Amazon Technologies, Inc.

Bryan Williams

Khai Tran

Craig Wilfred Pearce

Techniques are described for 'fuzz testing' serverless software applications (for example, software applications implemented by a serverless compute service provided by a service provider network). Fuzz testing is an automated testing technique involving a fuzzer client application (or simply 'fuzzer') providing invalid, unexpected, or random data as inputs to a software application that is the target of the testing to discover software bugs and other runtime issues during execution of the software. To fuzz test a serverless application, a fuzzer continuously sends inputs to the serverless application and, when a runtime error is detected (for example, by monitoring log data generated by the serverless application), a copy of the serverless application can be invoked with the suspected error-inducing input to verify that the input indeed causes the error without interrupting the fuzzer's testing of the original serverless application.

Systems and methods for fuzz testing serverless software applications

This disclosure describes techniques implemented partly by a service provider to monitor a cloud-based service by generating and placing canary records in storage locations along with real records to identify improper access events of the records or other data. The service provider may detect an access event where records in a storage location were accessed, and determine whether a canary record was accessed. If a canary record was accessed, the service provider may determine that the access event was potentially performed by a malicious entity because authorized users generally may not have reason to access a canary record when utilizing their cloud-based service. The service provider may generate canary records that are difficult to identify by a malicious entity, and may position canary records in the storage locations to help ensure that the canary records are accessed by a malicious entity during an improper access event.

Growing community of inventors

Seattle, WA, United States of America

Bryan Williams