Amazon Technologies, Inc.

Sai Srinivas Vemula

John Schweitzer

Michael Lowney

Patrick Collard

Jared Sylvester

Wayne Alan Fullen

Catherine Watkins

Ravi Karnam

Luke Kenneth Schubert

Stephen Goodman

Evripidis Paraskevas

Elisabeth Margaret Nagy

William Kupersanin

Jacob Nguyen

Described are systems and methods for determining a reputation score and/or a confidence score for a network identifier that represents, respectively, a likelihood that the network identifier presents a threat and/or a likelihood that the network activity associated with the network identifier corresponds to a port scanning, enumeration, or other malicious event. Embodiments of the present disclosure can utilize various network telemetry information, such as authentication activity, outbound traffic activity, web activity, honeypot connection activity, or network classification information to determine the reputation and/or confidence scores in response to a query/request and/or in connection with potentially malicious activity that can represent a likelihood that the detected potentially malicious activity is malicious/legitimate and the potential impact that remediation measures taken against the network identifier may have in the event that the detected network activity was legitimate.

Reputation and confidence scoring for network identifiers based on network telemetry

Growing community of inventors

Frederick, MD, United States of America

Sai Srinivas Vemula