US 12,407,722 B1
Isolating resources for potentially fraudulent virtual compute instances
Nikolay Krasilnikov, Seattle, WA (US); Guy Sebastian Parton, Cape Town (ZA); and James Gowans, Cape Town (ZA)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Mar. 30, 2021, as Appl. No. 17/217,998.
Int. Cl. H04L 9/40 (2022.01); G06F 9/455 (2018.01); G06F 9/50 (2006.01)
CPC H04L 63/1483 (2013.01) [G06F 9/45558 (2013.01); G06F 9/5077 (2013.01); H04L 63/1416 (2013.01); G06F 2009/45587 (2013.01); G06F 2009/45591 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A host system configured to host a plurality of virtual compute instances, comprising:
at least one processor; and
a memory, storing program instructions that when executed by the at least one processor, cause the at least one processor to:
monitor resource utilization of the plurality of virtual compute instances at the host system for potential fraudulent behavior;
based on the monitoring, identify one of the plurality of virtual compute instances for fraud mitigation; and
responsive to the identification of the one virtual compute instance for fraud mitigation:
isolate the one virtual compute instance to a hardware resource of the host system while still providing a guaranteed performance for the one virtual compute instance at least until further information indicates that the one virtual compute instance is not being executed for fraudulent use, wherein one or more other hardware resources remain available to other ones of the plurality of virtual compute instances not identified for fraud mitigation; and
cause one or more subsequent evaluations of further resource utilization of the one virtual compute instance to determine whether identification of the one virtual compute instance for fraud mitigation is mistaken, wherein a result of the one or more subsequent evaluations causes removal of fraud mitigation for the one virtual compute instance.