AWS unveils a monster security system to keep it safe from threats

AWS logo
(Image credit: AWS)

Amazon Web Services (AWS) has unveiled a new large-scale security system designed to keep its cloud services secure.

The Mithra system uses an internal neural network graph model with 3.5 billion nodes and 48 billion edges to spot and rank the trustworthiness of domains and identify potential threats.

Latest Videos From

Monster Mithra

Once Mithra identifies a domain queried within AWS, it will assign it a trustworthiness score, removing the need to rely on third parties. Not only does this remove potential supply chain threats, it also helps AWS maintain a high-quality list of malicious domains to observe, and therefore observe cybercriminal behavior.

The massive neural network graph (which AWS says could be one of the largest in existence) detects malicious domains with a high level of accuracy, and can even predict malicious domains days, weeks and months before they appear on the threat feeds of third party security providers.

Mithra can therefore provide a constantly updated list of malicious domain names for security providers to monitor and block. The list can also be supplied to third party threat feeds in order to reduce false positives, and Mithra’s detection of millions of security events per day can be used by AWS security analysts for investigations and additional context.

The notifications provided by Mithra to organizations of a potential cyber attack from a malicious domain include recommendations on response, such as checking security logs for activity from specific domains and blocking them, and moving infrastructure behind a firewall.

"We are encouraged by how our efforts to share our threat intelligence have helped customers and other organizations be more secure, and we are committed to finding even more ways to help," Amazon Chief Information Security Officer CJ Moses said in a blog post unveiling the internal tool.

More from TechRadar Pro

Benedict Collins
Senior Writer, Security

Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security.

Benedict provides detailed analysis on state-sponsored threat actors, APT groups, and the protection of critical national infrastructure, with his reporting bridging the gap between technical threat intelligence and B2B security strategy.

Benedict holds an MA (Distinction) in Security, Intelligence, and Diplomacy from the University of Buckingham Centre for Security and Intelligence Studies (BUCSIS), with his specialization providing him with a robust academic framework for deconstructing complex international conflicts and intelligence operations, and the ability to translate intricate security data into actionable insights.