公开(公告)号：US10572245B1

公开(公告)日：2020-02-25

申请号：US15252038

申请日：2016-08-30

Applicant: Amazon Technologies, Inc.

Inventor： Bjoern Doebel ,  Konrad Jan Miller ,  Martin Thomas Pohlack

IPC: G06F8/656 ,  G06F8/71

Abstract: A particular portion of a program which can be read from on-disk representations of the program as well as from memory images of the program is identified for use as a version discriminator. A first representation of the portion may be obtained from a first memory image of the program, corresponding to a first running instance of the program. The first representation may be compared to a second representation obtained at a development environment. Based on the results of the comparison, a particular version of the program corresponding to the first running instance may be identified. An indication of the particular version may be stored.

公开(公告)号：US11200047B2

公开(公告)日：2021-12-14

申请号：US16797827

申请日：2020-02-21

Applicant: Amazon Technologies, Inc.

Inventor： Bjoern Doebel ,  Konrad Jan Miller ,  Martin Thomas Pohlack

IPC: G06F8/656 ,  G06F8/71

Abstract: A particular portion of a program which can be read from on-disk representations of the program as well as from memory images of the program is identified for use as a version discriminator. A first representation of the portion may be obtained from a first memory image of the program, corresponding to a first running instance of the program. The first representation may be compared to a second representation obtained at a development environment. Based on the results of the comparison, a particular version of the program corresponding to the first running instance may be identified. An indication of the particular version may be stored.

公开(公告)号：US12229248B1

公开(公告)日：2025-02-18

申请号：US17203600

申请日：2021-03-16

Applicant: Amazon Technologies, Inc.

Inventor： Pawel Wieczorkiewicz ,  Martin Pohlack ,  Uwe Dannowski ,  Bjoern Doebel

IPC: G06F21/54 ,  G06F9/455 ,  G06F12/0864 ,  G06F12/0882 ,  G06F21/55 ,  G06F21/56 ,  G06F21/79

Abstract: A computer system and associated methods are disclosed for mitigating side-channel attacks using memory page remapping. The computer system includes a main memory and a shared cache, the shared cache implementing cache set associativity determined by a portion of memory addresses of the main memory. Multiple physical memory pages are reserved for mapping to a virtual memory page, the physical memory pages differing in the respective portions of their memory addresses determining cache set associativity. Accesses to the virtual memory page result in a mapping of one of the reserved physical memory pages to the virtual memory page, with remapping events causing different ones of the physical memory pages to become mapped. This remapping results in varying cache set associativity of elements stored in the virtual memory page over time.

公开(公告)号：US11531531B1

公开(公告)日：2022-12-20

申请号：US15916099

申请日：2018-03-08

Applicant: Amazon Technologies, Inc.

Inventor： Bjoern Doebel ,  Martin Thomas Pohlack

IPC: G06F8/60 ,  G06F8/656 ,  G06F8/65 ,  G06F8/71 ,  G06F9/48

Abstract: An execution of an instance of a program that does not include checkpoint-based live update functionality is paused. A set of objects containing state information of the program is identified from a portion of memory used by the instance, and stored in a checkpoint of the program. The execution of the instance is resumed using at least the checkpoint and code that has been dynamically introduced into the instance.