Amazon patents malware scanner that picks the best detection method
Amazon has patented a system that checks files for malware by first looking at their basic details. It then uses a learned model to decide whether to use a standard third-party scanner or its own machine learning model to check the file.
In the filing’s own words
Systems and methods for performing malware scanning for a service provider network are disclosed. In response to accessing one or more files, file attributes may be determined. Confidence values may be generated based on the file attributes and may be used to select a scan operation. Such scan operations may include a scan operation using a 3 rd party malware scan algorithm or a scan operation using a machine learning generated model. The selection of the scan operation may be performed based on a deferral learning model.
What exactly they claim (claim 1)
1. A system, comprising: one or more hardware computing devices configured to implement a scanner, wherein the one or more hardware computing devices are configured to: access one or more files to be scanned for malware; determine one or more file attributes associated with the one or more files; and select a scan operation to use to scan the one or more files for malware, based on the determined one or more file attributes, from among a plurality of scan operations comprising: a) a first scan operation using a third-party scan algorithm for detecting malware; and b) a second scan operation using a machine learning generated model for detecting malware, wherein to perform the selection based on the determined one or more file attributes, the one or more hardware computing devices are configured to: use a deferral learning model to select the scan operation to use, wherein the deferral learning model has been trained to select the scan operation based on learned confidence values associated with the one or more file attributes, wherein the learned confidence values are based on accuracy of malware detection in previous results of the first scan operation for other files having the one or more file attributes or previous results of the second scan operation for the other files having the one or more file attributes.
Facts
- Company
- Amazon (Amazon Technologies, Inc.)
- Official title
- Hybrid scanning using deferral learning
- Patent number
- US12730891B1
- Application number
- 18066885
- Filed
- Dec 15, 2022
- Granted
- Sep 8, 2026
- Inventors
- 5
- Claims
- 20
Classified under
G06F 21/566 Physics & computingG06N 20/20 Physics & computingG06F 2221/034 Physics & computingMore from Amazon in Security & privacy
- Amazon patents camera encryption that cuts cloud access Sep 8, 2026
- Amazon patents voice assistant login using a second device Sep 1, 2026
- Amazon patents system to spot suspicious IP activity in its network Sep 8, 2026
- Amazon patents radar system that triggers cameras only on real motion Sep 15, 2026
- Amazon patents ad system that groups anonymous users without cookies Sep 22, 2026
Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.