公开(公告)号：US10887333B1

公开(公告)日：2021-01-05

申请号：US15668578

申请日：2017-08-03

Applicant: Amazon Technologies, Inc.

Inventor： Shane Anil Pereira ,  Stephen Chen ,  Zhuo Zhang

IPC: H04L29/06

Abstract: Systems for providing a multi-tenant threat intelligence service are provided. The system receives threat information from a user including IP addresses, and universal threat information including IP addresses. Modify an in-memory IP address tree using IP addresses received from the user and included in the universal threat information. Compare IP addresses from logs of network activity associated with the user to the in-memory IP address tree, and identify IP addresses included in the IP address tree. Cause matching IP addresses to be sent to the user as representing potentially malicious network activity.