34results about How to "Implement security assessment" patented technology

The invention relates to an AADL (architecture analysis and design language) model extension based software system security verification and assessment method, which is provided in order to overcome defect of difficulty in direct processing of system models, high computation cost and high redundancy in computation in existing AADL model based verification and assessment. The method includes: establishing relationship between risk factors and an AADL architecture model to form a mechanism generating model; extracting model elements, generating a time state fault tree, a hardware software impactanalysis tree and a common cause time-dependent analysis tree according to the model elements, and backstepping a risk generation route according to the tree structure from bottom to top; setting physical resource properties and capacity of each physical device; calculating the failure probability of each physical device according to labeled risk factor probability of each physical device; converting an AADL security model into a timed automata; calling a formal verification tool UPPAAL for analysis and verification of the timed automata. The method is applicable to security assessment of software and hardware systems.

The invention provides a method and device for updating login information by a login control. The method comprises the following steps: detecting a password security level of the login information stored by the login control according to a preset frequency; for a password of which the password security level is lower than a preset password security level, starting a password generator to generate a replacement password; and replacing the password of which the password security level is lower than the preset password security level in the login information stored by the login control with the generated replacement password. By using the method and the device, the password with a high security level can be generated for a user, so that the user does not need to memorize and fill the complicated password; the security of the password can be estimated, and the password can be stored and modified; and therefore, the use experience and the operation convenience of the user are improved.

The invention discloses deficiency ultrasonic detecting equipment of mechanical equipment based on wavelet theory, the whole equipment is composed of an ultrasonic flaw detector, a high-speed data acquisition system, a minitype computer, a wavelet analysis software, an equivalent quantitative model for detecting signals and an equipment safety performance evaluation system. The ultrasonic flaw detector comprises a synchronous circuit, a transmission circuit, an ultrasonic detecting energy converter, a signal receiving circuit which are connected, the high-speed data acquisition system adopts a high-performance digital storage oscilloscope and comprises a synchronous trigger, a gain position adjustment part, a data acquisition mode and time base part, a waveform recording part and a display part and the other parts, the computer is allocated with a wavelet analysis integration software which is self-developed, the equivalent quantitative model for detecting signals and a safety evaluation theoretical model. The invention breaks through the application limits of the traditional ultrasonic flaw detector, effectively improves the sensibility and measuring accuracy of flaw detection and provides novel equipment and a new method for the ultrasonic detecting problems with complex structure. The equipment has convenient usage and high engineering application value.

The invention provides a method and a system for security assessment of the mobile internet, and relates to the field of network security assessment. The method and the device are used for carrying out security assessment of the mobile internet. The method comprises the steps of obtaining an assessment task input by a user, obtaining the security assessment indexes required by execution of the assessment task, collecting security assessment data of network element equipment inside the mobile internet and/or a mobile terminal according to the security assessment indexes, determining the security assessment result of the network element equipment inside the mobile internet and/or the mobile terminal according to the security assessment data, and determining the security assessment result of the mobile internet according to the security assessment result of the network element equipment inside the mobile internet and/or the mobile terminal. The embodiment of the invention is suitable for carrying out security detection on the mobile internet.

The invention relates to a security evaluation method of a darknet, a server and a computer-readable medium. The method comprises: accessing a darknet website corresponding to the darknet domain nameaccording to an obtained darknet domain name, and obtaining data information of the darknet website, wherein, the data information comprises text content information and network fingerprint information; determining a first similarity between the text content information and text content information of the darknet website in a history record, and detecting a vulnerability of the text content information according to the first similarity; determining a second similarity between the network fingerprint information and network fingerprint information of the darknet website in the history record, and detecting a vulnerability of the network fingerprint information according to the second similarity; and according to the detection result of vulnerability detection on the text content informationand the detection result of vulnerability detection on the network fingerprint information, generating a security evaluation report. The invention has the advantage that the security of the darknet website is evaluated.

A network security evaluation method based on node weight comprises the steps of I, analyzing property risks, to be specific, finding vulnerabilities, and making a list of multiple vulnerabilities of one property according to vulnerability source, vulnerability code and risk level; calculating property risk values, wherein a maximum risk value in a vulnerability risk set represents a risk value of the current property, and when one property faces multiple risks, maxium possible loss that the property may face can be effectively expressed; using the maxium vulnerability risk value to represent integrated vulnerabilities of properties; II, performing risk evaluation based on node weight, to be specific, performing risk evaluation on a whole network information system for different properties in conjunction with weight. The method has the advantages of good simplicity, good effect and feasibility, and easiness of popularization.

The invention provides a method and device for updating login information of a login control. The method includes the steps that the password security level of login information stored by the login control is detected according to the preset frequency; for a password with the security level lower than the preset password security level, a password generator is started to generate a replacement password; the generated replacement password is used for replacing the password with the security level lower than the preset password security level in the login information stored by the login control. By the adoption of the method and device, the password with the high security level can be generated for a user, the user does not need to memorize or fill in a complex password , the security of the password is evaluated, the password is stored and modified, and use experience and operation convenience of the user are improved.

The invention discloses a wireless local area network safety assessment system. The wireless local area network safety assessment system comprises a wireless local area network scanning module, a network monitoring module, a password analyzing module, a vulnerability scanning module and a data processing module, wherein the wireless local area network scanning module is used for performing global scanning on a wireless local area network; the network monitoring module is used for monitoring the running state of a client side in the wireless local area network; the password analyzing module is used for performing password analysis on an illegal AP (access point) and a client end and acquiring a secret key of an illegal user; the vulnerability scanning module is used for scanning and testing vulnerabilities of the client side in the wireless local area network; a wireless local area network safe operation scheme is set by the data processing module; and intermediate data and the safe operation scheme are displayed through a display module. The operation state of the 802.11b wireless local area network is automatically detected and monitored by the system; security vulnerabilities are found out and analyzed; a safety assessment report and an aid decision making report of the wireless local area network are given; and functions of scanning detection, secret key analysis, vulnerability association and safety assessment on the basis of the 802.11 protocol wireless local area network are fulfilled.

The invention provides a wellhead device corrosion detection and evaluation method, which comprises the steps that a to-be-detected part on a wellhead device is determined, wherein the wellhead devicecomprises a valve, a multi-way joint and a pup joint, and the to-be-detected part is located on at least one of the valve, the multi-way joint and the pup joint; the wall thickness of the to-be-detected part is detected through ultrasonic C scanning, and the actual wall thickness is obtained; calculation is conductedto obtain a wall thickness threshold of the to-be-detected part according to theparameters of the wellhead device; and the actual wall thickness is compared with a wall thickness threshold value, and whether the corrosion condition of the to-be-detected part meets the requirementor not is judged. The problem that in the prior art, nondestructive detection evaluation cannot be conducted on the corrosion condition of the wellhead device is solved.

The invention provides an access control method and device, computer equipment and a computer readable storage medium. The access control method comprises the following steps: receiving an access request; determining an entity layer corresponding to the access request, wherein the entity layer comprises four access entities which are respectively an access user, an access device, an access proxy service and a proxy service device; for each access entity, obtaining security evaluation data of the access entity, and calculating a security evaluation value of the access entity according to the security evaluation data; determining a security evaluation value of the access request according to the security evaluation values of all the access entities; when the security evaluation value of theaccess request is less than the security threshold, sending a command of blocking the access request to the access proxy service. According to the invention, the complexity of authority judgment can be reduced.

The invention relates to an electric vehicle safety assessment method and system. The method comprises the following steps: respectively performing safety evaluation on a battery system, a charging system and a power supply system; constructing a safety matrix according to the safety evaluation value of the battery system, the safety evaluation value of the charging system and the safety evaluation value of the power supply system; performing data fusion of the safety evaluation value of the battery system and the safety evaluation value of the charging system according to the safety matrix; and performing data fusion according to the safety matrix, the data fusion result and the safety evaluation value of the power supply system, and determining the safety evaluation value of the electric vehicle. According to the method, integrated safety evaluation of the battery, charging and power supply can be achieved, normalization processing of faults is achieved, and the possibility of safety accidents is restrained from the aspects of the battery of the electric vehicle, charging equipment and a power supply system.

The invention discloses a power transmission line adaptive overload protection method considering dynamic thermal characteristics. The method comprises the steps of starting protection when the current amplitude of a line is greater than the maximum allowable current of the line, and measuring the power of the line every delta t; comparing the sampling power with the allowable long-term operation power of the line, and if the sampling power is greater than the allowable long-term operation power of the line, calculating the estimated allowable overload time of the current sampling; and then comparing the estimated allowable overload time of the current sampling with the next sampling time, if the estimated allowable overload time of the current sampling is less than or equal to the next sampling time, setting the protection action time, and when the overload duration meets the protection action time, cutting off the overload line. According to the method, protection measures can be delayed as much as possible on the overload line under the condition of line safety, line safety and cascading failure risks are taken into consideration. The method is independent of communication, simple in principle, easy to implement and high in reliability and sensitivity.

The invention relates to a comprehensive evaluation system, in particular to a comprehensive evaluation system for e-government affairs. The system can retrieve corresponding index data from a government affair database according to a government affair service evaluation request, perform relevance and importance analysis on the index data, and classify the index data based on a relevance analysis result; meanwhile, the government affair service quality is effectively evaluated according to an importance analysis result, and a basis is provided for improvement of electronic government affair services; through carrying out detection, clustering analysis and type combination on abnormal traffic in the government affair system, security evaluation on the network situation of the government affair system can be realized, and security prediction can be carried out on the network situation by utilizing a network situation prediction model; according to the technical scheme provided by the invention, the defects that the government affair service quality cannot be effectively evaluated and the security of the electronic government affair system cannot be evaluated in the prior art can be effectively overcome.