公开(公告)号：US20240004681A1

公开(公告)日：2024-01-04

申请号：US17809859

申请日：2022-06-29

Applicant: Amazon Technologies, Inc.

Inventor： Alexander Graf ,  Ioannis Aslanidis ,  Deepak Gupta ,  Jonathan Daniel Bean

IPC: G06F9/455 ,  G06F21/44

CPC classification number: G06F9/45558 ,  G06F21/44 ,  G06F2009/45587 ,  G06F2009/45579 ,  G06F2009/45595

Abstract: A virtualized computing service provides a computing instance capable of requesting attestation of the authenticity of the hypervisor implementing the computing instances. An attestation device included in a virtualization host maintains a log of hash values representing hypervisor versions that have been implemented at the virtualization host. Also, an independent auditor (e.g., attestation service) is provided software configurations that are known to be authentic. The independent auditor generates hash values for the authentic hypervisor versions. The computing instance receives a response from the local attestation device indicating hash values of hypervisor versions currently and/or previously deployed on the virtualization host, and the computing instance forwards the hash values to the independent auditor to authenticate that they match the hash values of the known authentic hypervisor versions. In some embodiments, a similar process may also be used to attest to the authenticity of operating systems used by the computing instance.

公开(公告)号：US11816550B1

公开(公告)日：2023-11-14

申请号：US16933215

申请日：2020-07-20

Applicant: Amazon Technologies, Inc.

Inventor： Deepak Gupta ,  Anirban Majumder ,  Prateek Sircar ,  Rajeev Ramnarain Rastogi

IPC: G06N20/20 ,  G06N5/04 ,  G06N5/01

CPC classification number: G06N20/20 ,  G06N5/01 ,  G06N5/04

Abstract: Devices and techniques are generally described for generating confidence scores for boosting-based tree machine learning models. In various examples, a first record comprising a plurality of input variables may be received. In another example, a boosting-based tree machine learning model may generate, for the first record, a base model score. In various examples, the base model score may be generated based on the plurality of input variables and the base model score may represent a likelihood that the first record is associated with a first class. In some examples, a score confidence machine learning model may generate a confidence score for the first record. The confidence score may indicate a confidence in the base model score. In various examples, the first record may be processed based at least in part on the confidence score.

公开(公告)号：US11924336B1

公开(公告)日：2024-03-05

申请号：US17359240

申请日：2021-06-25

Applicant: Amazon Technologies, Inc.

Inventor： Atul Khare ,  Deepak Gupta ,  Petre Eftime ,  Madalin Razvan Nastase

IPC: H04L9/08 ,  G06F9/455

CPC classification number: H04L9/0861 ,  G06F9/45558 ,  G06F2009/45587

Abstract: A pair of virtualized security device initialization data sets are received at a first virtualization server from respective sources prior to a launch of a compute instance at the server. A first virtualized security device is initialized using the data sets, and used to generate cryptographic artifacts used by the compute instance. A data item which was included in one of the data sets is modified after the cryptographic artifacts are generated. Additional cryptographic artifacts are generated by a second virtualized security device at a second virtualization server to which the compute instance has been migrated. The second virtualized security device is initialized using at least the modified data item.