Amazon Technologies, Inc.

Catherine Watkins

John Schweitzer

Michael Lowney

Patrick Collard

Jared Sylvester

Wayne Alan Fullen

Luke Kenneth Schubert

Ravi Karnam

Evripidis Paraskevas

Stephen Goodman

Elisabeth Margaret Nagy

Jacob Nguyen

William Kupersanin

Sai Srinivas Vemula

Described are systems and methods for determining a reputation score and/or a confidence score for a network identifier that represents, respectively, a likelihood that the network identifier presents a threat and/or a likelihood that the network activity associated with the network identifier corresponds to a port scanning, enumeration, or other malicious event. Embodiments of the present disclosure can utilize various network telemetry information, such as authentication activity, outbound traffic activity, web activity, honeypot connection activity, or network classification information to determine the reputation and/or confidence scores in response to a query/request and/or in connection with potentially malicious activity that can represent a likelihood that the detected potentially malicious activity is malicious/legitimate and the potential impact that remediation measures taken against the network identifier may have in the event that the detected network activity was legitimate.

Reputation and confidence scoring for network identifiers based on network telemetry

Growing community of inventors

Baltimore, MD, United States of America

Catherine Watkins