determine a disruption classification for the disruption alert based on a respective probability grade. Based on the disruption classification, the disruptor validation engine may generate a quality grade for the one or more disruptors indicating the validity and quality of the respective disruptor.
What exactly they claim (claim 1)
1. A system comprising: one or more processors; and a non-transitory computer-readable storage medium storing instructions that, when executed by the one or more processors, cause the system to: determine a disruption alert associated with a disruptor, wherein the disruption alert indicates potential malicious activity within a tenant environment; generate, using a machine learning model trained on historical disruption alert data, a probability value for the disruption alert; determine, based on the probability value, an assessment of the disruption alert; and generate, based on the assessment, an output indicative of a quality of the disruptor.
Facts
- Company
- Microsoft (Microsoft Technology Licensing, LLC)
- Official title
- DISRUPTOR VALIDATION ENGINE(S) FOR ASSESSING THE QUALITY OF DISRUPTORS
- Publication number
- US20260312977A1
- Application number
- 19711365
- Filed
- Jun 17, 2026
- Published
- Oct 8, 2026
- Inventors
- 4
- Claims
- 20
Classified under
H04L 63/1425 Electricity & electronicsH04L 41/16 Electricity & electronicsH04L 63/1416 Electricity & electronicsMore from Microsoft in Security & privacy
- Microsoft patents system to call 911 for others during video calls Sep 22, 2026
- Microsoft patents system to block fake code suggested by AI Sep 15, 2026
- Microsoft patents one-way data flow to block network attacks Sep 10, 2026
- Microsoft patents voice coding that hides speaker identity for secure calls Sep 17, 2026
- Microsoft patents security checks for AI chats using user and model profiles Oct 1, 2026
Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.