Pattern-based detection using data injection
AssigneeAmazon Technologies, Inc.
InventorsJon Arron McClintock, Brandon William Porter, Donghui Zhuo
Life of this patent
Estimating the term…
Abstract
Pattern based detection of data usage is facilitated using data injection. Data values are injected in one or more storage locations accessible to a plurality of services or included in service requests. Service interactions among the services are compared to a set of patterns. The set of patterns are configured to match the data values. By comparing the service interactions to the patterns, one or more of the service interactions are determined to include individual ones of the data values. Data are generated indicating a presence of the data values in the services.
Claims21
-20. (canceled)
A system, comprising:
- one or more processors and one or more memories to store computer-executable instructions that, if executed, cause the one or more processors to:
- generate a plurality of patterns to match respective ones of a plurality of predefined data values that correspond to respective types of data to be detected, wherein the plurality of predefined values were injected into a plurality of services;
- cause a plurality of service requests or responses to be generated among the plurality of services, wherein the plurality of services are configured to compare the plurality of service requests or responses to the plurality of patterns;
- receive, from the plurality of services, data indicative of one or more data flows of the one or more predefined data values between the plurality of services;
- receive, from the plurality of services, additional data indicative of one or more additional data flows of the one or more predefined data values between the plurality of services;
- and
- determine one or more changes among the plurality of services based at least in part on a comparison of the one or more data flows to the one or more additional data flows.
A method, comprising:
- generating a plurality of patterns to match respective ones of a plurality of predefined data values that correspond to respective types of data to be detected, wherein the plurality of predefined values were injected into a plurality of services;
- causing a plurality of service requests or responses to be generated among the plurality of services, wherein the plurality of services are configured to compare the plurality of service requests or responses to the plurality of patterns;
- receiving, from the plurality of services, data indicative of one or more data flows of the one or more predefined data values between the plurality of services;
- receiving, from the plurality of services, additional data indicative of one or more additional data flows of the one or more predefined data values between the plurality of services;
- and
- determining one or more changes among the plurality of services based at least in part on a comparison of the one or more data flows to the one or more additional data flows.
One or more non-transitory computer-readable storage media storing program instructions that, when executed on or across one or more processors, perform:
- generating a plurality of patterns to match respective ones of a plurality of predefined data values that correspond to respective types of data to be detected, wherein the plurality of predefined values were injected into a plurality of services;
- causing a plurality of service requests or responses to be generated among the plurality of services, wherein the plurality of services are configured to compare the plurality of service requests or responses to the plurality of patterns;
- receiving, from the plurality of services, data indicative of one or more data flows of the one or more predefined data values between the plurality of services;
- receiving, from the plurality of services, additional data indicative of one or more additional data flows of the one or more predefined data values between the plurality of services;
- and
- determining one or more changes among the plurality of services based at least in part on a comparison of the one or more data flows to the one or more additional data flows.
Dependencies are inferred from the claim text.