知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

130 records (took 0.028 seconds)

    SECURITY PROTOCOLS FOR LOW LATENCY EXECUTION OF PROGRAM CODE
    23.
    发明申请
    SECURITY PROTOCOLS FOR LOW LATENCY EXECUTION OF PROGRAM CODE 有权

    公开(公告)号：US20160224360A1

    公开(公告)日：2016-08-04

    申请号：US14613735

    申请日：2015-02-04

    Applicant: Amazon Technologies, Inc.

    Inventor： Timothy Allen Wagner ,  Dylan Chandler Thomas ,  Ajay Nair

    IPC: G06F9/455 ,  G06F9/445

    CPC classification number: G06F9/45558 ,  G06F2009/4557

    Abstract: A system for providing security mechanisms for secure execution of program code is described. The system may be configured to maintain a plurality of virtual machine instances. The system may be further configured to receive a request to execute a program code and allocate computing resources for executing the program code on one of the virtual machine instances. One mechanism involves executing program code according to a user-specified security policy. Another mechanism involves executing program code that may be configured to communicate or interface with an auxiliary service. Another mechanism involves splitting and executing program code in a plurality of portions, where some portions of the program code are executed in association with a first level of trust and some portions of the program code are executed with different levels of trust.

    Dependency-based process of pre-existing data sets at an on demand code execution environment
    26.
    发明授权
    Dependency-based process of pre-existing data sets at an on demand code execution environment 有权

    公开(公告)号：US11132213B1

    公开(公告)日：2021-09-28

    申请号：US15085912

    申请日：2016-03-30

    Applicant: Amazon Technologies, Inc.

    Inventor： Timothy Allen Wagner ,  Marc John Brooker ,  Ajay Nair

    IPC: G06F12/08 ,  G06F9/455 ,  G06F12/0875 ,  G06F12/0862

    Abstract: Systems and methods are described for transforming a data set within a data source into a series of task calls to an on-demand code execution environment. The environment can utilize pre-initialized virtual machine instances to enable execution of user-specified code in a rapid manner, without delays typically caused by initialization of the virtual machine instances, and are often used to process data in near-real time, as it is created. However, limitations in computing resources may inhibit a user from utilizing an on-demand code execution environment to simultaneously process a large, existing data set. The present application provides a task generation system that can iteratively retrieve data items from an existing data set and generate corresponding task calls to the on-demand computing environment. The calls can be ordered to address dependencies of the data items, such as when a first data item depends on prior processing of a second data item.

    Code execution request routing
    27.
    发明授权
    Code execution request routing 有权

    公开(公告)号：US11016815B2

    公开(公告)日：2021-05-25

    申请号：US16372108

    申请日：2019-04-01

    Applicant: Amazon Technologies, Inc.

    Inventor： Scott Daniel Wisniewski ,  Marc John Brooker ,  Timothy Allen Wagner

    IPC: G06F9/455 ,  G06F9/50

    Abstract: A system for providing low-latency compute capacity is provided. The system may be configured to route incoming code execution requests based on user indications to use specific containers running on a plurality of virtual machine instances. The system may be configured to process a code execution request, identify, based on the user indication that a specific container previously used to handle a request of similar type is to be used for handling the code execution request, and cause the code execution request to be handled using the specific container.

    Operating system customization in an on-demand network code execution system
    28.
    发明授权
    Operating system customization in an on-demand network code execution system 有权

    公开(公告)号：US10949237B2

    公开(公告)日：2021-03-16

    申请号：US16023852

    申请日：2018-06-29

    Applicant: Amazon Technologies, Inc.

    Inventor： Philip Daniel Piwonka ,  Timothy Allen Wagner ,  Niall Mullen ,  Marc John Brooker

    IPC: G06F9/455 ,  G06F8/30 ,  G06F9/54

    Abstract: Systems and methods are described for managing operating system customization in an on-demand code execution system in a manner that enables efficient execution of code. A user may generate a task on the system by submitting code. The system may determine the operating system functions that the submitted code may invoke when executed on the system, and may determine whether the required functionality can be provided by a customized operating system. The customized operating system may provide some functionality but omit other functionality, and thereby avoid consuming any resources associated with making the omitted functionality available. For example, the system may determine that the user-submitted code does not require filesystem interactions, network interactions, interactions with particular devices, caching, paging, profiling, etc., and may thus provide an operating system that does not include one or more of these services.

    Detecting privilege escalations in code including cross-service calls
    30.
    发明授权
    Detecting privilege escalations in code including cross-service calls 有权

    公开(公告)号：US10831898B1

    公开(公告)日：2020-11-10

    申请号：US15888894

    申请日：2018-02-05

    Applicant: Amazon Technologies, Inc.

    Inventor： Timothy Allen Wagner

    IPC: G06F21/00 ,  G06F21/57 ,  G06F21/52 ,  G06F9/54

    Abstract: Systems and methods are described for conducting static analysis of code invoking network-based services to identify, without requiring execution of the code, security issues that may be introduced due to the invocations of the network-based services. A system is provided that may analyze code to detect both direct invocations of services, as well as indirect invocations caused by the direct invocations. The system can compare permissions information for the code to both directly or indirectly invoked services to identify instances in which the code calls services not permitted by the permissions information. In some instances, the system can traverse a “call graph” of all services invoked by code either directly or indirectly to identify permissions errors through multiple levels of indirection.

Patent Agency Ranking