Amazon Technologies, Inc.

Alexander Noble Adkins

Matthew Michael Sommer

Brendan Cruz Colon

Christopher Miller

Adam Edward Powers

Joshua Hansen

Michael Chad McClure

Dennis Naylor Brown

Kimberly A Young

Joel Booker

Michael Alexander Cecil

Diana Keller

Samantha Felice

Lance Dennis Leishman

Dorion Carroll

Daniel Azuara

A method includes generating a set of training data, wherein a first training instance of the set of training data comprises a first plurality of messages between a first customer service agent and a first purported customer and a first label indicating whether one or more messages of the first plurality of messages are associated with malicious behavior; training a large language model (LLM) using the set of training data to generate messages; generating, by the LLM representing a second purported customer, a message associated with malicious behavior; receiving a response message from a second customer service agent based on the message associated with malicious behavior; and in response to the response message being an authorization, generating a feedback for the second customer service agent based on a number of responses before the response was an action.

Large language model to detect and emulate malicious activity

Devices and techniques are generally described for unused identity and access management rights detection. In various examples, a first skill-usage vector associated with a first profile may be determined. A first nearest neighbor algorithm and the first skill-usage vector may be used to determine a second skill-usage vector grouped together with the first skill-usage vector in a feature space, where the second skill-usage vector is associated with a second profile. A first rights vector associated with the first profile may be determined. The first rights vector associated with the first profile may be compared to a second rights vector associated with the second profile. At least one unused right associated with the first profile may be determined based at least in part on the comparing of the first rights vector to the second rights vector.

Peer-based inference of unused identity and access management rights

Devices and techniques are generally described for anomalous computer activity detection. In various examples, first computer activity data associated with a first account may be determined. A first linear detection event that corresponds to the first computer activity data may be determined. In some examples, a set of gradient-based data associated with the first linear detection event may be determined. The set of gradient-based data may represent comparative analysis of the first computer activity data with computer activity data of other accounts. In some examples, first data representing the first linear detection event and the set of gradient-based data may be generated. In various cases, network access for the first account may be disabled based on the first data.

Anomalous computer activity detection and prevention

Growing community of inventors

Catlettsburg, KY, United States of America

Alexander Noble Adkins