This invention discloses a device and method for evaluating the proppant-carrying performance of fracturing fluid with continuously adjustable proppant concentration, relating to the field of oil and gas field production enhancement. The device includes a reactor body. The reactor body is equipped with a stirring assembly, a proppant-adding assembly, a heating assembly, and a visualization window. The proppant-adding assembly achieves quantitative and batch-wise addition of proppant within the high-pressure reactor through a series of upper valves, a proppant-to-be-added section, and a lower valve. The method includes: applying experimental temperature and pressure conditions, initiating stirring to simulate dynamic flow, continuously adding proppant in batches through the proppant-adding assembly, monitoring the proppant status in real time using a vision system, and recording and analyzing data to obtain a continuous proppant-carrying performance curve and a limit proppant-carrying value. This invention solves the problem of existing technologies being unable to conduct continuous gradient testing of proppant concentration under high-temperature and high-pressure dynamic conditions, and can obtain complete proppant-carrying performance data of fracturing fluid from low concentration to limit concentration in one go, with evaluation results closer to actual downhole operating conditions.
The invention discloses a network security analysis system and method based on a security situation awarenesssystem, and relates to the technical field of network securitysituation awareness, and the system comprises a data collection module, a processing module, an event reconstruction module, a threat analysis module and a situation generation module which cooperate in sequence. The data acquisition module acquires original data containing encrypted traffic and unstructured alarm from a network boundary probe; the data processing module performs hierarchical decoding and normalization on the data to generate a standardized record with a unified timestamp; the event reconstruction module connects the records into a continuous event sequence according to a time sequence; the threat analysis module compares the event sequence with a threat behavior pattern library, and identifies and marks fragments conforming to an attack chain; and the situation generation module constructs a network security situation portrait accordingly. According to the scheme, effective analysis of encrypted and unstructured security data is realized, a complex and latent attack behavior chain can be identified based on the continuous event sequence, and the depth and accuracy of threat detection are improved.