公开(公告)号：US11271949B1

公开(公告)日：2022-03-08

申请号：US16451926

申请日：2019-06-25

Applicant: Amazon Technologies, Inc.

Inventor： William Frederick Kruse ,  Ryan Pickren ,  Guifre Ruiz Utges ,  Zak Aaron Edwards

IPC: H04L29/06 ,  H04L67/02 ,  H04L51/00

Abstract: The disclosure herein pertains to a security vulnerability scanner. The security vulnerability scanner parses a URL into a network portion and a fragment portion. The security vulnerability scanner then runs the URL on a network-side browser to generate processed results. Advantageously, the security vulnerability scanner is able to mimic a client side browser by running various fragment portions in order to analyze security risks.

公开(公告)号：US11245717B1

公开(公告)日：2022-02-08

申请号：US16585615

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Zak Aaron Edwards ,  William Frederick Kruse ,  Ryan Pickren ,  Guifre Ruiz Utges

IPC: G06F15/173 ,  H04L29/06 ,  H04W4/14 ,  H04L29/08 ,  H04L29/12

Abstract: Techniques for automated detection and mitigation of subdomain takeovers are described. A method for automated detection and mitigation of subdomain takeovers comprises receiving, by a subdomain manager, a request to monitor one or more resources associated with one or more mapping records, periodically scanning each resource from the one or more resources, receiving a response from at least one resource indicating that the at least one resource does not exist or is invalid, and sending a notification indicating that the at least one resource does not exist or is invalid using a notification service.