37results about How to "Effective defense against attacks" patented technology

A multi-model cooperative defense method facing deep learning antagonism attack comprises the following steps of: 1) performing unified modeling based on a gradient attack to provide a [Rho]-loss model; 2) according to design of a unified model, for an countering attack of a target model fpre(x), according to a generation result of a countering sample, classifying a basic expression form of an attack into two classes; 3) analyzing the parameters of the model, performing parameter optimization of the [Rho]-loss model and search step length optimization of a disturbance solution model for the countering sample; and 4) for the mystique of a black box attack, designing an experiment based on an adaboost concept, generating a plurality of different types of substitution models, used to achievethe same task, for integration, designing a multi-model cooperative defense method with high defense capability through an attack training generator of an integration model with high defense capability, and providing multi-model cooperative detection attack with weight optimal distribution. The multi-model cooperative defense method is high in safety and can effectively defense the attack of a deep learning model for the antagonism attack.

The invention provides a netfilter-based address and port hopping communication implementation method, which comprises the steps of 1) initially deploying; 2) configuring the hopping parameters of a server, generating a hopping key, storing the hopping key, and distributing the hopping parameters to an authentication and distribution agent by means of the server; 3) acquiring the hopping parameters of the server by means of a client after the authentication process of the client by an authentication and distribution center; 4) synchronizing the clocks of the client, the server and an address hopping gateway, calculating the current hopping address and the current hopping port of the server, and modifying addresses and ports corresponding to data messages sent and received by a local computer so as to realize the communication; 5) receiving communication messages received by the address hopping gateway from the client and the server, and acquiring the hopping address of the server by an address hopping engine according to the above address hopping parameters, and modifying addresses corresponding to the above messages to complete the message forwarding process; 6) realizing the port hopping function through a port hopping engine by the server, modifying ports corresponding to the messages of an importer / exporter to complete the communication. The method is simple in principle, easy to realize and popularize, and good in safety.

The invention discloses a living body detection method, device and equipment and a storage medium, and belongs to the technical field of computers. According to the embodiment of the invention, the face areas in the color image and the infrared image of the target are respectively detected through the two cascaded branches in the detection model; whether the target is a living body or not is determined by integrating the detection results of the two images; on one hand, a face region in a color image is detected; according to the method, black-and-white printing and infrared printing images can be effectively defended, detection of a face area in the infrared image is combined, attacks of screen images and color printing images can be effectively defended, and therefore the comprehensive defense effect is achieved, the defense effect is good, practicability is good, and the accuracy of the detection result is good. And on the other hand, different requirements of the two images on theenvironment information are considered in the comprehensive process, and the weight of the two images during combination is determined according to the environment information of the target, so that the accuracy of the detection result obtained by weighting is better, and the defense effect is better.

The invention discloses an SDN-based SDP security group implementation method and a security system, and the method achieves SPA single-packet authorization service logic through adoption of a flow table method of an SDN network, and carries out the planning and identity authentication of access authorities of different users through combining with the IAM user management of a cloud platform. According to the invention, the security of the cloud platform security group function is enhanced; accurate control of the security group on external authorization is realized; in combination with the identity authentication technology of the cloud platform and the SDN cloud network, the additional cost of the SDP gateway and the SDP controller is reduced, the SDP technology and the cloud computing security technology are fused, meanwhile, attacks from an internal network can be effectively defended, and comprehensive defense of flow in all directions of the cloud platform can be achieved.

The invention discloses a driven malware defense method and a device; the method comprises the following steps: according to import table information of a driver, replacing function address information related to a system function needing monitoring with address information of a security software monitoring function; using the security software monitoring function to monitor executing action of the driver and send alarm information when the executing action is abnormal. The device comprises a replacement processing module and a monitoring processing module; according to the import table information of the driver, the replacement processing module is used for replacing the function address information related to the system function needing monitoring with the address information of the security software monitoring function; the monitoring processing module is used for using the security software monitoring function replaced by the replacement processing module to monitor the executing action of the driver and sending the alarm information when the executing action is abnormal. The invention has the characteristics of intellectuality, safe and reliable defense performance, unlikeliness of being restored, no influence on the system performance and the like while effectively carrying out defense on the driven malware.

The invention relates to an array honey pot cooperative control method based on a block chain. The method comprises the following steps: constructing a private chain by using an Ethereum platform, andrealizing de-centralized cooperative operation thought of a honey pot host cluster through a mining way; constructing a topological structure consistent with the Ethereum platform starting from a P2Pnetworking model, and realizing the communication through web3J. Each host in the array executes the mining, the host acquiring an accounting charging right can holds the post of a honey pot serviceconversion task at one periodic time, conversion information is sent through an encryption mechanism, and other host receives and executes the corresponding conversion instruction. Furthermore, external port request access data is stored in the block chain by using the tamper resistance of the block chain information, thereby obtaining the digital evidence for implementing the attack by an attacker. Through the method disclosed by the invention, the cooperative operation of the array honey pot host cluster is guaranteed, thereby trapping the attacker by using the true-false service in dynamicconversion, and the network security active defense aim is realized.

The invention discloses a human face living body verification method and device, a mobile terminal and a computer readable storage medium, which are applied to the field of mobile terminals, and comprise the following steps: shooting a human face image by utilizing left and right cameras of the mobile terminal; performing distortion correction and line alignment on the shot left and right face images respectively; respectively carrying out face detection on the corrected left and right face images; matching the left image and the right image subjected to face detection with face key points; and carrying out living body judgment according to the distance between the face key points. According to the embodiment of the invention, when face recognition authentication is used, attacks of images, videos and the like can be effectively resisted,. The method is simple, reliable and mature, the speed is high, potential safety hazards are reduced, and the user experience is improved.

The invention provides a keyword ciphertext generation method and device for cloud storage data, a cloud storage anti-quantum computing public key searchable encryption method, a cloud storage system, a storage medium and electronic equipment. The cloud storage data keyword ciphertext generation method comprises the steps of acquiring keyword information from data uploaded by a data owner; determining a random bit string; performing bit string encryption on the keyword information to determine a first component; performing bit string encryption on the random bit string to determine a second component; determining a third component according to the first component and an agent authorization public key and an agent authorization key between the agent and the data owner; and determining the keyword ciphertext based on the first component, the second component and the third component of the keyword ciphertext. By adopting the bit string encryption mode, the binary bit string encryption of the keyword information can be realized, the data security is improved, and the bit string encryption also has stronger practical application advantages and stronger practicability.

The invention discloses a virtual prop control method and device, a storage medium and electronic equipment. The method comprises the steps that in response to a first interaction operation obtained in a target game application, a first virtual operation object is controlled to be switched from a currently held virtual prop to a virtual defense prop and a virtual attack prop, and the virtual defense prop is used for blocking an attack operation on the first virtual operation object; and in response to a second interaction operation obtained in the target game application, the first virtual operation object is controlled to move together with the virtual defense prop and the virtual attack prop, and the second interaction operation is used for controlling the first virtual operation objectto move. By the adoption of the technical scheme, the technical problem that in the prior art, a defensive shield in a traditional mode is poor in protection effect on game characters is solved.

The invention provides a rapid consensus method for large-scale heterogeneous dynamic nodes based on a DAG block chain, and relates to the field of block chains, and the method comprises the steps: constructing a heterogeneous dynamic Internet of Things network based on the block chain; dividing the heterogeneous dynamic Internet of Things network into a plurality of areas; selecting full nodes of each region; determining the node level of each node through a local outlier factor algorithm; the node corresponding to the local area takes the target transaction as a local transaction; carrying out verification by adopting an intra-region weight voting consensus mode, packaging the successfully verified local transaction into a block, and uploading the block to a local DAG region slave chain; the target transactions are constructed into a data transaction set by all nodes; verifying by adopting a multi-region weight voting consensus mode, packaging a successfully verified data transaction set into blocks, and uploading the blocks to a DAG global main chain; through a multi-signature mode, transaction events in a DAG area slave chain and a DAG global main chain are bidirectionally anchored, and a credible data exchange channel is established.

The invention provides a content lock firewall method based on a white list, and the method comprises the steps: step 200, carrying out the semantic analysis of a data package load received by a website, and obtaining an analysis text of a received data package; step 300, matching the parsed text of the data packet received by the website with a text pattern library to determine whether to forwardor intercept the received data packet, the text pattern library comprising value domains and structural features of a plurality of keywords. Based on the method disclosed in the embodiment of the invention, for websites with relatively fixed functions, known and novel network attacks can be effectively defended by deploying the firewall, the websites can run with vulnerabilities under the condition of guaranteeing normal functions, and high-cost upgrading is not needed.

The invention discloses a method, a system and equipment for defending against an attack message, and relates to the technical field of communication. The method for defending against the attack message comprises the following steps: recording mark information of a received TCP message in a corresponding entry in a network address translation (NAT) table in a process of establishing transmission control protocol (TCP) connection with a client; and according to the destination information, statistics is carried out on entries which only record the mark information of the SYN message in the NATconversion table, so that an access control list ACL entry can be generated. Attack messages are effectively defended, the network deployment is simplified, and the cost is reduced.

The invention discloses an identity authentication method based on an N-dimensional spherical surface, which comprises: an authentication server receives registration and identity authentication of users after being initialized; when a new user registers, the user calculates a vector by a safe one-way function according to passwords selected and submits the vector to the authentication server; the authentication server specifies an IDg for the user as the identification of the identity of the user; the authentication server combines a self secrete vector with the vector submitted by the user to determine the N-dimensional spherical surface; the authentication server randomly selects a plurality of different points on the N-dimensional spherical surface to form an encrypted file which is sent to the user through a safe channel; when the user requires identity authentication, the passwords and the encrypted file containing identity identification are utilized to calculate; the result of calculation is sent to the authentication server; and the authentication server checks and determines whether to accept the identity of the user after calculation. The method can effectively reduce the stored information and calculation load of the authentication server and prevent imitating the authentication server.

The embodiment of the invention discloses a session table entry processing method and device in a multi-core system. Whether a message is safe or not is firstly determined after a forwarding core receives a first handshake message or a second handshake message when the forwarding core receives the message. When the message is an unsafe first handshake message or an unsafe second handshake message,the session timeout item of the message is added into the link table list array; and the session timeout item of the message is processed by utilizing the link table list array; therefore, the situation that when the received message is the attack message, the timer of the forwarding core is used for processing the session timeout item of the attack message is avoided, attacks are effectively defended, processing resources of the timer of the forwarding core can be saved, the forwarding core can normally process the security message, and the overall forwarding performance is improved. In addition, each forwarding core is configured with a linked list array, so that lock-free processing of the multi-core system is realized.

The invention discloses an antiriot helmet and a preparing method thereof. The antiriot helmet comprises an inner helmet body and an outer helmet body arranged on the inner helmet body in a sleeving mode. The inner helmet body and the outer helmet body are attached together through an adhesive. The outer helmet body is prepared through injection molding after melting of PC / ABS alloy aggregates. The inner helmet body is prepared through molding of multiple layers of aramid fiber fabric layers dipped with modified phenolic resin. The antiriot helmet effectively resists the attacks of bullets, edge tools, clubs, non-explosive projectiles and chemical liquid and effectively protects the head, face and neck of a human body.

The invention discloses an intrusion detection method based on a honeynet arrangement, a storage medium and a system, and relates to the field of network security. The method comprises the following steps: arranging and constructing a honeynet according to a topological structure of a service network, deploying the honeynet to a preset cloud environment, redirecting traffic in the service network to the honeynet in the preset cloud environment, detecting abnormal traffic in the traffic through the honeynet, constructing the honeynet based on a real network topology of the service network, the system has a real network structure, the authenticity and the cheating ability of the honeynet are remarkably improved, and interaction is carried out through the honeynet and a service attacker to identify used strategies and tools, excavate unknown rules to cope with attacks and effectively defend unknown attack modes.

The invention discloses an intelligent substation remote control system and a data processing method thereof, and the system comprises a remote control terminal which is used for transmitting an operation instruction, an instruction receiving module which is used for receiving the operation instruction from the remote control terminal, and an instruction analysis module which is used for analyzing the operation instruction to determine a corresponding operation parameter, the command generation module is used for generating a substation control command based on the operation parameters, and the control command sending module is used for sending the control command to the intelligent substation and executing corresponding operation; according to the intelligent substation remote control system and the data processing method thereof, accurate synchronization of equipment state information is guaranteed, and the asynchronous phenomenon is avoided, so that the overall operation efficiency and stability of the system are improved, the adaptability and expansion capability of the system are improved, and the requirement for efficient operation of a modern intelligent substation is met.

The invention relates to the technical field of spatial information, and discloses a low-orbit satellite security authentication method based on spatial channel characteristics. The method comprises a three-layer SDN distributed control structure consisting of a ground control center, a GEO satellite controller and an MEO satellite controller. In the whole authentication process, key agreement contains timestamp information, so that the freshness of the message is ensured. After the timestamp T is acquired, whether the timestamp T is within an allowable time range delta T is detected, if the timestamp T is valid, the acquired secret key is fresh, replay attacks can be effectively resisted, symmetric secret keys generated in the subsequent authentication process are iteratively generated based on the initial KEYab, and the shared secret key needs to be updated again every time a session is ended. The new secret key is based on the Hash operation of the channel characteristic value and the message and has randomness, so that even if an attacker obtains the current shared secret key, a subsequent new secret key cannot be generated, and the independence of the authentication process is guaranteed.

The invention discloses a biometric feature living body recognition and detection method based on a depth image, and the method comprises the steps: obtaining the depth image of a detected target which currently comprises biometric features, and carrying out living body recognition of the current depth image based on a trained machine learning model, calculating the gradient of pixel points in the depth image based on the depth image sample, and obtaining image gradient features representing the change degree of the image depth value; obtaining a sub-region gradient direction histogram of the gradient amplitude of at least one sub-region image distributed in the gradient direction according to the image gradient characteristics; connecting all the sub-region gradient direction histograms in series to obtain extracted image features; and taking the image features as a sample of the machine learning model, and training the machine learning model. The invention is simple in algorithm and short in response time, realizes presentation attack detection, and improves the security of identification equipment.

The present invention provides a system and method for facial expression detection. The system comprises a camera used for acquiring an image with an input face; a first deep neural network used for detecting the input face in the image; a quality detection module used for judging whether the detected input human face is a human face picture with qualified quality or not, and sending a trigger signal if the detected input human face is the human face picture with qualified quality; a processing module used for intercepting a face area from the image when receiving the trigger signal sent by the quality detection module, and carrying out affine transformation on the face area to obtain a front image corresponding to the input face; and a determination module used for determining the expression classification of the front image as a first expression through a second deep neural network, and when the input faces in more than a preset number of continuous multi-frame images are all the first expressions, determining the input faces as the first expressions, so that the problem of face expression detection in a monitoring camera scene can be solved.

The invention relates to the technical field of military materials, in particular to a tactical bulletproof shield. According to the tactical bulletproof shield, the auxiliary bulletproof shield assembly is arranged in the main bulletproof shield, the overall protection capacity of the shield is remarkably improved, the auxiliary bulletproof shield assembly and the baffles on the auxiliary bulletproof shield assembly can provide additional protection layers when necessary, attacks from different directions can be effectively resisted, and the anti-theft performance of the shield is improved. The observation opening is formed in the main bulletproof shield body, the bulletproof glass containing groove is formed in the main bulletproof shield body, a user is allowed to observe the outside condition without exposing himself / herself, the battlefield sensing capacity and safety are improved, the stability of the auxiliary shield body in the sliding groove is ensured through the design of the fixing ring and the limiting ring, and the auxiliary shield body is prevented from accidentally moving or falling off in the battle process; meanwhile, a stable holding point is provided for a user through the arrangement of the first handrail, the stability and safety during shield holding are enhanced, in addition, due to the design of a sliding groove and a limiting groove of the auxiliary shield, the adjusting process of the auxiliary shield is stable and accurate, and operation convenience and efficiency are improved.

The present invention provides a security defense method for an industrial control system network. The industrial control system network includes a shared network module and an industrial control network module. The security defense method includes the following steps: establishing a management center module in the shared network module; The management center module performs security management on multiple grading systems in the shared network module; a trusted security module communicating with the management center module is established in the industrial control network module; the trusted security module controls all rating systems The above-mentioned industrial control network module conducts trusted defense. The invention also provides a security defense system for the industrial control system network. The security defense method and system of the industrial control system network provided by the present invention realizes the transformation of the defense method from passive "blocking and killing" to active immunity, and can effectively resist organized attacks while meeting the requirements of high real-time and high reliability. , Targeted attacks.

An identity authentication method based on N-dimensional sphere is provided by the present invention. An authentication server accepts a user registration and an identity verification after initialization; when a new user registers, the user computes a vector via a security one-way function according to a password selected by himself and submits it to the authentication server, the authentication server appoints an IDg as an identifier of the user identity for the user; the authentication server determines a N-dimensional sphere by combining its own secret vectors and the vector submitted by the user; the authentication server selects several different points on the N-dimensional sphere randomly, forms an encrypted file with them and sends it to the user via a security channel; when requiring for identity authentication, the user performs computation by using his own password and the encrypted file containing the identity authentication identifier, and transmits the result to the authentication server. After performing computation, the authentication server verifies and determines whether the user identity should be accepted. The present invention can reduce the storing information and the calculation amount of the authentication server efficiently, and can prevent fake authentication servers.

The present invention provides a whitelist-based content locking firewall method, comprising: step 200: performing semantic analysis on the data packet load received by the website, and obtaining the parsed text of the received data packet; step 300: receiving the website The parsed text of the data packet is matched with a text pattern library to decide whether to forward or intercept the received data packet, and the text pattern library contains value domains and structural features of multiple keywords. Based on the embodiment of the present invention, for websites with relatively fixed functions, the firewall can effectively defend against known and new network attacks by deploying the firewall, and can run with loopholes while ensuring normal functions, without expensive upgrades.

The invention discloses an authentication method for network signaling between quantum safety network equipment. The authentication method includes the following steps: creating synchronous signaling key stores used for signaling authentication for both sides between the communicated network equipment, wherein the synchronous signaling key stores are divided into an encrypting signaling key store and a decrypting signaling key store, and setting a read indicator and a write indicator for each signaling key store; a sending end calculating related hash operation message authentication codes H of keys based on key data and a read indicator offset address of the encrypting signaling key store of the sending end, and sending a corresponding signaling data packet to a receiving end; the receiving end receiving the signaling data packet, acquiring a read indicator offset address in the signaling data packet, and judging whether the key data of the read indicator offset address of the decrypting signaling key store of the receiving end is already used or not; and if the key data is not used, calculating H and verifying the content of the signaling data packet. The authentication method for the network signaling between the quantum safety network equipment has the advantages that the authentication is fast, and the method has a certain preventive effect on distributed denial of service (DDoS) attacks, can achieve true one-time-one-key encrypting authentication and is absolutely safe theoretically.

The invention discloses an SDN-based SDP security group implementation method and a security system, and the method achieves SPA single-packet authorization service logic through adoption of a flow table method of an SDN network, and carries out the planning and identity authentication of access authorities of different users through combining with the IAM user management of a cloud platform. According to the invention, the security of the cloud platform security group function is enhanced; accurate control of the security group on external authorization is realized; in combination with the identity authentication technology of the cloud platform and the SDN cloud network, the additional cost of the SDP gateway and the SDP controller is reduced, the SDP technology and the cloud computing security technology are fused, meanwhile, attacks from an internal network can be effectively defended, and comprehensive defense of flow in all directions of the cloud platform can be achieved.

The invention provides a netfilter-based address and port hopping communication implementation method, which comprises the steps of 1) initially deploying; 2) configuring the hopping parameters of a server, generating a hopping key, storing the hopping key, and distributing the hopping parameters to an authentication and distribution agent by means of the server; 3) acquiring the hopping parameters of the server by means of a client after the authentication process of the client by an authentication and distribution center; 4) synchronizing the clocks of the client, the server and an address hopping gateway, calculating the current hopping address and the current hopping port of the server, and modifying addresses and ports corresponding to data messages sent and received by a local computer so as to realize the communication; 5) receiving communication messages received by the address hopping gateway from the client and the server, and acquiring the hopping address of the server by an address hopping engine according to the above address hopping parameters, and modifying addresses corresponding to the above messages to complete the message forwarding process; 6) realizing the port hopping function through a port hopping engine by the server, modifying ports corresponding to the messages of an importer / exporter to complete the communication. The method is simple in principle, easy to realize and popularize, and good in safety.

Embodiments of the present disclosure provide a decryption method, a variable storage method, and related devices, equipment, media and products. The decryption method monitors the current signal of the chip through the current probe, monitors the electromagnetic signal of the SRAM through the electromagnetic probe, determines the key bit value corresponding to the coordinate value stored in the SRAM based on the signal change mode of the current signal and the electromagnetic signal, and then obtains the decryption result. Through the current-electromagnetic dual-channel acquisition and analysis scheme, the ability to obtain effective information in the decryption process is improved, the redundant information processing process is reduced, and the password cracking efficiency is improved. The variable storage method stores the coordinate values of at least two coordinate dimensions of at least one password intermediate variable in at least two SRAMs, or stores the coordinate values of at least one coordinate dimension of at least two password intermediate variables in the same SRAM, which can avoid local electromagnetic radiation analysis and the storage process does not affect the execution efficiency of the encryption algorithm.