专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US10705904B2 Detecting anomalous behavior in an electronic environment using hardware-based information 有权
公开(公告)号：US10705904B2
公开(公告)日：2020-07-07
申请号：US15900042
申请日：2018-02-20
申请人： Amazon Technologies, Inc.
发明人： Nachiketh Rao Potlapally , Donald Lee Bailey, Jr. , Richard Weatherly
IPC分类号： G06F11/00 , G06F11/07 , G06F11/30 , G06F11/34
摘要： Anomalous behavior in a multi-tenant computing environment may be identified by analyzing hardware sensor value data associated with hardware events on a host machine. A privileged virtual machine instance executing on a host machine acquires hardware sensor values and causes the values to be compared to other hardware sensor value data that may be indicative of anomalous behavior; for example, various threshold values, patterns, and/or signatures of hardware counter values generated by analyzing and correlating hardware event counter data. In this manner, potential anomalous behavior on an instance may be determined without having to access customer data or workloads associated with the instance.

2. 发明授权

US09049232B2 Configurable-quality random data service 有权
标题翻译：可配置质量随机数据服务
公开(公告)号：US09049232B2
公开(公告)日：2015-06-02
申请号：US13781298
申请日：2013-02-28
申请人： Amazon Technologies, Inc.
发明人： Nachiketh Rao Potlapally , Donald Lee Bailey, Jr. , Andrew Paul Mikulski , Robert Eric Fitzgerald
IPC分类号： G06F17/00 , H04L29/06 , H04L9/08
CPC分类号： H04L63/164 , H04L9/0869 , H04L63/04 , H04L63/16
摘要： Methods and apparatus for a configurable-quality random data service are disclosed. A method includes implementing programmatic interfaces enabling a determination of respective characteristics of random data to be delivered to one or more clients of a random data service of a provider network. The method includes implementing security protocols for transmission of random data to the clients, including a protocol for transmission of random data to trusted clients at devices within the provider network. The method further includes obtaining, on behalf of a particular client and in accordance with the determined characteristics, random data from one or more servers of the provider network, and initiating a transmission of the random data directed to a destination associated with the particular client.
摘要翻译：公开了可配置质量随机数据服务的方法和装置。一种方法包括实现程序化接口，使得能够将随机数据的相应特性确定为递送给提供者网络的随机数据服务的一个或多个客户端。该方法包括实现用于向客户端发送随机数据的安全协议，包括用于在提供商网络内的设备处将随机数据传输到可信客户端的协议。该方法还包括代表特定客户端并根据确定的特征获得来自提供商网络的一个或多个服务器的随机数据，以及发起指向与特定客户端相关联的目的地的随机数据的传输。

3. 发明授权

US09904587B1 Detecting anomalous behavior in an electronic environment using hardware-based information 有权
公开(公告)号：US09904587B1
公开(公告)日：2018-02-27
申请号：US14975295
申请日：2015-12-18
申请人： Amazon Technologies, Inc.
发明人： Nachiketh Rao Potlapally , Donald Lee Bailey, Jr. , Richard Weatherly
IPC分类号： G06F11/00 , G06F11/07 , G06F11/30 , G06F11/34
CPC分类号： G06F11/079 , G06F11/0709 , G06F11/0751 , G06F11/0757 , G06F11/0772 , G06F11/0793 , G06F11/3006 , G06F11/3419
摘要： Anomalous behavior in a multi-tenant computing environment may be identified by analyzing hardware sensor value data associated with hardware events on a host machine. A privileged virtual machine instance executing on a host machine acquires hardware sensor values and causes the values to be compared to other hardware sensor value data that may be indicative of anomalous behavior; for example, various threshold values, patterns, and/or signatures of hardware counter values generated by analyzing and correlating hardware event counter data. In this manner, potential anomalous behavior on an instance may be determined without having to access customer data or workloads associated with the instance.

4. 发明授权

US09819727B2 Computing infrastructure for configurable-quality random data 有权
公开(公告)号：US09819727B2
公开(公告)日：2017-11-14
申请号：US13781289
申请日：2013-02-28
申请人： Amazon Technologies, Inc.
发明人： Nachiketh Rao Potlapally , Andrew Paul Mikulski , Donald Lee Bailey, Jr. , Robert Eric Fitzgerald
IPC分类号： G06F15/16 , H04L29/08 , H04L9/08 , H04L29/06 , H04L9/06
CPC分类号： H04L67/10 , H04L9/0662 , H04L9/0869 , H04L63/20 , H04L67/1023
摘要： Methods and apparatus for a computing infrastructure for configurable-quality random data are disclosed. A storage medium stores program instructions that when executed on a processor designate some servers of a provider network as members of a pool of producers of random data usable by random data consumers. The instructions, when executed, determine a subset of the pool to be used to supply a collection of random data intended for a random data consumer, and one or more sources of random phenomena to be used to generate the collection of random data. The instructions, when executed, initiate a transmission of the collection of random data directed to the random data consumer.

5. 发明授权

US10348759B2 Threat detection and mitigation through run-time introspection and instrumentation 有权
公开(公告)号：US10348759B2
公开(公告)日：2019-07-09
申请号：US15874771
申请日：2018-01-18
申请人： Amazon Technologies, Inc.
发明人： Hassan Sultan , John Schweitzer , Donald Lee Bailey, Jr. , Gregory Branchek Roth , Nachiketh Rao Potlapally
IPC分类号： G08B23/00 , H04L29/06 , G06F21/53 , G06F21/55
摘要： A graph of a plurality of resources in a computing environment is generated, with the graph associating a first resource of the plurality with a second resource of the plurality. Based at least in part on measurements obtained at a point in a test computing environment that corresponds to a point in the computing environment, a graph representing the relationship between the first resource and the second resource is generated. A threat model identifying potential risks to the computing environment is created from the graph.

6. 发明授权

US09425966B1 Security mechanism evaluation service 有权
标题翻译：安全机制评估服务
公开(公告)号：US09425966B1
公开(公告)日：2016-08-23
申请号：US13826888
申请日：2013-03-14
申请人： Amazon Technologies, Inc.
发明人： Nachiketh Rao Potlapally , Eric Jason Brandwine , Gregory Alan Rubin , Patrick James Ward , James Leon Irving, Jr. , Andrew Paul Mikulski , Donald Lee Bailey, Jr.
IPC分类号： H04L29/06 , H04L9/32 , H04L9/30
CPC分类号： H04L9/3263 , H04L9/302 , H04L9/3268 , H04L63/0823 , H04L63/1433
摘要： Methods and apparatus for a security mechanism evaluation service are disclosed. A storage medium stores program instructions that when executed on a processor define a programmatic interface enabling a client to submit an evaluation request for a security mechanism. On receiving an evaluation request from a client indicating a particular security mechanism using public-key encryption, the instructions when executed, identify resources of a provider network to be used to respond. The instructions, when executed, provide to the client, one or more of: (a) a trustworthiness indicator for a certificate authority that issued a public-key certificate in accordance with the particular security mechanism; (b) a result of a syntax analysis of the public-key certificate; or (c) a vulnerability indicator for a key pair.
摘要翻译：公开了用于安全机制评估服务的方法和装置。存储介质存储当在处理器上执行时定义编程接口的程序指令，使得客户端能够提交对安全机制的评估请求。在从客户端接收到指示使用公钥加密的特定安全机制的评估请求时，执行指令时，识别要用于响应的提供商网络的资源。指令在执行时向客户提供以下一个或多个：（a）根据特定安全机制发布公钥证书的认证机构的可信赖性指示符; （b）公钥证书的语法分析结果; 或（c）密钥对的漏洞指示符。

7. 发明授权

US09576155B2 Trusted computing host 有权
标题翻译：可信计算主机
公开(公告)号：US09576155B2
公开(公告)日：2017-02-21
申请号：US14868006
申请日：2015-09-28
申请人： Amazon Technologies, Inc.
发明人： Nachiketh Rao Potlapally , Michael David Marr , Eric Jason Brandwine , Donald Lee Bailey, Jr.
IPC分类号： H04L29/00 , G06F21/64 , G06F21/57
CPC分类号： G06F21/55 , G06F21/57 , G06F21/602 , G06F21/64 , H04L9/0861 , H04L9/30
摘要： A trusted computing host is described that provides various security computations and other functions in a distributed multitenant and/or virtualized computing environment. The trusted host computing device can communicate with one or more host computing devices that host virtual machines to provide a number of security-related functions, including but not limited to boot firmware measurement, cryptographic key management, remote attestation, as well as security and forensics management. The trusted computing host maintains an isolated partition for each host computing device in the environment and communicates with peripheral cards on host computing devices in order to provide one or more security functions.
摘要翻译：描述了在分布式多租户和/或虚拟化计算环境中提供各种安全计算和其他功能的可信计算主机。可信主机计算设备可以与主机虚拟机的一个或多个主机计算设备进行通信，以提供许多与安全相关的功能，包括但不限于启动固件测量，密码密钥管理，远程验证以及安全和取证管理。可信计算主机为环境中的每个主机计算设备维护隔离的分区，并与主机计算设备上的外围卡进行通信，以便提供一个或多个安全功能。

8. 发明授权

US09147086B1 Trusted computing host 有权
标题翻译：可信计算主机
公开(公告)号：US09147086B1
公开(公告)日：2015-09-29
申请号：US13912948
申请日：2013-06-07
申请人： Amazon Technologies, Inc.
发明人： Nachiketh Rao Potlapally , Michael David Marr , Eric Jason Brandwine , Donald Lee Bailey, Jr.
IPC分类号： H04L29/00 , G06F21/64
CPC分类号： G06F21/55 , G06F21/57 , G06F21/602 , G06F21/64 , H04L9/0861 , H04L9/30
摘要： A trusted computing host is described that provides various security computations and other functions in a distributed multitenant and/or virtualized computing environment. The trusted host computing device can communicate with one or more host computing devices that host virtual machines to provide a number of security-related functions, including but not limited to boot firmware measurement, cryptographic key management, remote attestation, as well as security and forensics management. The trusted computing host maintains an isolated partition for each host computing device in the environment and communicates with peripheral cards on host computing devices in order to provide one or more security functions.
摘要翻译：描述了在分布式多租户和/或虚拟化计算环境中提供各种安全计算和其他功能的可信计算主机。可信主机计算设备可以与主机虚拟机的一个或多个主机计算设备进行通信，以提供许多与安全相关的功能，包括但不限于启动固件测量，密码密钥管理，远程验证以及安全和取证管理。可信计算主机为环境中的每个主机计算设备维护隔离的分区，并与主机计算设备上的外围卡进行通信，以便提供一个或多个安全功能。

9. 发明授权

US11621996B2 Computing infrastructure for configurable-quality random data 有权
公开(公告)号：US11621996B2
公开(公告)日：2023-04-04
申请号：US15811592
申请日：2017-11-13
申请人： Amazon Technologies, Inc.
发明人： Nachiketh Rao Potlapally , Andrew Paul Mikulski , Donald Lee Bailey, Jr. , Robert Eric Fitzgerald
IPC分类号： H04L67/10 , H04L9/08 , H04L67/1023 , H04L9/40 , H04L9/06
摘要： Methods and apparatus for a computing infrastructure for configurable-quality random data are disclosed. A storage medium stores program instructions that when executed on a processor designate some servers of a provider network as members of a pool of producers of random data usable by random data consumers. The instructions, when executed, determine a subset of the pool to be used to supply a collection of random data intended for a random data consumer, and one or more sources of random phenomena to be used to generate the collection of random data. The instructions, when executed, initiate a transmission of the collection of random data directed to the random data consumer.

10. 发明授权

US10110629B1 Managed honeypot intrusion detection system 有权
公开(公告)号：US10110629B1
公开(公告)日：2018-10-23
申请号：US15080504
申请日：2016-03-24
申请人： Amazon Technologies, Inc.
发明人： William Frederick Hingle Kruse , Hassan Sultan , Nicholas Howard Brown , James Leon Irving, Jr. , Donald Lee Bailey, Jr.
IPC分类号： H04L29/06
摘要： A honeypot resource management service receives a request to provision one or more honeypot resources. In response to the request, the service identifies at least one computing resource service that is to be used to present the one or more honeypot resources. The service generates configuration information that is transmitted to the at least one computing resource service to cause the computing resource service to present the one or more honeypot resources to users in accordance with a set of parameters specified in the configuration information.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式