知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

10 records (took 0.016 seconds)

    Automated threat modeling using machine-readable threat models
    1.
    发明授权
    Automated threat modeling using machine-readable threat models 有权

    公开(公告)号：US11418532B1

    公开(公告)日：2022-08-16

    申请号：US16842496

    申请日：2020-04-07

    Applicant: Amazon Technologies, Inc.

    Inventor： Michael Tautschnig ,  Neha Rungta ,  John Cook ,  Pauline Virginie Bolignano ,  Todd Granger MacDermid ,  Oksana Tkachuk

    IPC: H04L29/06 ,  H04L9/40

    Abstract: This disclosure describes techniques for automating a system-level security review of a network-based service. The techniques may include generating and utilizing a machine-readable threat model to identify system-level security threats to the network-based service. The network-based service may be scanned upon being provisioned in a service-provider network, and the machine-readable threat model may be generated based on results of the scan. The machine-readable threat model may represent components of the network-based service, system-level security constraints configured to identify system-level security threats to the service, and mitigations to remedy violations to the system-level security constraints. The network-based service may be continuously, or periodically, scanned to identify changes in the network-based service. The techniques further include updating the machine-readable threat model to account for the detected changes to the network-based service, and analyzing the updated machine-readable threat model to determine whether the changes to the network-based service violate a system-level security constraint.

    Automated threat modeling using machine-readable threat models
    3.
    发明授权
    Automated threat modeling using machine-readable threat models 有权

    公开(公告)号：US10652266B1

    公开(公告)日：2020-05-12

    申请号：US15907870

    申请日：2018-02-28

    Applicant: Amazon Technologies, Inc.

    Inventor： Michael Tautschnig ,  Neha Rungta ,  John Cook ,  Pauline Virginie Bolignano ,  Todd Granger MacDermid ,  Oksana Tkachuk

    IPC: H04L29/06

    Abstract: This disclosure describes techniques for automating a system-level security review of a network-based service. The techniques may include generating and utilizing a machine-readable threat model to identify system-level security threats to the network-based service. The network-based service may be scanned upon being provisioned in a service-provider network, and the machine-readable threat model may be generated based on results of the scan. The machine-readable threat model may represent components of the network-based service, system-level security constraints configured to identify system-level security threats to the service, and mitigations to remedy violations to the system-level security constraints. The network-based service may be continuously, or periodically, scanned to identify changes in the network-based service. The techniques further include updating the machine-readable threat model to account for the detected changes to the network-based service, and analyzing the updated machine-readable threat model to determine whether the changes to the network-based service violate a system-level security constraint.

    Automated threat modeling using machine-readable threat models
    6.
    发明授权
    Automated threat modeling using machine-readable threat models 有权

    公开(公告)号：US11750642B1

    公开(公告)日：2023-09-05

    申请号：US17887803

    申请日：2022-08-15

    Applicant: Amazon Technologies, Inc.

    Inventor： Michael Tautschnig ,  Neha Rungta ,  John Cook ,  Pauline Virginie Bolignano ,  Todd Granger MacDermid ,  Oksana Tkachuk

    IPC: H04L29/06 ,  H04L9/40

    CPC classification number: H04L63/1433 ,  H04L63/10 ,  H04L63/1441 ,  H04L63/20

    Abstract: This disclosure describes techniques for automating a system-level security review of a network-based service. The techniques may include generating and utilizing a machine-readable threat model to identify system-level security threats to the network-based service. The network-based service may be scanned upon being provisioned in a service-provider network, and the machine-readable threat model may be generated based on results of the scan. The machine-readable threat model may represent components of the network-based service, system-level security constraints configured to identify system-level security threats to the service, and mitigations to remedy violations to the system-level security constraints. The network-based service may be continuously, or periodically, scanned to identify changes in the network-based service. The techniques further include updating the machine-readable threat model to account for the detected changes to the network-based service, and analyzing the updated machine-readable threat model to determine whether the changes to the network-based service violate a system-level security constraint.

    Static code analysis tool and configuration selection via codebase analysis
    7.
    发明授权
    Static code analysis tool and configuration selection via codebase analysis 有权

    公开(公告)号：US11494285B1

    公开(公告)日：2022-11-08

    申请号：US17038044

    申请日：2020-09-30

    Applicant: Amazon Technologies, Inc.

    Inventor： Norbert Manthey ,  Michael Tautschnig

    IPC: G06F11/36 ,  G06N20/00

    Abstract: Techniques for static code analysis tool and configuration recommendation via codebase analysis are described. Multiple codebases are tested using multiple static analysis tools and corresponding configurations, and a machine learning model is trained based on the results and characteristics of the codebases. Users may provide a codebase to be analyzed and job preferences indicating what characteristics of static analysis they desire, the codebase may be analyzed to generate input data for the model, and the model may identify one or more similar testing runs. These candidate runs may be filtered and/or ordered based on the user's stated job preferences, and the resulting tools and configurations associated with these runs may be returned to the user or used to perform static analysis of the user's codebase.

    Refinement of static analysis of program code
    8.
    发明授权
    Refinement of static analysis of program code 有权

    公开(公告)号：US11200144B1

    公开(公告)日：2021-12-14

    申请号：US15696056

    申请日：2017-09-05

    Applicant: Amazon Technologies, Inc.

    Inventor： John Cook ,  Kalpana Gondi ,  Michael Tautschnig

    IPC: G06F11/36

    Abstract: Methods, systems, and computer-readable media for refinement of static analysis of program code are disclosed. A report is received. The report was generated using initial static analysis of program code. The report indicates a plurality of warnings regarding the program code, at least some of which represent potential flaws, and the warnings are associated with a plurality of segments of the program code. Additional analysis of the segments of program code is performed. The additional analysis differs at least in part from the initial static analysis. Based at least in part on the additional analysis, at least some of the warnings are determined to represent false positives.

    Targeted security monitoring using semantic behavioral change analysis
    9.
    发明授权
    Targeted security monitoring using semantic behavioral change analysis 有权

    公开(公告)号：US10769250B1

    公开(公告)日：2020-09-08

    申请号：US15794757

    申请日：2017-10-26

    Applicant: Amazon Technologies, Inc.

    Inventor： Michael Tautschnig ,  John Cook

    IPC: G06F21/00 ,  G06F21/12 ,  G06F8/41 ,  G06F11/34 ,  G06F8/71 ,  G06F8/75

    Abstract: Techniques for targeted security monitoring using semantic behavioral change analysis are described. A mutation monitor can use a code repository to generate a build of a software project prior to a code commit and another build after the code commit. An instruction-difference between the builds can be generated and used to perform a change impact analysis to identify control-flow and data dependencies changed as a result of the code commit. A semantic difference can be generated by annotating a syntactic difference for the code commit based on the identified control-flow and data dependency changes to allow for the behavioral changes to be easily shown to a user. Security impact analysis can be performed on parts of the software impacted by the code commit to quickly determine the security impacts introduced by the code commit.

Patent Agency Ranking