公开(公告)号：US09904587B1

公开(公告)日：2018-02-27

申请号：US14975295

申请日：2015-12-18

Applicant: Amazon Technologies, Inc.

Inventor： Nachiketh Rao Potlapally ,  Donald Lee Bailey, Jr. ,  Richard Weatherly

IPC: G06F11/00 ,  G06F11/07 ,  G06F11/30 ,  G06F11/34

CPC classification number: G06F11/079 ,  G06F11/0709 ,  G06F11/0751 ,  G06F11/0757 ,  G06F11/0772 ,  G06F11/0793 ,  G06F11/3006 ,  G06F11/3419

Abstract: Anomalous behavior in a multi-tenant computing environment may be identified by analyzing hardware sensor value data associated with hardware events on a host machine. A privileged virtual machine instance executing on a host machine acquires hardware sensor values and causes the values to be compared to other hardware sensor value data that may be indicative of anomalous behavior; for example, various threshold values, patterns, and/or signatures of hardware counter values generated by analyzing and correlating hardware event counter data. In this manner, potential anomalous behavior on an instance may be determined without having to access customer data or workloads associated with the instance.

公开(公告)号：US10705904B2

公开(公告)日：2020-07-07

申请号：US15900042

申请日：2018-02-20

Applicant: Amazon Technologies, Inc.

Inventor： Nachiketh Rao Potlapally ,  Donald Lee Bailey, Jr. ,  Richard Weatherly

IPC: G06F11/00 ,  G06F11/07 ,  G06F11/30 ,  G06F11/34

Abstract: Anomalous behavior in a multi-tenant computing environment may be identified by analyzing hardware sensor value data associated with hardware events on a host machine. A privileged virtual machine instance executing on a host machine acquires hardware sensor values and causes the values to be compared to other hardware sensor value data that may be indicative of anomalous behavior; for example, various threshold values, patterns, and/or signatures of hardware counter values generated by analyzing and correlating hardware event counter data. In this manner, potential anomalous behavior on an instance may be determined without having to access customer data or workloads associated with the instance.

公开(公告)号：US20180173579A1

公开(公告)日：2018-06-21

申请号：US15900042

申请日：2018-02-20

Applicant: Amazon Technologies, Inc.

Inventor： Nachiketh Rao Potlapally ,  Donald Lee Bailey, JR. ,  Richard Weatherly

IPC: G06F11/07 ,  G06F11/34 ,  G06F11/30

CPC classification number: G06F11/079 ,  G06F11/0709 ,  G06F11/0751 ,  G06F11/0757 ,  G06F11/0772 ,  G06F11/0793 ,  G06F11/3006 ,  G06F11/3419

Abstract: Anomalous behavior in a multi-tenant computing environment may be identified by analyzing hardware sensor value data associated with hardware events on a host machine. A privileged virtual machine instance executing on a host machine acquires hardware sensor values and causes the values to be compared to other hardware sensor value data that may be indicative of anomalous behavior; for example, various threshold values, patterns, and/or signatures of hardware counter values generated by analyzing and correlating hardware event counter data. In this manner, potential anomalous behavior on an instance may be determined without having to access customer data or workloads associated with the instance.