公开(公告)号：US11861007B1

公开(公告)日：2024-01-02

申请号：US17213575

申请日：2021-03-26

Applicant: Amazon Technologies, Inc.

Inventor： Mircea Ciubotariu ,  Shlomo Yehezkel ,  Peter Ferrie

IPC: G06F21/56 ,  G06F9/455

CPC classification number: G06F21/566 ,  G06F9/45558 ,  G06F21/567 ,  G06F2009/45579 ,  G06F2009/45587 ,  G06F2009/45591

Abstract: Techniques for detecting container threats are described. A method of detecting container threats includes receiving, by a scanning agent on a scanner container on a host in a provider network, event data from a plurality of collection agents corresponding to a plurality of customer containers on the host, determining, by the scanning agent, the event data matches at least one known threat, and generating, by the scanning agent, event findings associated with the event data.

公开(公告)号：US11372811B1

公开(公告)日：2022-06-28

申请号：US16836203

申请日：2020-03-31

Applicant: Amazon Technologies, Inc.

Inventor： Mircea Ciubotariu ,  Sandeep Kumar ,  Shlomo Yehezkel ,  Chakravarthi Kalyana Valicherla ,  Tal Eidelman ,  Shane Pereira

IPC: G06F16/11 ,  G06F16/17 ,  G06F21/56 ,  G06F16/13 ,  G06F16/182

Abstract: Techniques for optimizing disk volume scanning using snapshot metadata are described. A method of optimizing disk volume scanning using snapshot metadata may include determining, by a scanning service of a provider network, a plurality of changed blocks between a current snapshot of a storage volume in a storage service of the provider network and a reference snapshot of the storage volume, determining one or more files that overlap at least one of the plurality of changed blocks, and scanning the one or more files for threats.