25381results about "Platform integrity maintainance" patented technology

A context-dependent, privileged access control system for dynamic, risk-based authorization, consisting of: a context acquisition subsystem configured to ingest and normalize multimodal contextual data streams from a variety of sources, including endpoint telemetry, geolocation sensors, user authentication metadata, device status metrics, and network traffic descriptors; a behavior profiling processing unit communicatively coupled to the context detection subsystem, the engine configured to maintain per-user behavior baselines using unsupervised learning models and to compute behavioral deviation vectors in real time for each privileged access request; a dynamic risk assessment module operatively connected to the behavioral profile processing unit, the module configured to calculate a multidimensional risk score for each session by applying a weighted aggregate function to behavioral deviation vectors, device risk posture, threat intelligence indicators, and environmental context volatility; a policy decision engine configured to apply programmable access control policies to the calculated risk score using a context-sensitive policy scoring language, wherein the engine is further configured to dynamically determine whether to authorize, deny, elevate, or revoke privileged access according to the current trust thresholds and permission boundaries; A permission enforcement controller unit communicatively connected to one or more endpoints, cloud services, and virtual infrastructure resources. The framework is configured to implement policy decisions by generating ephemeral access tokens, providing just-in-time (JIT) permissions, and initiating permission revocation workflows upon contextual anomalies. a secure hardware appliance consisting of a plurality of tamper-evident modules configured to host the behavioral profile processing unit, the risk assessment module, and the policy decision control unit in a trusted execution environment isolated from general computing resources.

The invention provides an operation and maintenance alarm processing method and system based on a knowledge graph enhanced large model, and relates to the technical field of knowledge graphs, and the method comprises the steps: collecting multi-source operation and maintenance alarm historical data, carrying out the adaptive hierarchical structured processing of the data, and constructing a space-time semantic multi-dimensional feature matrix; constructing a multi-dimensional alarm association network based on a dynamic weight fusion algorithm and forming a hierarchical knowledge graph; constructing a root cause inference rule base in combination with time sequence evolution, topology propagation and business dependence characteristics of the alarm; and when a real-time alarm is received, a diagnostic reasoning system is started to analyze a propagation link, a root cause is identified, and a processing suggestion is generated. The method can accurately identify the alarm root cause, improves the operation and maintenance efficiency, and reduces the false alarm rate.

The invention discloses an archive data security integration management system, which relates to the technical field of knowledge maps and comprises an archive data acquisition module, a knowledge intelligent analysis module, a knowledge map dynamic construction module, a security situation evaluation module and a security communication center module. The data acquisition module structurally acquires metadata and operation behaviors, the intelligent analysis module dynamically governs data quality, the map construction module constructs a three-dimensional security model, the situation evaluation module quantifies security influence and generates a strategy, and the communication center module realizes dynamic identity authentication and bandwidth allocation. Through the knowledge graph technology, comprehensive integration and safety management of the archive data are achieved, the data quality and utilization efficiency are improved, dynamic evaluation and coping with safety threats are achieved, and the safety and integrity of the archive data are ensured. Meanwhile, through dynamic identity authentication and bandwidth allocation, the safety and efficiency of cross-domain communication are improved.

The invention provides a multi-source software supply chain intelligent analysis method and system. The method comprises the following steps: analyzing software component identification information submitted by a user, extracting attribute characteristics, positioning node paths among components, and generating a weighted dependency chain list containing direct and indirect dependency chains; a Bayesian network model is combined with a predefined risk index system, the risk score of each dependency relationship chain is calculated, potential supply chain threat points are identified through an anomaly detection algorithm, and a risk report is generated; the report covers the overall risk score and the threat point of the key link or component; based on the report, drawing a comprehensive risk map by using a multi-dimensional visualization algorithm, and displaying component groups with similar risk modes; and a genetic algorithm and a simulated annealing algorithm are fused to explore a high-risk area, an adjustment suggestion is proposed, and a risk mitigation strategy is generated to reduce the overall risk score. According to the technical scheme provided by the embodiment of the invention, the security and integrity of the multi-source software supply chain are improved.

Using user feedback for attack path analysis in an anomaly detection framework, including: performing an attack path analysis for a cloud deployment; receiving, from a user, user feedback for an attack vector of the attack path analysis; and initiating, based on the user feedback, a workflow for modifying one or more parameters for generating the attack path analysis.

The invention discloses a dynamic sensitive data outbound risk assessment method and system based on multi-source risk information in the technical field of data cross-border. The system is mainly composed of a multi-source risk information acquisition module, a dynamic security identifier generation module, a risk collaborative assessment engine, a dynamic weight adjustment module, a disposal range dynamic calculation module and a flexible emergency disposal module, and an acquisition-identifier-assessment-calculation-disposal full-process closed-loop architecture is formed. A full-process closed-loop processing framework of collection-identification-evaluation-calculation-disposal is innovatively proposed, and by combining a dynamic risk evaluation model, a reinforcement learning intelligent technology and a block chain evidence storage technology, the problems of insufficient dynamic nature, lack of collaboration and lack of closed-loop capability in the prior art are systematically solved; and high-precision evaluation, real-time response and traceable management and control of the cross-border data flow risk are realized.

The invention discloses an intelligent programming auxiliary method and system based on a multi-modal AI language model, and belongs to the technical field of programming auxiliary tools. The method comprises the following steps: a multi-modal input processing stage; a dynamic context modeling stage; a hierarchical semantic analysis stage; in the code generation stage, codes are generated in two stages by adopting a Codex-Plus large model; the reinforcement learning driven code optimization stage is used for carrying out multi-objective optimization and reward function design on the codes generated in the code generation stage; a multi-dimensional feedback stage; an interaction and visualization stage; code semantic deep analysis, dynamic context sensing, multi-target optimization generation and real-time interactive feedback are realized by fusing code texts, natural language description, developer behavior data and a domain knowledge graph, and programming efficiency and code quality can be remarkably improved.

Methods, apparatuses, and products for providing a code analysis feedback loop for code created using generative AI, including: performing a code analysis on code generated by a generative AI model; determining, based on the code analysis, whether the code satisfies one or more conditions; responsive to the code failing to satisfy the one or more conditions, until the code satisfies the one or more conditions, repeatedly updating the code by receiving, from the generative AI model, updated code based on a previously performed code analysis; and providing the code generated by the generative AI model.

The invention discloses an information security management method based on data processing, and particularly relates to the field of information security management, comprising multi-source heterogeneous data acquisition, multi-dimensional feature index calculation, comprehensive threat detection calculation and adaptive threat decision. According to the method, the covert communication channel is accurately identified by constructing the encrypted traffic multi-mode detection model and combining protocol fingerprint entropy and traffic self-similarity analysis; an improved entropy weight fusion algorithm is adopted, collaborative analysis of system process abnormity, network behavior offset and hardware degradation is achieved, and a cross-dimension attack chain is reconstructed; a storage medium physical feature-cryptographic module runtime joint monitoring mechanism is created for the first time, hardware layer physical attacks and cryptographic side channel vulnerabilities are synchronously defended through temperature-delay correlation evaluation and key derivation density analysis, a complete attack surface from a physical layer to an application layer is covered, and the security is improved. And the detection precision and the response real-time performance of the complex threats are obviously improved.

The invention relates to the technical field of vulnerability management, and discloses a vulnerability management method and system based on an adaptive security platform. The method comprises the following steps: constructing an asset information database based on all IT assets in an organization network environment, and calculating a time sensitivity parameter set; based on the asset information database and the time sensitivity parameter set, executing aperiodic time stratification vulnerability data collection and dynamic self-shaping processing to obtain a standardized structure vulnerability data set; performing vulnerability utilization chain topology analysis through the bidirectional adversarial neural network model to generate a vulnerability risk score and a vulnerability association relationship graph; and generating vulnerability risk decision information according to the vulnerability risk score and the vulnerability association relationship graph, and performing constraint perception adaptive repair arrangement based on the vulnerability risk decision information to generate an optimal vulnerability repair scheme. The vulnerability discovery process is more efficient and accurate, the repair success rate is improved, the service interruption time is shortened, and continuous optimization of the repair process is achieved.

The invention discloses a large model enhanced code security detection method. The method comprises the following steps: dynamically associating CVE vulnerability features with code semantic representation through a knowledge graph construction module; extracting vulnerability features from a CVE vulnerability library by utilizing a knowledge graph construction module, and dynamically associating the vulnerability features with code semantics; based on the CodeQL standard, a query language is generated by adopting a large model and input into CodeQL for AST analysis, and code structure features are extracted; the large model generates a query language meeting the CodeQL standard, codes are analyzed through CodeQL, and key structure features are extracted; integrating a static analysis tool chain to carry out multi-dimensional credible verification on model output; integrating an SAST tool and a symbolic execution tool, and verifying the model output from different dimensions; and summarizing and fusing detection results of the enhancement layers, and determining a final detection result by adopting a decision optimization method. According to the method, through technical fusion and dynamic optimization, the problems of rule stiffness, one-sided detection and low result credibility are systematically solved.

The invention relates to the technical field of data processing, in particular to a multi-modal feature fusion software supply chain vulnerability intelligent positioning method, which comprises the following steps: performing encryption aggregation on code structure data of distributed nodes, dependent component metadata and runtime behavior logs through a federated learning framework to generate a cross-node encryption feature set; combining dynamic behavior sequence similarity comparison to output a multi-modal training sample; extracting cross-modal association features of code structure nodes, text entity embedding vectors and dynamic event sequences through a multi-head cross attention mechanism, and generating fusion feature vectors; according to the method, through a collaborative mechanism of multi-modal feature alignment, dependency map risk quantification and reinforcement learning dynamic decision, the limitation of single-modal analysis is broken through, and the probability of vulnerability propagation between components is quantized by using the map attention network, and a high-risk dependency path associated with a code structure is identified. And the accuracy, the cross-ecological generalization ability and the interpretability of vulnerability positioning in a complex supply chain scene are improved.

The invention belongs to the technical field of information security management, and relates to an information security risk assessment whole-process management system. Comprising an omnibearing risk data acquisition module, an intelligent risk assessment engine module, a collaborative rectification execution module, a continuous monitoring and early warning module, a security policy configuration module, a risk knowledge graph construction module and a simulated attack and defense drilling module. According to the information security risk assessment whole-process management system, accurate risk management and control are realized through multi-module collaborative operation, a personalized scheme is accurately generated and strictly tracked by a collaborative rectification execution module according to an assessment conclusion, the rectification efficiency and quality are greatly improved, the risk is timely solved, for example, energy enterprises can quickly repair industrial control system vulnerabilities, and the risk assessment efficiency is improved. And the continuous monitoring and early warning module sensitively captures risk recurrence and new signs by virtue of a real-time architecture and an intelligent algorithm, and carries out multi-channel instant notification and starts a plan so as to ensure that the risk is eliminated in time.

Devices, methods, and systems for cons traction resource operations are provided. The method includes receiving a first dataset including one or more first data, entries associated with at least a first construction resource and generating a spatio-temporal sequence for the first construction resource. The spatio-temporal sequence defines one or more operations configured to minimize the construction friction with a project associated with the first construction resource. The method includes outputting at least a portion of the data associated with the spatio-temporal sequence. The method may further include determining an interaction associated with the first construction resource and modifying the spatio-temporal sequence in response to the determined interaction.

Guiding query creation for a generative artificial intelligence (AI)-enabled assistant, including: receiving, via a natural language interface for a security framework monitoring a cloud deployment, a natural language input comprising one or more entity identifiers; gathering information based on the one or more entity identifiers; providing, to a generative artificial intelligence (AI) model, a prompt based on the natural language input and comprising the gathered information; and receiving, from the generative AI model, a response to the prompt.

Systems and methods for customer environment integration with anomaly detection systems are disclosed. The methods include receiving cloud computing environment data for the cloud computing environment; generating, based on the received cloud computing environment data, a set of commands for generating cloud computing infrastructure for anomaly detection, the set of commands including one or more commands for generating a first set of anomaly detection infrastructure elements within the cloud computing environment and for generating a second set of anomaly detection infrastructure elements at the anomaly detection system; and initiating an execution of the set of commands.

The invention discloses a self-adaptive software vulnerability repair system based on deep learning. The self-adaptive software vulnerability repair system comprises a multi-modal feature fusion engine, a spatio-temporal joint modeling module, a vulnerability repair strategy generator and a cross-language representation model. The multi-modal feature fusion engine generates a mixed feature vector of a code, inputs the mixed feature vector into the spatio-temporal joint modeling module, captures code structure and time sequence dependence, and identifies risk features; the vulnerability repair strategy generator generates a repair scheme based on the risk features and optimizes the repair scheme through static verification; and the cross-language representation module performs feedback training by using the newly added sample and outputs a final detection result and a repair scheme. According to the method, the vulnerability trigger points can be accurately positioned, all the associated code snippets are extracted, a solid foundation is provided for subsequent vulnerability analysis, and the repaired codes conform to grammatical rules and keep original semantic consistency.

Architecture for a generative artificial intelligence (AI)-enabled assistant, including: receiving, via a natural language interface for a security framework monitoring a cloud deployment, a natural language input; selecting, by a delegator generative artificial intelligence (AI) model and based on the natural language input, a particular generative AI model from a plurality of selectable generative AI models; prompting the particular generative AI model based on the natural language input; and providing, via the natural language interface and in response to the natural language input, a response from the particular generative AI model.

Systems and methods for protecting and fortifying machine learning engines, artificial intelligence (AI) engines, large language models, deep learning engines, reinforcement learning engines, and AI-based agentic units. An Offline Protection Unit analyzes characteristics of a Protected Engine, and performs offline fortification of the Protected Engine against attacks; by changing operational properties or operational parameters of the Protected Engine to reduce its vulnerability to attacks. An Online Protection Unit performs analysis of at least one of: (i) inputs that are intended to be inputs of the Protected Engine, (ii) outputs that are generated by the Protected Engine; and based on the analysis, dynamically performs online fortification of the Protected Engine against attacks; by dynamically changing operational properties or operational parameters of the Protected Engine to reduce its vulnerability to attacks.

The invention relates to a safe backup and recovery method and system for medical data, and the method comprises the steps: obtaining the multi-dimensional attribute information of the medical data, and carrying out the dynamic classification of the multi-dimensional attribute information based on a preset classification rule, and obtaining an attribute information label; performing differential encryption on the medical data according to the attribute information tag to obtain encrypted medical data, writing the encrypted medical data into a multi-level storage node, and performing multi-level backup construction to obtain a cross-platform backup topology; performing traceability node extraction on the multi-level storage nodes according to the abnormal node data access behavior to obtain traceability node information, and performing data traceability verification on the traceability node information according to the backup topology configuration to obtain a trusted recovery chain; and performing recovery node selection on the multi-level storage nodes according to the trusted recovery chain, and performing multi-node collaborative decryption reconstruction to obtain a recovery verification report. According to the method, the redundancy storage cost can be reduced while the data recovery reliability is guaranteed.

The invention provides an intelligent vulnerability mining platform construction method and system based on a large model. The intelligent vulnerability mining platform systematically identifies and analyzes potential security risks, collects and identifies code snippets with the security risks, arranges the code snippets into risk code paragraphs, identifies target code paragraphs, determines known vulnerabilities, generates context information, captures key events in actual operation, and records real execution paths and state changes. The method comprises the steps of generating a dynamic execution track, simulating different paths, generating an attack vector path, predicting unknown vulnerabilities and credibility scores of the unknown vulnerabilities, testing prediction results of high-credibility scores, confirming and generating real vulnerability information, recording the information to a vulnerability knowledge base, and generating a security report containing vulnerability description, influence ranges, risk levels and repair suggestions. According to the technical scheme provided by the embodiment of the invention, the detection accuracy and efficiency of the security vulnerabilities in the software system are improved.

The invention relates to the technical field of firmware protection, in particular to a firmware protection method and system based on a security coprocessor. The method comprises the following steps: acquiring characteristic data of the coprocessor; extracting hardware entropy source data according to the coprocessor feature data; generating a hardware trust root key based on the hardware entropy source data; performing partition processing on the firmware based on the hardware trust root key to obtain firmware partition data; constructing hierarchical verification structure data according to the firmware partition data; implementing firmware starting security verification based on the hierarchical verification structure data to obtain integrity verification data; establishing a secure communication channel between the processors according to the integrity verification data; executing a bidirectional authentication process based on the secure communication channel, and generating session key data; a firmware runtime environment is monitored based on the session key data. According to the method, the hardware entropy source is extracted by measuring the physical characteristics of the coprocessor, and an unforgeable hardware trust root is established, so that the security is improved fundamentally.

The systems, methods, devices, and non-transitory media of the various embodiments may provide for preventing prompt injections in a communication system. Various embodiments may enable receiving a prompt from a client computing device, evaluating content of the prompt using one or more pre-filter module, determining whether the content of the prompt is safe based on the pre-filter module evaluation. In response to determining that the content of the prompt is safe, various embodiments may enable inputting the prompt to a main machine-learning model for processing such a machine-learning output is created, evaluating content of the machine-learning output using one or more post-filter module, and determining whether the content of the machine-learning output is safe based on the post-filter module evaluation.

The present disclosure provides methods, systems and computer readable media for training and implementing a generative machine learning model for identifying and mitigating security threats. Certain examples relate to generative model training, in which a training image is provided to a generative machine learning (ML) model in a training prompt, with an Indicator of Compromise (IoC) prediction instruction pertaining to the first security image. The model generates a predicted IoC and a parameter of the model is updated based on a loss function that quantifies error between a ground truth IoC and the predicted IoC. Other examples relate to the use of trained generative models for cybersecurity. A mitigation prompt comprising a second security image and an associated mitigation instruction is provided to a trained generative model. The model outputs an indication of a cybersecurity mitigation action based on the mitigation prompt, and the cybersecurity mitigation action is performed on the system. Certain example embodiments identify and automatically mitigate security issues using a multimodal generative model (MGM) though appropriate prompt engineering.

The present disclosure includes computer-implemented methods of guardrails for securely using large language models (LLMs). The method comprises monitoring user data flow using an application programming interface (API) and receiving an administrative policy from an administration communication interface. The method involves dynamically applying a plurality of LLM input inspectors to LLM input data. The application of the plurality of LLM input inspectors is based on the administration policy. The dynamic application of the plurality of LLM input inspectors is in sequence for latency optimization. The plurality of LLM input inspectors serve as LLM input guardrails for a plurality of secure deployed large language models (LLMs). The plurality of LLM input inspectors are configured by the administrative policy and validate the LLM input data to validated LLM input data based on the administration policy. Additionally, the method comprises dynamically applying a plurality of LLM output inspectors to LLM output data.

The invention provides a cross-platform dynamic security baseline and vulnerability closed-loop repair method and system based on federated learning, and the method comprises the steps: constructing a heterogeneous policy mapping rule base of a Windows registry, Linux sysctl and iOS plist by configuring a semantic analysis algorithm, and forming a multi-operating system policy consistency guarantee mechanism by combining a configuration conflict detection model of formalized verification; a dynamic reinforcement decision engine is designed based on a vulnerability influence surface analysis model driven by a knowledge graph and a double-circulation reinforcement learning architecture (outer-layer strategy exploration and inner-layer parameter optimization); a special evaluation system is constructed for key fields such as electric power and finance, a domestic cryptographic algorithm is deeply fused, and an electric power monitoring system PCSR / IIR / SCAR multi-dimensional index and SM2 / SM4 / SM9 full-stack security scheme is developed. According to the intelligent security baseline reinforcement method, the problems of wide cross-platform strategy gap, extensive vulnerability repair decision and insufficient industry adaptability of a traditional scheme are solved, and the intelligent security baseline reinforcement method supporting dynamic confrontation, accurate adaptation and service fusion is provided.

The present invention discloses a system and method for performing artificial intelligence (AI) safety red-teaming with integrated policy fuzzing and adversarial prompting to systematically identify, characterize, and mitigate unsafe or non-compliant behaviors in AI models. The disclosed invention automates the process of generating, executing, and analyzing adversarial test cases through coordinated functional units comprising a policy fuzzing unit, an adversarial prompting unit, an execution sandbox, a telemetry processing unit, a scoring and triage processor, and a cryptographic provenance processor. The system applies grammar-driven and reinforcement-based fuzzing techniques to vary policy descriptors, model configuration parameters, and instruction hierarchies, while a learned adversarial prompt generator synthesizes contextually coherent adversarial prompts optimized for maximum policy violation likelihood. The generated prompts and policy vectors are executed in an isolated, instrumented sandbox that records input-output interactions, timing characteristics, and intermediate representations.

Methods and systems for dynamic shielding in network security is disclosed. The method comprises analyzing real-time network traffic to detect a potential threat and assessing a severity level for each detected threat. Vulnerabilities of the devices in the network and the communications network to which each device is connected can be determined. A risk score can be generated for the threat based on the severity level of the threat and the vulnerabilities in the network. A response strategy can be implanted based on the risk score. The response strategy can include predefined actions for risk scores below a threshold, and maximum protective measures for risk scores above the threshold. The methods and systems can employ machine learning algorithms for threat detection and classification and utilize adaptive learning to refine future response strategies based on historical data of network interactions and system responses.

The invention belongs to the technical field of applets, and discloses an applet abnormal behavior management system fused with artificial intelligence. Comprising the steps of collecting a multi-dimensional data stream in real time, performing space-time slicing on the multi-dimensional data stream, extracting a behavior feature vector in each time window, and constructing a dynamic behavior baseline model bound with a user identity; calculating a deviation degree between the behavior feature vector and a dynamic behavior baseline model, and generating a real-time anomaly confidence coefficient in combination with a similarity matching degree with a preset historical anomaly event library; the hidden relevance of a cross-interface calling link is recognized, then an abnormal propagation probability graph is constructed, the weights of the nodes in the abnormal propagation probability graph are dynamically corrected through a real-time abnormal confidence coefficient, and the corrected weights of the nodes in the abnormal propagation probability graph are obtained; and calculating a comprehensive risk entropy value, and when the comprehensive risk entropy value exceeds a risk threshold value, dynamically triggering a multi-level management and control strategy, so that complex applet abnormal behaviors can be comprehensively detected and managed.