310results about How to "Avoid attack" patented technology

The invention provides an information management method and system for an access control card chip. The method comprises the following steps: providing an anonymous identifier, initializing an authentication process, and laying a foundation for privacy protection and a data link; mutual trust authentication of the access control card and the equipment is completed, and authentication challenge data is provided for follow-up behavior recording and tracing; based on a result and challenge data generated after authentication is completed, generating a complete encryption behavior record and establishing a chained hash structure; storing the encrypted behavior record and the chained hash value locally or synchronizing the encrypted behavior record and the chained hash value to a server to ensure the reliability and traceability of the behavior record; and detecting abnormal behaviors and supporting traceability verification by using complete behavior chain data. Dynamic identity generation, encryption behavior chain storage and a bidirectional authentication mechanism are integrated in the access control card chip, so that the privacy protection capability, the safety and the tracing efficiency of the access control system are remarkably improved.

The invention relates to an access control method and system based on a zero-trust micro-gateway, and belongs to the technical field of information security. A zero-trust micro-gateway management center is established for a micro-service architecture, and a zero-trust micro-gateway strategy execution center is deployed on a container where each micro-service is located, that is, a containerized zero-trust micro-gateway firewall is established before each micro-service to realize network blocking of unauthorized access. The management center performs SPA authentication on a visitor of the micro-service, opens an authentication service port to an IP of the visitor after the SPA authentication is passed, receives an authentication request data packet of the visitor to perform access authentication, generates a dynamic access control strategy based on environment baseline data of the visitor after the access authentication is passed, and sends the dynamic access control strategy to the execution center; and the execution center controls the access of the visitor according to the access control strategy passing the verification. According to the scheme of the invention, the micro-service is hidden behind the zero-trust micro-gateway, thereby effectively achieving the hiding of the network by the application service, and improving the safety of the service.

The invention relates to the technical field of network security, in particular to a network security analysis method and system based on digital twinning. The method comprises the following steps: carrying out network topology perception on a target network to obtain a network data transmission topological graph; carrying out real-time traffic first acquisition on the target network to obtain a first real-time traffic data set; performing digital twinborn model construction on the target network according to the first real-time traffic data set based on the network data transmission topological graph to obtain a network digital twinborn model; performing real-time traffic second acquisition on the target network to obtain a second real-time traffic data set; performing equipment system log collection on the target network to obtain an equipment system log set; and performing data synchronous mapping on the second real-time traffic data set, the equipment system log set and the network digital twinborn model to obtain a real-time network digital twinborn model. According to the invention, the network security risk is obviously reduced.

The embodiment of the invention provides a quantum-fused protocol communication method and device, equipment and a storage medium, and the method comprises the steps: calling a communication interface, and transmitting a verification message to a quantum key service platform, so as to carry out the identity safety verification and apply for a session key; receiving and decrypting a first encrypted session key sent by the quantum key service platform to obtain a session key; sending the encrypted session identifier to a server, so that the server applies for a session key from a quantum key service platform; and performing encrypted communication with the server according to the session key. According to the embodiment of the invention, the whole quantum key communication process is packaged in the communication interface, so that software developed based on a traditional network interface can be simply and safely migrated to quantum. Moreover, identity security verification is carried out through the verification message, man-in-the-middle attack is prevented, and the communication security is enhanced. In addition, the client and the server encrypt and decrypt the communication data by using the same session key, thereby realizing secure encrypted communication.

The invention relates to the technical field of computer security, in particular to an embedded software reinforcement method based on a national cryptographic algorithm. The method comprises the following steps: generating a key pair by using SM2, constructing a code dependency graph in combination with spectral clustering, and optimizing key distribution; carrying out segmented encryption by adopting SM4 symmetric encryption, and identifying sensitive code snippets; the integrity of the embedded software is monitored and responded in real time through SM3 hash check and anomaly detection; analyzing vulnerability distribution based on random forest regression by using an SM4 encryption update package and dynamically adjusting an update frequency; and encrypting an operation log through SM3, and identifying a risk trend and generating an operation report by using a variational auto-encoder. According to the invention, through a plurality of technical means such as hierarchical encryption, real-time monitoring, dynamic key management and risk prediction, an efficient, dynamic and intelligent security reinforcement scheme is provided for embedded software, and the overall security and stability of the system are improved.

The invention belongs to the technical field of lithium ion batteries, and relates to an electrolyte of a lithium ion battery for a high-nickel ternary positive electrode material and application of the electrolyte, and the electrolyte comprises an organic solvent, a lithium salt and an additive, the additive is prepared from (5-cyanopyridine-3-yl) potassium trifluoroborate. The lithium ion battery electrolyte can form low-impedance interfacial films on the surfaces of a positive electrode and a negative electrode at the same time, interface stability is improved, and better cycling stability and longer service life can be obtained when the lithium ion battery electrolyte is applied to a lithium ion battery.

The invention discloses a real-name system information management method supporting multi-level authentication, and the method comprises the following steps: collecting basic identity information of a user, and storing the basic identity information through an asymmetric encryption algorithm; according to the use demand and the access authority requirement of the user, generating a multi-level authentication hierarchy; dividing the real-name system information into a basic information area, an authority information area and a sensitive information area according to the sensitivity of the real-name system information; carrying out distributed storage on real-name system information, and carrying out hierarchical encryption on data of different information areas by using a hierarchical encryption strategy; based on a multi-level authentication result and in combination with an access control strategy, authority distribution is carried out on the user, and controlled access of real-name system information is carried out under multi-dimensional verification; user information operation behaviors are monitored in real time, user behavior characteristics are analyzed based on an anomaly detection model, and when risk behaviors are recognized, an additional verification process is triggered or user operation is directly limited. According to the invention, safer, more flexible and more efficient real-name system information management is realized.

The invention provides a tumor cell exosome, an anti-tumor immune drug delivery system and a preparation method and application of the anti-tumor immune drug delivery system, the tumor cell exosome is derived from starved and stimulated tumor cells, the tumor cell exosome is coated with nano drug particles for delivery, and the exosome has the effects of enhancing immune cell infiltration and remodeling an immune microenvironment; due to the homing effect of the exosome, the medicine and the exosome are more easily accumulated in the tumor, and the targeting property is improved; due to coating and camouflage of the biological membrane of the exosome membrane, the exosome membrane is prevented from being recognized, attacked and removed by an organism, and the biological safety is improved, so that the exosome and the nano-drug act on the tumor together to achieve a synergistic effect.

The invention discloses a video stream non-perception encryption and decryption method based on an IP (Internet Protocol). The method comprises the following steps: acquiring a plaintext data stream, splitting the plaintext data stream into data packets, transmitting the data packets by using a UDP (User Datagram Protocol), introducing a forward error correction code, recombining the transmitted data packets, and generating an original plaintext video stream; carrying out network flow feature extraction on the plaintext data flow to obtain network flow features, carrying out load optimization to obtain a first network flow feature, carrying out encryption by using an encryption algorithm, and attaching an authentication tag to the end of the encrypted first network flow feature to obtain a second authentication tag; embedding the encrypted first network traffic feature into a data packet of the original plaintext video stream to obtain an encrypted data packet; the authentication tag is recalculated and compared with the second authentication tag, and the encrypted data packet is decrypted by using the corresponding key to obtain the original plaintext video stream after recombination, so that network attack can be effectively prevented, and the security of video transmission is guaranteed.

The invention relates to the technical field of power industrial control network asset management, in particular to a power industrial control network security-oriented asset dynamic digital fingerprint construction system, which comprises a data acquisition module, a first determination module, a second determination module, an identification module, an adjustment module and a construction module. Through accurate multi-level data acquisition, behavior analysis and threshold adjustment, the security of an electric power industrial control network is remarkably improved, the system can acquire key behavior data of equipment in real time, such as the number of bytes of a data packet, the memory utilization rate and the number of login failures, and normal equipment and abnormal equipment are accurately identified through multi-stage screening, so that the security of the electric power industrial control network is improved. The system flexibly deals with the dynamic change of the equipment behavior by adjusting the byte number fluctuation threshold value, ensures the high efficiency and accuracy of the safety detection, and effectively solves the problems that the system cannot adapt to the network asset change and cannot identify the abnormal equipment in real time due to the dependence on a static fingerprint database and a fixed similarity threshold value.

The invention provides a federal learning attack prevention method, system and device and a storage medium, and belongs to the technical field of privacy computing. The method comprises the following steps: synchronizing clocks of participating nodes through an aggregation node, setting a network delay threshold value, a VDF time parameter and a security parameter, obtaining a public parameter through an initialization function, and issuing related calculation parameters to the participating nodes; randomly generating a cross validation graph, and issuing a model and a front node address to a target node; carrying out local model training by the target node, carrying out VDF calculation by utilizing current model parameters and random numbers generated by the target node and the front node, generating training and calculation result information, and submitting the training and calculation result information to the aggregation node for verification; time verification and VDF verification are carried out on training and calculation result information, and whether model parameters are accepted to participate in aggregation is determined according to verification results; and aggregating the model parameters submitted by the verified nodes by using a weighted average algorithm through the aggregation nodes to form a new global model.

The invention provides a cloud side end toll station traffic flow monitoring method and system based on digital twinning, and relates to the technical field of traffic control, and the method comprises the steps: collecting the actual operation data of a toll station in real time, including the vehicle arrival time, the lane use condition and the equipment state information, constructing a digital twinborn model corresponding to the entity toll station on the cloud server; an edge computing node is arranged at the edge of the entity toll station, processing and anomaly detection analysis are carried out on the actual operation data to obtain a processing result, and the processing result is uploaded to a cloud server; and in the cloud server, the processing result is predicted and analyzed to generate a traffic flow monitoring scheme of the toll station, and the traffic flow monitoring scheme comprises lane opening or closing suggestions, lane proportion adjustment and emergency response measures under special events. Through cooperation of the digital twin technology and the cloud side end, intelligent monitoring and dynamic optimization of the traffic flow of the toll station are realized, and the traffic efficiency and the management level are improved.

The invention belongs to the technical field of biological medicine, and particularly discloses an antibody targeting ADAM17 protein and application of the antibody. The invention provides the ADAM17 specific target spot aiming at the malignant tumor of the biliary tract, the ADAM17 is highly expressed in the tumor of the biliary tract and is relatively low in expression in normal tissues, and by intervening the target spot, tumor cells can be killed, and non-specific attack to normal cells can be avoided as much as possible, so that the effectiveness and the safety of treating a patient with the malignant tumor of the biliary tract are improved. The invention also provides an antibody targeting ADAM17 protein and a preparation and screening method thereof, and the antibody can specifically recognize an antigen binding domain of ADAM17, has strong affinity with an ADAM17 antigen, and can be used for treating ADAM17 positive malignant tumors.

The invention discloses an electric power WLAN security reinforcement method, system and device based on trusted computing, and relates to the technical field of electric power WLAN security, the method comprises the following steps: respectively presetting a trusted platform control module TPCM and corresponding components on an electric power wireless terminal, an electric power wireless access point and an electric power authentication server to form a ternary three-layer architecture; certificate application and distribution of equipment are carried out according to the three-element three-layer architecture, the equipment is managed and controlled in a unified mode through an electric power authentication server, and the equipment comprises an electric power wireless terminal and an electric power wireless access point; and carrying out trusted access authentication on the equipment which obtains the certificate, including bidirectional identity authentication based on a ternary three-layer architecture, platform identity and integrity evaluation based on attributes and key negotiation based on a national cryptographic algorithm, so as to realize access of the trusted power wireless terminal to the trusted power wireless access point. According to the method, collusion attacks can be prevented, platform configuration information cannot be leaked, and sensitive information can be effectively prevented from being intercepted by attackers or untrusted intermediate equipment.

The invention relates to a service-hidden multipoint secure transmission method and system, and belongs to the technical field of network security. An identification key distribution management system deploys an independent software shield for each gateway device as an identification key for system communication, and every two gateway devices execute the following point-to-point communication for data encryption transmission: a device B verifies a single packet authentication message serving as a communication request initiator based on identification key information of a device A; after the single packet authentication is passed, the A and the B carry out identity authentication key negotiation based on identification key information of the A and the B to obtain a data transmission shared key; and A and B construct an encrypted UDP channel based on the shared key to realize data encryption transmission. According to the method, the secure communication transmission channel based on the complex network environment of the Internet is constructed for data encryption transmission, so that the security of data transmission can be ensured, the attack from an enemy opposite side is avoided, and the problems of uncertainty and anonymity in the prior art are solved.

The invention discloses a self-adaptive optimization method of privacy protection asynchronous federated learning based on compression and event trigger communication, a server has a buffer area with the size of # imgabs0 #, when each round of global training starts, the server randomly selects a # imgabs1 # client to send an initialized global model, and the initialized global model is sent to the server; the clients perform local model training to obtain a new local model and calculate a difference value between the new local model and the old local model, and when the difference value meets an event triggering threshold value, the clients can calculate a difference value between the local model and the global model, add a compression error to the difference value and then perform compression processing. And the processed value is added into differential privacy Laplacian noise disturbance and then is transmitted to a server. And averaging all the compression values by the server side, and updating the global model according to an adaptive optimization algorithm. According to the method, time overhead and precision loss caused by delay in the asynchronous FL can be reduced, and data privacy can be protected. And the precision of model training is improved while the communication overhead is reduced.

The invention relates to the technical field of communication security, in particular to a communication security management method and device based on block chain nodes. Based on the block chain technology, the public key encryption algorithm is used to ensure that the identities of both communication parties are real and reliable. Each node records the public key, the registration time and the identity information of the known node through the storage block chain, so that the security and the consistency of identity authentication are ensured, and the credibility and the security of the network are improved; the behavior of each node is regularly evaluated through a behavior analysis and statistical method in combination with request frequency, behavior consistency and tampering data detection, and malicious nodes are expelled from the network through a consensus protocol, so that the malicious node detection accuracy is enhanced, attack and damage are effectively prevented, and the malicious node detection efficiency is improved. And the stability and the reliability of the network are improved.

The utility model relates to the technical field of camouflage nets, in particular to a camouflage net which comprises a bottom net, the bottom net is of a latticed structure formed by longitudinally arranging multiple strands of metal ropes and transversely connecting the multiple strands of metal ropes through pressing buckles, every two adjacent rows of pressing buckles in the transverse direction are vertically arranged in a staggered mode, and the multiple strands of metal ropes are arranged in the latticed structure. A rope net is arranged on one side of the bottom net, camouflage cloth is arranged on one side of the rope net, and the peripheral edge parts of the bottom net, the rope net and the camouflage cloth are connected through lock catch assemblies, so that the bottom net, the rope net and the camouflage cloth are connected into a whole. The camouflage net is provided with a three-layer structure, so that the camouflage net is favorable for avoiding patrol of aircrafts such as unmanned aerial vehicles and the like, can block and protect attacks of self-destruction aircrafts, and can trigger fuses of armor-piercing bullets in advance, so that the armor-piercing bullets are far away from a strike point to be detonated, and the armor-piercing strike force on the strike point is reduced.

The invention provides a fully synthetic cutting fluid special for a copper part and a preparation process thereof. The fully synthetic cutting fluid special for the copper part comprises the following raw materials in parts by weight: 0.5-2.0 parts of a defoaming agent, 1.0-3.0 parts of an antioxidant, 0.5-2.0 parts of a corrosion inhibitor, 2.0-5.0 parts of a surfactant, 0.5-1.5 parts of a metal ion complexing agent and 80.0-100.0 parts of deionized water. Wherein the antioxidant is prepared from carnosol, daidzin and butylated hydroxytoluene. The carnosol and the daidzin can be used for reducing the oxidation reaction by capturing free radicals, and the butylated hydroxytoluene can be used for further enhancing the anti-oxidation effect by interrupting the oxidation chain reaction. And through the combined action and mutual complementation of different anti-oxidation mechanisms, a synergistic effect is formed, and oxidation of the copper part in the machining process is effectively prevented. Wherein the metal ion complexing agent is composed of isothiocyanate, polyaspartic acid and amino trimethylene phosphonic acid, multiple protection mechanisms are formed, and the corrosion resistance of the copper part is remarkably improved. And the existence of the metal ion complexing agent is also beneficial to improving the stability of the cutting fluid.

The invention discloses a network attack prevention method and device, terminal equipment and a storage medium, and the method comprises the steps: obtaining network flow data through a monitoring point disposed in a network; extracting a data packet from the network flow data; classifying the data packets through a network attack mode recognition model to obtain a network attack mode recognition result; judging whether a potential network attack behavior exists or not according to the network attack mode recognition result; and if yes, triggering a network attack defense measure. According to the network attack mode identification model, the potential network attack mode can be identified according to the current network flow data, and defense measures are triggered when the potential network attack is identified. Therefore, the network flow data can be monitored, potential network attacks can be prevented according to the monitored network flow data, and defense measures can be triggered in advance.

The invention provides a login authentication method and system based on a trusted execution environment, and a medium, and belongs to the technical field of information security. Comprising the following steps: a user side sends a login authentication request to a client application by using a user name; the client application forwards the login authentication request to the security monitor; the security monitor switches the trusted execution environment; the authentication strategy controller reads corresponding user identity authentication information and an authentication strategy from the secure storage rear end according to the user name; the security monitor sends the target multi-factor login authentication combination mode to the client application; the user side inputs multi-factor identity authentication information according to the target multi-factor login authentication combination mode; the client application sends the multi-factor identity authentication information to the security monitor; the security monitor is switched to the trusted execution environment; and the authentication strategy verifier judges whether the login authentication is successful or not according to the multi-factor identity authentication information. In this way, multi-factor identity authentication is carried out in the trusted execution environment, and the BMC identity authentication security is improved.

The invention discloses a polyvinyl chloride plastic material and a preparation method thereof, and the polyvinyl chloride plastic material comprises the following components by weight: 100 parts of a polyvinyl chloride matrix; 5 to 10 parts of light response type nano particles with # imgabs 0 # as a core and # imgabs 1 # as a shell; 2-8 parts of a halogen ion carrier type mesoporous material; 1-5 parts of a halogen free radical trapping agent; and 1-3 parts of a layered barrier material. According to the technical scheme, the technical problems that in the prior art, a polyvinyl chloride material is prone to light aging in a marine environment, and micro-plastic pollution is generated are solved.

The invention relates to a vulnerability scanning and processing method and device, electronic equipment and a storage medium, and the vulnerability scanning and processing method comprises the steps: creating a scanning task through an OpenVAS client, carrying out the vulnerability scanning detection of a target through an NASL plug-in after a server receives a scanning request, and returning a scanning result to the client; and if the medium and high risk vulnerabilities exist, assigning a work order to carry out vulnerability repair and labeling, accurately notifying matched assets, and then querying a vulnerability state until no to-be-repaired vulnerability exists. According to the method and the device, the potential vulnerabilities of the assets can be comprehensively and accurately found and the security risk can be effectively coped by utilizing the vulnerability scanning tool and depending on the high-quality vulnerability library and the vulnerability scanning plug-in, so that network security protection personnel can know and master the vulnerabilities of the assets in advance, the attack of hackers can be effectively prevented, and the security of the network assets is guaranteed.

The invention relates to a video data protection method and device, computer equipment, a storage medium and a computer program product. The method comprises the steps of generating a verification instruction for a to-be-received user, and sending the verification instruction to a verification platform; sending a video playing request of a to-be-received user to the video monitoring system, and sending a verification request to the verification platform; sending a verification instruction to the to-be-received user to obtain a verification result; and when the verification result is successful, sending the video stream of the video transmission platform to the user to receive the video stream. In combination with a dynamic verification instruction generated based on user network channel information and a verification action, it is ensured that only a target user authorized by a main user can pass verification and obtain a video stream, a to-be-received user is limited to share a video link for the second time, it is ensured that the sharing range is completely controlled by the main user, and the risks of video diffusion and sensitive data abuse are avoided.

The embodiment of the invention provides a data processing method, a branch predictor and related equipment, the method is applied to the branch predictor, prediction data are stored in the branch predictor, and the prediction data comprise prediction data belonging to a host mode and prediction data belonging to a virtual machine mode; the method comprises the following steps: acquiring a data disabling command, wherein the data disabling command is sent out in a mode switching process of a host mode and a virtual machine mode; and based on the data disabling command, disabling prediction data belonging to a virtual machine mode in the branch predictor, and keeping prediction data belonging to a host mode in the branch predictor in an available state. According to the embodiment of the invention, the instruction prediction efficiency can be improved on the premise of ensuring the data security.

The invention provides an access control method, system and device, a medium and a program product. The method comprises the following steps: intercepting an access operation of a process on a resource; a target subject corresponding to the process and identification information corresponding to the target subject are retrieved in a subject list, the subject list comprises subjects allowing access to resources and the identification information of the subjects, and the identification information comprises a measurement strategy and a measurement reference value; measuring the process according to a measurement strategy corresponding to the target subject to obtain a to-be-detected measurement reference value; and based on the measurement security policy, the to-be-detected measurement reference value and a measurement reference value corresponding to the target subject, an access result is returned, and the measurement security policy identifies the subject based on the identification information. The malicious software cannot bypass the measurement security policy by moving or renaming the process path, the attack of the malicious software can be effectively defended, the security is improved, the measurement security policy does not need to be updated even if the process path is moved or renamed, and the stability is higher.

The invention discloses a bionic vascularized iPSC (induced pluripotent stem cell)-hepatocyte sphere for liver regeneration and a preparation method of the bionic vascularized iPSC-hepatocyte sphere. The bionic vascularized iPSC-hepatocyte sphere is a microcapsule which takes porous methacrylated hyaluronic acid as a shell and takes a human induced pluripotent stem cell derived hepatocyte sphere as an inner phase, human umbilical vein endothelial cells are adhered to the surface of the shell. According to the bionic vascularized iPSC-hepatocyte sphere, effective communication between hiPSC-heps and HUVECs is promoted, barrier protection is provided for the packaged hiPSC-hep sphere, attack of an immune system is avoided, and compared with dispersed cells, communication between cells is improved through interaction between the cells in the cell sphere, so that the service life of the hiPSC-heps and the HUVECs is prolonged, and the service life of the hiPSC-heps and the HUVECs is prolonged. The simulation of a physiological heterogeneity structure and a cell microenvironment of the liver is facilitated, and the acute failure liver can be more effectively repaired.

The invention discloses an Internet of Things digital information secure transmission method, and relates to the technical field of digital information transmission, and the method comprises the steps: firstly constructing virtual mapping and generating a prediction path through a sending end twin platform, and dynamically adjusting a transmission path in combination with state data collected by Internet of Things equipment in real time to adapt to a complex and changeable environment; secondly, a quantum communication link is adopted to generate a dynamic key, and the randomness and inseparability of a quantum state are utilized to ensure the security of the key and the data integrity; besides, a receiving end feeds back transmission time consumption, decryption time delay and a channel state to a sending end, and a twin platform of the sending end dynamically optimizes key distribution parameters and path prediction logic based on feedback information, so that a real-time self-adaptive mechanism is formed and can adapt to a continuously changing network environment; and finally, by dynamically optimizing the path weight matrix, resource waste is remarkably reduced, and the utilization efficiency of link resources is improved.

The invention discloses an organ resource management and allocation method and system based on cloud computing, and the method comprises the steps: configuring a cloud server based on the type and structure of organ resources, carrying out the data coding compression and aggregation of resource data, storing the resource data in the cloud server, carrying out the correlation analysis, building a topological relation network, distributing an edge cloud server for a terminal user, and carrying out the distribution of the edge cloud server. The method comprises the following steps: configuring an addition, deletion, modification and check program to obtain a terminal user entity, constructing a key for the terminal user entity, encrypting data and an index of a terminal user, outsourcing the encrypted data and index to a cloud server, obtaining a mixed private cloud, obtaining a resource request, calculating a request priority of a resource index in the mixed private cloud, and setting an index sequence based on the request priority. And designing a coordination algorithm based on the index sequence to manage and deploy resources. According to the method, efficient management and allocation of organ resources are achieved through cloud computing, the safety and the resource utilization rate are improved, and meanwhile good interpretability is achieved.

The invention discloses a router EasyMesh fast networking method and system, and the method comprises the steps: obtaining the equipment information and connection relation of an EasyMesh router through a network topology discovery protocol, and generating a global network topology view. And according to the global network topology view, performing comprehensive scoring on each router by adopting a multi-dimensional index to obtain an equipment capability score of each router. And performing a link quality test on links between the routers in the global network topology view to generate a link quality test result. And taking the global network topology view, the equipment capability score and the link quality test result as input, and calculating an optimal role scheme of each router through a role decision algorithm. Therefore, the router role can be quickly determined through an automatic process, the networking efficiency is optimized, the network compatibility and safety are improved, and management and maintenance are simplified.