-
公开(公告)号：US09754116B1
公开(公告)日：2017-09-05
申请号：US14476600
申请日：2014-09-03
Applicant: Amazon Technologies, Inc.
Inventor： Gregory Branchek Roth , Aaron Douglas Dokey , Eric Jason Brandwine , Nathan Bartholomew Thomas
CPC classification number: G06F21/602 , G06F21/57 , G06F21/6218
Abstract: Techniques for operating web services within secure execution environments running within computing resource service provider environments are described herein. A web service provides an application that can be instantiated within a secure execution environment associated with a customer computer system that is hosted by a computing resource service provider and programmatically managed by the customer and the customer computer system provides validation of the secure execution environment. Web service requests from the customer computer system are received by the web service application hosted within the secure execution environment. As the one or more web service requests are received by the web service within the secure execution environment, the requests are fulfilled by executing instructions associated with the web service within the secure execution environment.
-
公开(公告)号：US20150082428A1
公开(公告)日：2015-03-19
申请号：US14551819
申请日：2014-11-24
Applicant: Amazon Technologies, Inc.
Inventor： Aaron Douglas Dokey , Ian Roger Searle , Eric Jason Brandwine
IPC: H04L29/06
CPC classification number: H04L63/1408 , G06F21/50 , G06F21/554
Abstract: The behavior of a group of resources, such as a fleet of servers, can be monitored to attempt to determine a baseline of acceptable behaviors. When a behavior is observed, the baseline can be consulted to determine whether the behavior is indicated to be acceptable. If not, the rate or extent at which the newly observed behavior is observed on groupings of similar resources can be monitored. This information can be used to determine whether the behavior is acceptable in which case information for the observed behavior can be used to automatically update the baseline such that the baseline is representative of current acceptable behavior within the group of resources.
Abstract translation: 可以监视一组资源（例如服务器队列）的行为，以尝试确定可接受行为的基准。 当观察到行为时，可以查阅基线以确定行为是否被指示为可接受的。 如果没有，可以监测在类似资源分组中观察到新观察到的行为的速度或程度。 该信息可以用于确定行为是否可接受，在哪种情况下，可以使用观察到的行为的信息来自动更新基线，使得基线代表资源组内当前可接受的行为。
-
公开(公告)号：US08959633B1
公开(公告)日：2015-02-17
申请号：US13828265
申请日：2013-03-14
Applicant: Amazon Technologies, Inc.
Inventor： Aaron Douglas Dokey , Ian Roger Searle , Eric Jason Brandwine
CPC classification number: H04L63/1408 , G06F21/50 , G06F21/554
Abstract: The behavior of a group of resources, such as a fleet of servers, can be monitored to attempt to determine a baseline of acceptable behaviors. When a behavior is observed, the baseline can be consulted to determine whether the behavior is indicated to be acceptable. If not, the rate or extent at which the newly observed behavior is observed on groupings of similar resources can be monitored. This information can be used to determine whether the behavior is acceptable in which case information for the observed behavior can be used to automatically update the baseline such that the baseline is representative of current acceptable behavior within the group of resources.
Abstract translation: 可以监视一组资源（例如服务器队列）的行为，以尝试确定可接受行为的基准。 当观察到行为时，可以查阅基线以确定行为是否被指示为可接受的。 如果没有，可以监测在类似资源分组中观察到新观察到的行为的速度或程度。 该信息可用于确定行为是否可接受，在哪种情况下，可以使用观察到的行为的信息来自动更新基线，使得基线代表资源组内当前可接受的行为。
-
公开(公告)号：US11720536B1
公开(公告)日：2023-08-08
申请号：US16193837
申请日：2018-11-16
Applicant: Amazon Technologies, Inc.
Inventor： Lauren M Kisser , Timothy Lawrence Harris , Aaron Douglas Dokey
CPC classification number: G06F16/22 , G06F9/5027 , G06F9/547 , G06F16/2456 , H04L63/105 , G06N20/00
Abstract: Systems and methods for data enrichment as a service are described herein. A service provider of a computing resource service provider may provide services for enriching data with additional data. The service provider may receive a set of enrichment parameters. The enrichment parameters may be used to determine whether data obtained by the service provider is eligible for enrichment. If data is eligible for enrichment, the data may be enriched according to the enrichment parameters, thereby generating enriched data. The enriched data may be stored in association with the data.
-
公开(公告)号：US09584517B1
公开(公告)日：2017-02-28
申请号：US14476532
申请日：2014-09-03
Applicant: Amazon Technologies, Inc.
Inventor： Gregory Branchek Roth , Aaron Douglas Dokey , Eric Jason Brandwine , Nathan Bartholomew Thomas
CPC classification number: H04L63/10 , G06F21/53 , G06F21/602 , G06F21/6209 , H04L63/0442 , H04L67/34
Abstract: Methods and systems for instantiating an enclave according to a request, the enclave being instantiated at a determined location of a set of locations in a computing environment of a computing resource service provider hosting a set of computing resources. The enclave further being instantiated with executable code specified by a customer for processing network traffic in accordance with the executable code in a computing environment.
Abstract translation: 用于根据请求实例化飞地的方法和系统，该飞地在承载一组计算资源的计算资源服务提供商的计算环境中的一组位置的确定位置处被实例化。 该飞地还进一步用客户指定的可执行代码实例化，以便根据计算环境中的可执行代码处理网络流量。
-
Patent Agency Ranking
公开(公告)号：US20170054696A1
公开(公告)日：2017-02-23
申请号：US15344391
申请日：2016-11-04
Applicant: Amazon Technologies, Inc.
Inventor： Gregory Branchek Roth , Aaron Douglas Dokey , Eric Jason Brandwine , Nathan Bartholomew Thomas
CPC classification number: H04L63/0428 , G06F21/53 , G06F21/6281 , G06F21/645 , H04L41/50 , H04L41/5054 , H04L47/70 , H04L63/083 , H04L67/02
Abstract: Techniques for hosting components of provider services within secure execution environments are described herein. Information associated with a request received at a control plane of a service is received at a secure execution environment and, based at least in part on that information, one or more tasks is determined that may be performed to respond to the request. A task of the one or more tasks is performed within the secure execution environment to generate a response to the request, the response is encrypted within the secure execution environment using a key stored within the secure execution environment and available to a component of a computer system, and the encrypted response is made available.
Abstract translation: 本文描述了在安全执行环境中托管提供商服务的组件的技术。 在安全执行环境中接收与在服务的控制平面处接收到的请求相关联的信息，并且至少部分地基于该信息确定可以执行的一个或多个任务来响应该请求。 在安全执行环境中执行一个或多个任务的任务以产生对请求的响应，使用存储在安全执行环境内的密钥在安全执行环境内对响应进行加密，并且可用于计算机系统的组件 ，并且加密的响应是可用的。
-
公开(公告)号：US09491111B1
公开(公告)日：2016-11-08
申请号：US14476468
申请日：2014-09-03
Applicant: Amazon Technologies, Inc.
Inventor： Gregory Branchek Roth , Aaron Douglas Dokey , Eric Jason Brandwine , Nathan Bartholomew Thomas
IPC: H04L29/06 , H04L12/911 , H04L12/24
CPC classification number: H04L63/0428 , G06F21/53 , G06F21/6281 , G06F21/645 , H04L41/50 , H04L41/5054 , H04L47/70 , H04L63/083 , H04L67/02
Abstract: Techniques for securely instantiating control plane components of provider services, at least a portion of which are instantiated within secure execution environments, are described herein. A request to instantiate the control plane of a service provided by a computing resource service provider is fulfilled by selecting a target computer system. The target computer system is selected based at least in part on the hardware capabilities of the target computer system. The control plane is then instantiated within a secure execution environment operating on the target computer system.
Abstract translation: 这里描述了用于安全地实例化提供者服务的控制平面组件的技术，其至少一部分在安全执行环境中被实例化。 通过选择目标计算机系统来实现实例化由计算资源服务提供商提供的服务的控制平面的请求。 至少部分地基于目标计算机系统的硬件能力来选择目标计算机系统。 然后在运行在目标计算机系统上的安全执行环境中实例化控制平面。
-
公开(公告)号：US10061915B1
公开(公告)日：2018-08-28
申请号：US14476593
申请日：2014-09-03
Applicant: Amazon Technologies, Inc.
Inventor： Gregory Branchek Roth , Aaron Douglas Dokey , Eric Jason Brandwine , Nathan Bartholomew Thomas
Abstract: Systems and methods for providing computer system monitoring as a service of a computing resource service provider, monitoring capacity computer system of a customer of the computing resource service provider, and based on the request, launching a monitoring agent in a protected execution environment in which the monitoring agent is configured to generate an assessment of the computer system and provide the assessment of the computer system.
-
公开(公告)号：US09577829B1
公开(公告)日：2017-02-21
申请号：US14476635
申请日：2014-09-03
Applicant: Amazon Technologies, Inc.
Inventor： Gregory Branchek Roth , Aaron Douglas Dokey
CPC classification number: G06F21/60 , G06F21/53 , G06F21/57 , G06F21/602 , G06F21/6218 , H04L9/3236 , H04L2209/46
Abstract: A system and method of performing a multi-party computation by determining a function for use in the multi-party computation, receiving a plurality of input values for the function, evaluating the function based at least in part on the plurality of input values to generate a result wherein the result is not usable to determine an input of the plurality of input values, and providing an output based at least in part on the result.
Abstract translation: 一种通过确定在多方计算中使用的功能来执行多方计算的系统和方法，接收所述功能的多个输入值，至少部分地基于所述多个输入值来评估所述功能以产生 其结果是其结果不能用于确定多个输入值的输入，并且至少部分地基于结果提供输出。
-
公开(公告)号：US09569232B1
公开(公告)日：2017-02-14
申请号：US13770145
申请日：2013-02-19
Applicant: Amazon Technologies, Inc.
Inventor： Eric Jason Brandwine , Aaron Douglas Dokey , Ajith Jayamohan , Ian Roger Searle
CPC classification number: G06F9/455 , G06F9/45533 , G06F9/45558 , G06F12/14 , G06F2009/45591 , G06F2009/45595 , H04L29/06877 , H04L43/026 , H04L43/04 , H04L43/16 , H04L47/2441 , H04L63/0227 , H04L63/14 , H04L63/1408 , H04L63/1425 , H04L63/1458
Abstract: Approaches are described for collecting and/or utilizing network traffic information, such as network flow data, within a virtualized computing environment. The network traffic information can be collected on one or more host computing devices that host virtual machines. The collected network traffic information can include virtualized computing environment specific information, such as a user account identifier (ID), virtual machine identifier (ID), session termination information and the like. The collected network traffic information can also be presented to the user of the virtualized computing environment.
Abstract translation: 描述了用于在虚拟化计算环境内收集和/或利用网络流量信息（诸如网络流数据）的方法。 可以在托管虚拟机的一个或多个主机计算设备上收集网络流量信息。 收集的网络流量信息可以包括诸如用户帐户标识符（ID），虚拟机标识符（ID），会话终止信息等的虚拟化计算环境特定信息。 收集的网络流量信息也可以呈现给虚拟化计算环境的用户。
-
-
-
-
-
-
-
-
-
Search Results
24
records
(took 0.019 seconds)
