22results about How to "Improve network security" patented technology

The invention relates to the technical field of network information security monitoring, in particular to a DPU-based enterprise intranet illegal external connection detection system, which comprises an access control unit, a host monitoring unit, an identity authentication unit, a security management unit, an intranet resource information management unit, a database unit, an automatic detection unit, an alarm unit and a blocking unit. In the invention, the network access examination and approval module registers and examines the physical address of a network card for each host newly accessed into the intranet of an enterprise, the illegal access detection module performs illegal detection on host equipment subjected to network access registration, and the illegal access blocking module can block the communication between the host and other hosts in the intranet. And meanwhile, the automatic detection unit realizes automatic detection of system illegal external connection information through an illegal external connection information automatic detection model, and judges whether the illegal external connection information exists or not, so that illegal external connection of an enterprise intranet of unknown equipment and leakage of sensitive information in an enterprise intranet database system are avoided, and the overall network security of the enterprise intranet is effectively improved.

The invention discloses a unit output adjustment method and device considering various auxiliary services, and a medium. The method comprises the following steps: establishing a new energy time-sharing capacity market model related to a new energy unit and a flexible resource spot market model related to a flexible resource unit according to operation data of a power system; and solving the model, respectively obtaining the output of the new energy unit and the output of the flexible resource unit, and adjusting the power system according to the output of the new energy unit and the output of the flexible resource unit. According to the unit output adjustment method and device considering various auxiliary services and the medium provided by the invention, by establishing the new energy time-sharing capacity market model, the output condition of a new energy unit can be simulated and predicted more accurately; by introducing the flexible resource unit, the flexibility of the power system can be remarkably improved, and the problems that the resource configuration of the power system is too single and the load is difficult to respond to the fluctuation of new energy in time can be solved.

The present invention discloses a risk detection method, device, equipment and storage medium for network attacks. The method includes: in this embodiment, the first mutation weight of the enterprise being attacked by the network is calculated based on the business information and network traffic data of the enterprise when adding new business, and the second mutation weight of the enterprise being attacked by the network is calculated based on the application information and network traffic data of the enterprise when upgrading the application program, so as to merge the first mutation weight and the second mutation weight into the mutation level of the enterprise being attacked by the network, input the network traffic data into the sequence feature structure to extract the time series features, and obtain the traffic time series features; input the traffic time series features into the detection branch structure corresponding to the mutation level of the enterprise being attacked by the network to detect the risk level of the enterprise being attacked by the network in the future. Improve the accuracy of predicting the risk of the enterprise being attacked by the network in the future, reduce the problems of underreporting and false reporting, and improve the network security of the enterprise.

The invention relates to a vehicle data transmission method and system and a vehicle, the method is used in the vehicle data transmission system comprising a data sending end, a data receiving end and a vehicle-mounted network terminal, and the method comprises the following steps: the data receiving end completes identity verification processing on the data sending end based on the vehicle-mounted network terminal to obtain an identity verification result; when the identity verification result is that verification is passed, the data sending end encrypts the to-be-sent data based on a preset shared key to obtain target sending data, and transmits the target sending data to a data receiving end; and the data receiving end decrypts the target sending data based on the shared key to obtain decrypted data. By adopting the method, the security of data transmission can be improved.

The present disclosure provides a message processing method and device, equipment and storage medium, comprising: in response to receiving a to-be-processed message, extracting quintuple information from the to-be-processed message; matching the quintuple information with the index key of the session table to determine the type of the to-be-processed message, wherein the index key of the session table is constructed based on the quintuple information of the established session; in response to the type of the to-be-processed message being a first packet, matching the quintuple information with the index key of the association mapping table to determine whether the to-be-processed message is an associated session of the main session, wherein the index key of the association mapping table is constructed based on the IP address and port information obtained by parsing the application layer of the control channel message of the multi-channel protocol, and the main session is the session of the control channel; in response to the to-be-processed message being an associated session of the main session, performing forwarding processing on the to-be-processed message.

The invention belongs to the technical field of network security and function security of intelligent networked automobiles, and particularly discloses a bus message security protection method and system and electronic equipment.The bus message security protection method comprises the steps that in the design stage, the network security requirement of an in-vehicle bus is determined through security analysis, a jitter attribute is added to a security key message, and the security key message is obtained; carrying out schedulability analysis on the CAN messages, and calculating response time of each message by evaluating the worst execution time, the message period, the message deadline, the queuing jitter time and the priority of each message; in the operation stage, in each message response time, through transverse security detection and longitudinal security detection, performing abnormality judgment on security key messages, and discarding the messages greater than an acceptable threshold value of the number of times of limitation; and adding the messages of which the times are less than or equal to the limited times into a message queue, and waiting for bus arbitration and transmission. According to the invention, while the network security of the in-vehicle bus is improved, the safety of the vehicle driving function is ensured.

The invention relates to a network security monitoring method, system and device of an industrial internet and a storage medium, and belongs to the technical field of network security, the method is applied to a buffer area, and the method comprises the following steps: obtaining abnormal request information, the abnormal request information comprises a destination code and a request task, the destination code is a code of a terminal device used for executing the request task, and marking the terminal device with the destination code as a destination terminal device; determining an associated code according to the destination code and the request task, marking the terminal device with the associated code as an associated terminal device, the associated terminal device being located in the internal area; calculating an association degree score of the association code according to the importance level and the association level of the association terminal device; and generating interference information according to the correlation score. The method and the device have the effect of improving the network security of the industrial internet.

The invention discloses a network security supervision platform based on network security operation, which relates to the technical field of network security, and comprises a network operation data acquisition module, an exposed surface depth evaluation module, an exposed surface processing module and a web data warehouse, according to the invention, the exposed surface depths of the specified operation system at the asset operation level, the business operation level and the offline management level are respectively evaluated through the asset operation data, the business operation data and the offline management data of the specified operation system, so that the specified operation system is prevented from being attacked from multiple levels, and the risk evaluation is relatively comprehensive; the network security of a specified operation system is improved; meanwhile, the early warning response signal of the specified operation system is generated, and support is provided for a follow-up security team to judge which layers need to be protected preferentially, so that the follow-up security team is prevented from mistakenly judging which layers need to be protected preferentially, the maintenance efficiency of the specified operation system is improved, and the network risk of the specified operation system is reduced.

The invention relates to a networking solution for software defined wide area network communication. According to the solution, Hub-Spoke networking and a hierarchical networking scheme are established in a mixed mode, five-level network points are included, the first-level network point is a top-level center network point, the second-level network point is a secondary-level center network point, and the third-level network point, the fourth-level network point and the fifth-level network point are branch network points; first-level, second-level and third-level network points are configured with double devices, and fourth-level and fifth-level network points are configured with single devices; sD-WAN tunnels are respectively established between each branch network point and the top-level central network point and between each branch network point and the secondary-level central network point, and link access adopts an internet line; an SD-WAN tunnel is established between the top-level center network point and the secondary-level center network point, and link access adopts an MSTP or MPLS-VPN line and a dual-internet line; compared with the existing solution, the private network resource can be scheduled on the unified cloud network platform, the bidirectional perception of the network edge equipment is realized, and the network quality and safety are improved.

The embodiment of the invention discloses an Internet of Things security active defense method and device based on a bypass mirror image and a medium, and relates to the technical field of network security. The method comprises the following steps: acquiring network traffic between external equipment and Internet of Things equipment through a bypass monitoring mode; and under the condition that an attack behavior is detected in the network flow, constructing a blocking data packet according to the characteristics of the Internet of Things equipment, and transmitting the blocking data packet to interrupt a subsequent session. According to the embodiment, the dangerous situation is actively blocked by detecting the flow of the Internet of Things.

The present invention discloses a configuration-free operation and maintenance method, system, device and storage medium for an operation and maintenance gateway, wherein the method comprises: obtaining an operation and maintenance connection initiated by an operation and maintenance terminal based on a management channel established after the operation and maintenance terminal obtains an IP through an IP automatic allocation class protocol; automatically identifying application protocols according to the operation and maintenance connection, proxying and controlling application protocols in a control list, and transparently forwarding and recording and auditing application protocols not in a control list. The present invention realizes the operation and maintenance of an object to be operated and maintained without changing the original operation and maintenance mode of a substation, adding additional configurations, or adding additional IP resources, and does not reduce the efficiency of on-site operation and maintenance. Moreover, the entire operation and maintenance process is controllable, auditable, replayable, and traceable, which greatly improves the network security of the substation.

The invention discloses a new energy power station dynamic protection-oriented intrusion detection system model optimization method. The method comprises the following steps of: retrieving to-be-detected network equipment through a preset network interface; when the to-be-detected network equipment is opened, capturing the network traffic of the to-be-detected network equipment; detecting the network traffic by using a pre-constructed intrusion detection model, and outputting a classification label corresponding to the network traffic; verifying the classification label of the network flow, and outputting a verification result; and when the verification result is inconsistent with the classification label, performing distillation optimization fine tuning on the intrusion detection model according to the network flow and the verification result, and determining an optimized intrusion detection model.

The invention discloses a vehicle-mounted CAN bus message authentication method based on data compression and label filling. The method comprises the following steps: designing and realizing a lossless compression algorithm of a CAN bus message; the sender selects a data frame filling mode according to the compression result and the minimum authentication label length; the receiver decompresses the data packet and extracts the original information and the authentication label; and finally, the receiver recalculates the authentication label, and verifies the authenticity and integrity of the data packet by comparing whether the extracted label is consistent with the recalculated label. According to the method, the thought of combining lossless compression and message authentication codes is adopted, and a new scheme for enhancing network security is provided for the vehicle-mounted CAN network of the intelligent networked automobile.

This application provides a communication method and apparatus, to resolve a problem that security is low when a tag is triggered to perform random access in a communication network. The method includes: receiving first signaling, and determining, based on the first signaling, a second mask stored at a first storage location; and performing random access when a first mask matches the second mask. The first signaling indicates the first storage location and the first mask, the first signaling carries a first mask identifier, and the first mask identifier identifies the first storage location and / or the first mask. In embodiments of this application, a correspondence between a mask identifier and a storage location and / or a correspondence between the mask identifier and a mask are / is negotiated in advance, so that a part or all of masks and storage locations can be implicitly indicated by using a mask identifier, thereby avoiding exposure of information stored at a storage location in a terminal device, and improving network security of the terminal device.

The invention discloses a conditioning box system for testing a domestic nuclear power DCS single board, and relates to the technical field of DCS single board testing. The conditioning box system for testing the domestic nuclear power DCS single board comprises a machine box, a machine box panel is installed on the outer wall of the front side of the machine box, a conditioning card module, a bottom plate, a function switching array card, a power source bottom plate array card and a J connector set are arranged in the machine box, and a chip board card burning simulation interface is arranged on the outer side of the machine box panel; the conditioning card module comprises a computing power card, an AI-AO conditioning card, a DI-DO conditioning card, an RTD conditioning card, a TC-PI conditioning card and an IOP conditioning card. According to the invention, through the accurate detection module and the reasonable detection process, the defect of misjudgment easily caused by manual detection is overcome, and the problems of the PCBA single board from the macroscopic circuit connection condition to the microscopic component performance parameters and the like can be accurately detected; it is guaranteed that each nuclear power card PCBA single board put into use meets the high-quality and high-performance nuclear power application standard, and the detection precision is improved.

The invention discloses a hydropower adjustment method, medium and system in an electricity market environment, and the method comprises the steps: dividing direct adjustment hydropower into three types, namely an adjustment power plant, a secondary adjustment power plant and a non-adjustment power plant; different hydropower adjustment methods are adopted according to different power plants, specifically, if an out-of-limit section exists in a clearing result, and when the output of a certain hydropower station is increased to relieve blockage, the power plants are adjusted to increase the hydropower output in sequence, the secondary adjustment power plants participate in adjustment according to a selection mode, and the non-adjustment power plants participate in adjustment according to the output change of the specified adjustment power plants. The method has the advantages that reasonability and reliability of a hydropower station power generation plan are guaranteed, overload of section line power flow is relieved, and network safety of a power system is improved.

The present invention discloses an information security defense method for substation measurement and control and PMU devices, which relates to the fields of cryptography and information security technology. According to the characteristics of substation measurement and control and PMU devices, a security component supporting SM2 certificate management is developed based on the OpenSSL framework expansion, and the SM2 algorithm signature, signature verification, encryption and decryption functions are set. Then, a digital certificate signature is set based on the OpenSSL engine, and a digital certificate management module is set at the same time. Then, an SSL key exchange negotiation function is set, and finally, the substation measurement and control and PMU device terminal is securely connected to the system and data transmission is encrypted. The power grid security defense method based on the SM2 algorithm and the SSL protocol proposed by the present invention can ensure the system security of the smart grid, has strong versatility and practicality, and has a positive impact on improving system defense, promoting the intelligence of distribution networks, improving power supply reliability, and enhancing the network security of modern smart distribution networks.

The present invention discloses a container data center computer room, which belongs to the field of data center technology and solves the problem that once the pseudo-random number generation algorithm is used to crack, the security of the container data center computer room is reduced. It includes a data center server arranged in a container, and the data center server includes a user management module, an extraction generation module, a ciphertext generation module, a ciphertext authentication module and an identity authentication module; the user management module is used to feedback a consent instruction after receiving two access requests, and obtain access rights after two authentications; the extraction generation module is used to extract environmental feature data inside and outside the container to generate a password; the ciphertext generation module is used to issue a secondary access request, and form a key pair and a ciphertext respectively, and share the public key to encrypt the ciphertext; the ciphertext authentication module is used to store a private key and issue a primary authentication instruction after verifying the ciphertext. The present invention can increase the difficulty of generating and interpreting the verification password and enhance the security of generating the verification password.

The present invention relates to the field of computer network security prediction technology, and specifically to a computer network security prediction method, system and medium based on big data analysis. First, based on the login account entered by the user in the login interface of the educational system, the identity information, real-time login information and historical login information corresponding to the user are obtained; secondly, the current login abnormality level of the user is obtained based on the identity information, the real-time login information and the historical login information; thirdly, the identity of the user is authenticated based on the current login abnormality level; then, when the identity authentication is passed, the user's operating behavior in the educational system is monitored; finally, the user's current abnormal behavior level is obtained based on the operating behavior and the current login abnormality level and an early warning is issued. Through this method, the present invention can accurately identify the abnormal behavior of the user when logging into the educational system and after logging in, thereby ensuring the network security of the educational system.

An anti-pseudo base station method and apparatus, and a computer-readable storage medium are provided. The anti-pseudo base station method includes: sending, by a base station, first anti-pseudo base station capacity information to a mobile terminal, wherein the first anti-pseudo base station capacity information is used for identifying an anti-pseudo base station capacity of the base station. According to the solution provided by the embodiments, the terminal can be informed of the anti-pseudo base station capacity of the base station conveniently, so as to execute a corresponding authentication and key agreement and distribution process conveniently, and therefore improve network security.

The invention discloses a code verification method and device of a train operation control system, equipment, a medium and a product, and relates to the technical field of network security, and the method comprises the steps: carrying out the semantic analysis of a network security demand specification document, extracting the network security demand structured information, and determining a target code verification strategy according to the network security demand structured information; determining an assertion specification and a code insertion position of the assertion specification according to the target code verification strategy and the network security demand structured information, and inserting the assertion specification into the original network communication code according to the code insertion position to obtain a to-be-verified network communication code; and verifying the to-be-verified network communication code by using the target code verification tool according to the assertion specification to obtain a code verification result. According to the invention, the code level verification effect on the network communication code of the train operation control system is realized, the network security of the train operation control system is improved, and the possibility of occurrence of network potential safety hazards is reduced.

The invention relates to the technical field of communication internet, and discloses an intelligent network card starting method and device, equipment and a storage medium, and the method comprises the steps: responding to a received starting instruction for an intelligent network card, and obtaining the number of starting failures of the intelligent network card and a first safety verification password, input by a user, of the intelligent network card; second security verification passwords corresponding to the starting failure times are obtained, and when the starting failure times of the intelligent network card are different, the corresponding second security verification passwords are not completely the same; and starting the intelligent network card under the condition that the first security verification password is matched with the second security verification password corresponding to the starting failure times. And the network security of the intelligent network card is high.