公开(公告)号：US12155690B1

公开(公告)日：2024-11-26

申请号：US17643762

申请日：2021-12-10

Applicant: Amazon Technologies, Inc.

Inventor： Kelly Anne Rooker ,  Thomas Bradley Scholl ,  Kushal Mall ,  Darshan Narayana Reddy ,  Lewis Iain McLean ,  Andrew Robert Hassall ,  Grace Marie Hatamyar ,  Bradford Sachin Chatterjee ,  Sidath Manawadu ,  Bobby Brown ,  John Shields ,  Karthik Chandrashekar

IPC: H04L29/06 ,  H04L9/40 ,  H04L41/0816 ,  H04L41/28

Abstract: The present disclosure generally relates to systems and methods for utilization of network mitigation techniques in the form of null address routing to mitigate coordinated DDOS attacks. A monitoring and mitigation service can characterize a command and control node as compromised or otherwise manipulated for purposes of generating distributed attacks. The monitoring and mitigation service can then identify network mitigation information in the form of null routing addresses that will cause network communications associated with the identified command and control node to be terminated or otherwise not delivered to the intended network-based resources. The monitoring and mitigation service can propagate the null routing address to routing components. The network mitigation information can be associated with expiration criteria for the routing components that receive and implement the network mitigation technique.

公开(公告)号：US20250130980A1

公开(公告)日：2025-04-24

申请号：US18981057

申请日：2024-12-13

Applicant: Amazon Technologies, Inc.

Inventor： Karl Eric Anderson ,  Jacob A. Niebloom ,  Kelly Anne Rooker ,  Martin C Stonebraker ,  Nebi Mert Aydin

IPC: G06F16/215 ,  G06F16/23

Abstract: An event deduplication system may efficiently perform event deduplication (identifying “new” or “unique” events that might be an anomaly) by using a first stage that has multiple first stage processes running in parallel (e.g., at different data centers) and a single second stage that has a second stage process that receives and processes events from the different first stage processes. The second stage process updates a global state (e.g., lookup table) and periodically publishes the global state to the first stage processes to update their local state. When the second stage process receives a possible new event from a first stage process, it may more accurately determine whether the event is actually a new event based on the global state.

公开(公告)号：US12210497B1

公开(公告)日：2025-01-28

申请号：US17936787

申请日：2022-09-29

Applicant: Amazon Technologies, Inc.

Inventor： Karl Eric Anderson ,  Jacob A. Niebloom ,  Kelly Anne Rooker ,  Martin C Stonebraker ,  Nebi Mert Aydin

IPC: G06F16/215 ,  G06F16/23

Abstract: An event deduplication system may efficiently perform event deduplication (identifying “new” or “unique” events that might be an anomaly) by using a first stage that has multiple first stage processes running in parallel (e.g., at different data centers) and a single second stage that has a second stage process that receives and processes events from the different first stage processes. The second stage process updates a global state (e.g., lookup table) and periodically publishes the global state to the first stage processes to update their local state. When the second stage process receives a possible new event from a first stage process, it may more accurately determine whether the event is actually a new event based on the global state.