公开(公告)号：US11228614B1

公开(公告)日：2022-01-18

申请号：US16043817

申请日：2018-07-24

Applicant: Amazon Technologies, Inc.

Inventor： Jessica Erin Clark ,  Matthew Ryan Jezorek ,  Matthew Michael Sommer

IPC: H04L29/06 ,  G06Q10/06

Abstract: Disclosed are various embodiments providing automated management of security operations centers. In one embodiment, a correlation and decision engine correlates event data generated by a plurality of monitoring services with a plurality of alerts generated by a plurality of threat intelligence services. The engine then adjusts at least one rule of one or more threat intelligence services with respect to at least one event based at least in part on a corresponding frequency of at least one of the plurality of alerts meeting a threshold, where the adjusted alert(s) are associated with the event(s).

公开(公告)号：US12063223B1

公开(公告)日：2024-08-13

申请号：US16711345

申请日：2019-12-11

Applicant: Amazon Technologies, Inc.

Inventor： Joshua Haycraft ,  Vignesh Janakiraman ,  Jessica Erin Clark ,  Pradeep Ramarao ,  Karthik Kumar Odapally

IPC: H04L29/06 ,  H04L9/40

CPC classification number: H04L63/1416 ,  H04L63/1425

Abstract: Systems and methods for implementing a system for analyzing large amounts of event data to determine any potential security threats or anomalies. Event data may be obtained and processed. The processed event data may be analyzed to detect any potential security threats or anomalies.