Detecting anomalous behavior patterns in an electronic environment

Patent metadata

Field	Value
Publication number	US-8959633-B1
Application number	US-201313828265-A
Country	US
Kind code	B1
Filing date	Mar 14, 2013
Priority date	Mar 14, 2013
Publication date	Feb 17, 2015
Grant date	Feb 17, 2015

Abstract

The behavior of a group of resources, such as a fleet of servers, can be monitored to attempt to determine a baseline of acceptable behaviors. When a behavior is observed, the baseline can be consulted to determine whether the behavior is indicated to be acceptable. If not, the rate or extent at which the newly observed behavior is observed on groupings of similar resources can be monitored. This information can be used to determine whether the behavior is acceptable in which case information for the observed behavior can be used to automatically update the baseline such that the baseline is representative of current acceptable behavior within the group of resources.

First claim

What is claimed is:

1. A system for providing access to at least one host machine in a multi-tenant environment, comprising:
a plurality of host machines, each host machine including at least one processor and memory for storing instructions executable by the at least one processor;
at least one interface component enabling a user device to obtain access to at least one of the plurality of host machines; and
a monitoring component in communication with the plurality of host ma…

Assignees

• Amazon Tech Inc

Inventors

• Dokey Aaron Douglas
• Searle Ian Roger
• Brandwine Eric Jason

Classifications

• G06F21/50 Primary

  Physics · mapped topic

• G06F21/554 Primary

  Physics · mapped topic

• H04L63/1408 Primary

  Electricity · mapped topic