Amazon Technologies, Inc.

Volker Helmut Mosthaf

Nima Sharifi Mehr

David James Kane-Parry

Christopher Lorenzo Dunn

Dennis Naylor Brown, Jr

Alexis Floyd

Christopher Gordon Williams

Disclosed are various embodiments for virtualized network honeypots. Network traffic is received from a connecting device. It is determined whether the network traffic is authorized or unauthorized. The network traffic is selectively routed to a requested network service or to a honeypot server based at least in part on whether the network traffic is authorized or unauthorized.

Virtualized network honeypots

A first computer is selected for testing. Information sent from a second computer system to the first computer is intercepted. The information is modified to be noncompliant with a communication protocol, thereby producing noncompliant information. A determination is made whether the first computer device has failed to provide a particular response to receipt of the noncompliant information, and an operation is performed based at least in part on the determination.

Security verification by message interception and modification

A method and system for establishing a group of users and providing item recommendations tailored for the group are described. Users can join a recommendation huddle for the purpose of viewing collective item recommendations tailored for the users participating in the recommendation huddle. The item recommendations can be based on the recommendation profiles of participating users, the nature of the item recommendations to be provided (e.g., movies, restaurants, activities, songs, or the like), and other context information. Recommendations, including information about the recommended items, are provided to users participating in the recommendation huddle. In some embodiments, participating users can vote or otherwise provide feedback on the provided recommendations. One or more final selections can be made based on the recommendations and feedback.

Personalized group recommendations

Disclosed are various embodiments for virtualized network honeypots. In one embodiment, client computing devices that are coupled to a network are each configured with both a primary operating system and a honeypot operating system. The primary operating system is configured to provide workstation functionality for a user having permission, and the honeypot operating system is configured to route unauthorized network traffic to a honeypot server. The honeypot server is configured to provide a honeypot environment that mimics characteristics of client or server computing devices.

Disclosed are various embodiments for virtualized network honeypots. In one embodiment, client computing devices that are coupled to a network are each configured with both a primary host and a secondary virtualized host. The primary host provides workstation functionality for users having permission. The secondary virtualized host is configured to route network traffic to and from a honeypot server. The honeypot server is configured to provide a honeypot environment. In another embodiment, a network connection request for a requested service is received from a connecting device. If the connecting device is authorized, the network connection request is routed to the requested service. If the connecting device is not authorized, the network connection request is routed to a honeypot server.

Data security is enhanced by injecting insecurity into communications between two computer systems to test one of the computer systems. The insecurity is injected by modifying the communications between the two computer systems by modifying or adding messages. A response from one of the computer systems is monitored to determine whether the computer system reacts to the modification in a secure manner or if mitigating actions need to be performed.

Growing community of inventors

Seattle, WA, United States of America

Volker Helmut Mosthaf