公开(公告)号：US10983901B1

公开(公告)日：2021-04-20

申请号：US15992633

申请日：2018-05-30

Applicant: Amazon Technologies, Inc.

Inventor： Craig Wilfred Pearce ,  Bryan Williams ,  Khai Tran

IPC: G06F9/44 ,  G06F9/445 ,  G06F11/36

Abstract: Techniques are described for “fuzz testing” serverless software applications (for example, software applications implemented by a serverless compute service provided by a service provider network). Fuzz testing is an automated testing technique involving a fuzzer client application (or simply “fuzzer”) providing invalid, unexpected, or random data as inputs to a software application that is the target of the testing to discover software bugs and other runtime issues during execution of the software. To fuzz test a serverless application, a fuzzer continuously sends inputs to the serverless application and, when a runtime error is detected (for example, by monitoring log data generated by the serverless application), a copy of the serverless application can be invoked with the suspected error-inducing input to verify that the input indeed causes the error without interrupting the fuzzer's testing of the original serverless application.

公开(公告)号：US10977379B1

公开(公告)日：2021-04-13

申请号：US16007611

申请日：2018-06-13

Applicant: Amazon Technologies, Inc.

Inventor： Bryan Williams ,  Khai Tran

IPC: G06F21/60 ,  G06F21/62 ,  G06F16/28 ,  G06F16/22

Abstract: This disclosure describes techniques implemented partly by a service provider to monitor a cloud-based service by generating and placing canary records in storage locations along with real records to identify improper access events of the records or other data. The service provider may detect an access event where records in a storage location were accessed, and determine whether a canary record was accessed. If a canary record was accessed, the service provider may determine that the access event was potentially performed by a malicious entity because authorized users generally may not have reason to access a canary record when utilizing their cloud-based service. The service provider may generate canary records that are difficult to identify by a malicious entity, and may position canary records in the storage locations to help ensure that the canary records are accessed by a malicious entity during an improper access event.

公开(公告)号：US10540270B1

公开(公告)日：2020-01-21

申请号：US15880382

申请日：2018-01-25

Applicant: Amazon Technologies, Inc.

Inventor： Osman Surkatty ,  Josh Phelan Dukes ,  Khai Tran ,  Oleg Mitrofanov

IPC: G06F11/36 ,  G06F9/445 ,  G06F9/44 ,  G06F9/54

Abstract: Systems and methods are disclosed herein for performing automated testing of software. Information characterizing a set of application programming interface (API) calls is associated with the software. Dependencies between the API calls are determined using the information and a representation is generated using the dependencies. The dependencies of the representation are verified by providing API requests to the API calls. The verified representation is provided for automated testing of an API and the associated API calls.