知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

28 records (took 0.033 seconds)

    Software container registry service
    14.
    发明授权
    Software container registry service 有权

    公开(公告)号：US11487530B2

    公开(公告)日：2022-11-01

    申请号：US16940261

    申请日：2020-07-27

    Applicant: Amazon Technologies, Inc.

    Inventor： Anthony Joseph Suarez ,  Scott Kerns Windsor ,  Nare Hayrapetyan ,  Daniel Robert Gerdesmeier ,  Pooja Kalpana Prakash

    IPC: G06F21/00 ,  G06F8/71 ,  G06F9/455 ,  G06F21/53 ,  G06F8/61 ,  G06F21/62

    Abstract: A request to update a software container image within a container registry hosted by a computing resource service provider is received from an entity associated with a customer account with the computing resource service provider, where the container registry is a scalable distributed data storage service. The software container image is stored in the container registry in association with the customer account. A layer of the software container image stored in the container registry is scanned for a reference identifier associated with a security vulnerability as a result of said scan finding the reference identifier within the software container image, notice is provided to the entity indicating that the security vulnerability was found. Software within the software container image is updated based at least in part on the vulnerability scan; and the update software is deployed.

    Container telemetry
    15.
    发明授权
    Container telemetry 有权

    公开(公告)号：US10782990B1

    公开(公告)日：2020-09-22

    申请号：US14951334

    申请日：2015-11-24

    Applicant: Amazon Technologies, Inc.

    Inventor： Anthony Joseph Suarez ,  Jia Bi Zhang ,  Christopher Brian Barclay ,  Anirudh Balachandra Aithal ,  Cornelle Christiaan Pretorius Janse Van Rensburg

    IPC: G06F9/455 ,  G06F9/50

    Abstract: At least one instance of an application is launched in a set of software containers that are distributed among a set of virtual machine instances. A set of measurements corresponding to resource utilization by a software container of the set of software containers is obtained and a timestamp is generated for the set of measurements. The set of measurements is aggregated, with other sets of measurements corresponding to the set of software containers for the application, into a set of aggregated measurements grouped in a time window group, based at least in part on the timestamp, and, as a result of fulfillment of a condition, the time window group is outputted.

    Software container registry service
    16.
    发明授权
    Software container registry service 有权

    公开(公告)号：US10725775B2

    公开(公告)日：2020-07-28

    申请号：US16383523

    申请日：2019-04-12

    Applicant: Amazon Technologies, Inc.

    Inventor： Anthony Joseph Suarez ,  Scott Kerns Windsor ,  Nare Hayrapetyan ,  Daniel Robert Gerdesmeier ,  Pooja Kalpana Prakash

    IPC: G06F21/00 ,  G06F8/71 ,  G06F9/455 ,  G06F21/53 ,  G06F8/61 ,  G06F21/62

    Abstract: A request to store a container image is received from a device associated with a customer of a computing resource service provider. Validity of a security token associated with the request is authenticated using a cryptographic key maintained as a secret by the computing resource service provider. One or more layers of the container image is built based at least in part on at least one build artifact to form a set of built layers. The software image including the set of built layers is stored in a repository associated with the customer. A manifest of metadata for the set of built layers is stored in a database of a structured data store. The container image is obtained in the form of an obtained container image. The obtained container image is deployed as the software container in at least one virtual machine instance associated with the customer.

    THREAT DETECTION AND MITIGATION IN A VIRTUALIZED COMPUTING ENVIRONMENT
    17.
    发明申请
    THREAT DETECTION AND MITIGATION IN A VIRTUALIZED COMPUTING ENVIRONMENT 审中-公开

    公开(公告)号：US20190297096A1

    公开(公告)日：2019-09-26

    申请号：US16435396

    申请日：2019-06-07

    Applicant: Amazon Technologies, Inc.

    Inventor： Khaja Ehteshamuddin Ahmed ,  Anthony Joseph Suarez ,  Dmitry Petrovich Andreychuk

    IPC: H04L29/06 ,  G06N20/00

    Abstract: A service provider may deploy a security threat detection and mitigation platform in a multi-tenant virtualization environment that includes pluggable data collection, data analysis, and response components. The data analysis components may apply machine learning techniques to generate (based on training data sets) and refine (based on subsequently received data sets and feedback about the resulting classifications) predictors configured to detect particular types of security threats, such as denial of service attacks, botnets, scans, or remote desktop attacks. A data collection layer may collect, filter, organize, and curate network packet traffic data, network packet header data, or other information emitted by computing instances or applications executing on them, and provide the curated data as streams to the analysis layer. A response layer may automatically take action in response to threat detections (which may be overridden by an administrator) and may store classification data for subsequent analysis, feedback, and predictor refinement.

    Software container registry service
    18.
    发明授权
    Software container registry service 有权

    公开(公告)号：US10261782B2

    公开(公告)日：2019-04-16

    申请号：US14975631

    申请日：2015-12-18

    Applicant: Amazon Technologies, Inc.

    Inventor： Anthony Joseph Suarez ,  Scott Kerns Windsor ,  Nare Hayrapetyan ,  Daniel Robert Gerdesmeier ,  Pooja Kalpana Prakash

    IPC: H04L29/06 ,  G06F8/71 ,  G06F9/455 ,  G06F21/53 ,  G06F8/61 ,  G06F21/62

    Abstract: A request to store, in first data store associated with a customer of a computing resource service provider, a software image is received, the request including a set of layers of the software image to be stored. As a result of successful authentication of the request, based at least in part on a security token included with the request, a subset of layers of the software image that have not previously been stored in the first data store are determined, based at least in part on first metadata obtained from a second data store, the subset of layers in the first data store are stored, second metadata about the subset of layers are stored in the second data store, and the software image is caused to be launched in a software container of an instance based at least in part on the subset of layers.

Patent Agency Ranking