73results about How to "Prevent breach" patented technology

Very low resistance, scaled in MOSFET devices are formed by employing thin silicidation-stop extension that act both as a silicidation “stop” barriers and as thin interface layers between source/drain silicide regions and channel region of the MOSFET. By acting as silicidation stops, the silicidation-stop extensions confine silicidation, and are not breached by source/drain silicide. This permits extremely thin, highly-doped silicidation-stop extensions to be formed between the silicide and the channel, providing an essentially ideal, low series resistance interface between the silicide an the channel. On an appropriately prepared substrate, a selective etching process is performed to expose the sides of the channel region (transistor body). A very thin layer of a silicidation-stop material, e.g., SiGe, is disposed in the etched away area, coating the exposed sides of the channel region. The silicidation-stop material is doped (highly) appropriately for the type of MOSFET being formed (n-channel or p-channel). The etched away areas are then filled with silicon, e.g., by an Si epi process. Silicidation is then performed (to form, e.g., CoSi₂) on the newly filled areas. The silicidation stop material constrains silicidation to the silicon fill material, but prevents silicide expansion past the silicidation stop material. Because the germanium (Ge) in SiGe is insoluble in CoSi₂, the SiGe acts as a barrier to silicidation, permitting silicidation to go to completion in the Si fill but stopping silicidation at the SiGe boundary when silicidation is performed at a temperature above a silicidation threshold temperature for Si, but below a silicidation threshold temperature for SiGe. This results in a very compact, well-defined lateral junction characterized by a thin layer of SiGe disposed between silicide lateral extensions and the sides of the channel region. Because of the thin, highly-doped SiGe layer between the channel and the silicide lateral extensions, the extension resistance is very low.

A method, computer-readable storage medium and computer system for controlling a storage system, the storage system comprising a plurality of logical storage volumes, the method comprising: monitoring, for each of the logical storage volumes, one or more load parameters; receiving, for each of the logical storage volumes, one or more load parameter threshold values; comparing, for each of the logical storage volumes, the first load parameter values of said logical storage volume with the corresponding one or more load parameter threshold values; in case at least one of the first load parameter values of one of the logical storage volumes violates the load parameter threshold value it is compared with, automatically executing a corrective action.

A peripheral illumination device for a vehicle component includes at least one light guide, and an enclosure for guiding the at least one light guide. The at least one light guide is securely mounted in the enclosure via a fixed support at a predefined location and has two ends which are movably mounted in relation to the enclosure.

The invention discloses a method, a system, a device and a terminal for processing secret keys, wherein the method for processing secret keys comprises the following steps: receiving a handover request message; acquiring a second secret key of a first network according to a first secret key and network parameters of the first network; and sending a handover request message containing the second secret key to a second network. By applying the embodiment of the invention to process the secret keys, when a UE is handed over among different access networks, secret keys of various access networks are ensured to be different before and after handover by inputting network parameters of the access networks in functions for educing the secret keys, thereby the same secret key is repeatedly used in the same kind of access networks, especially the problem that the same kind of access networks are also broken through as a certain access network is broken through when the access networks are handed over in a shorter period, and the network security of the access networks is improved.

The invention belongs to the technical field of network switching, and particularly relates to a mimicry thought-based security switching chip, an implementation method of the security switching chipand network switching equipment, and the method comprises the following steps: carrying out scheduling processing on message data of each port according to input scheduling; aiming at each piece of message data, extracting a message header and caching the message data; parsing through a heterogeneous parsing algorithm, and carrying out mimicry judgment on a parsing result; generating a message descriptor according to the judgment result, wherein the message descriptor at least comprises message feature information related to the message forwarding strategy behavior; searching for a mimicry table item verification-based table item cache to obtain forwarding strategy behavior data and updating a message descriptor; and extracting corresponding message data from the cached message data, and sending the extracted message data to a corresponding port in the form of a data packet. The security and reliability of the switch chip are enhanced by introducing such technologies as de-collaborative caching, mimic forwarding engines and mimic table item checking, and the method has important guiding significance for the development of the network switching technology.

The invention discloses a mimicry WAF construction method which is based on a mimicry defense thought and can actively defend against malicious attacks on a WAF. A dynamic selection module, a mimicryjudgment module, an isomer construction module and the like are designed to realize mimicry WAF construction, and isomerization processing is performed on a cloud server, a virtualized container, an operating system in the container, a WAF platform, an interception rule and the like, so that the WAF has an active defense capability. When the traffic passes through the dynamic selection module, themodule selects k WAF isomers for traffic processing, after the processing result is judged by the mimicry judgment module, a judgment result is used for modifying the abnormal rate of each isomer, when the abnormal rate of a certain isomer is higher than a certain value, offline self-cleaning operation is carried out on the isomer, and finally, when the judgment result is that the judgment is passed, the traffic is released, and when the judgment result is not passed, the traffic is forwarded to a subsequent processing module.

In one embodiment, a port cover for a system integrated into a structure for injection of a material into one or more cavities in the structure includes a base for coupling to the structure. The base includes one or more ports for injection of the material into the one or more cavities in the structure and one or more slots. The port cover also includes a cover for removably coupling to the base, the cover including one or more tabs each adapted to engage with a corresponding slot of the base. The cover also includes a locking mechanism for removably securing the cover to the base to prevent unauthorized access to the one or more ports. The locking mechanism is adapted to engage a projection of the base to removably secure the one or more tabs of the cover in engagement with the one or more corresponding slots of the base to removably secure the cover to the base to prevent unauthorized access to the one or more ports.

An improved mechanical shaft seal to give a tight seal between relatively rotating machine parts and prevent the escape of particulate material into the atmosphere or into the mechanical components of the housing under adverse operating conditions. The seal provides a grease chamber that prevents solid particles from reaching the main seal by migration within the mechanical shaft seal.

The invention relates to the network monitoring technology field, especially relates to a video monitoring system based on a cloud platform. The video monitoring system comprises a service bus, a user management module, a cloud server proxy module, a network management module, distributed type storage service, and an application program. The service bus is used to provide a connection pivot for message interaction among the various modules. The user management module is used to create a cloud server automatically for a newly registered or added user, and a camera is bond with the cloud server. The distributed type storage service is used to provide block storage service. The cloud service proxy module is used to download latest video files, and store the downloaded video files in a clouddisk based on an internal network or a special network. The network management module is used to provide the service port mapping of the video files, and the ports are limited to be only open to the access of the IP address of the application program, and the access of other IP addresses is forbidden, and in addition a virtual firewall is provided. The application program is used for the query ofthe videos. The problems of the network video monitoring such as easy illegal attacks on the address, low safety performance, difficulty in expanding storage space are solved, and the video monitoringsystem can be used for the network video monitoring technology field.

A self-sealed medical sterilization pouch comprises the following elements of: a first sheet being pervious to sterilization gases and surrounded by at least one printing domain thereon, a plurality of signs being disposed on the printing domain and located outside of a closed space, the first sheet having at least two sterile processing indicators having color response, one surface of an end of the first sheet having a flap; and a second sheet being impervious to sterilization gases, the second sheet having an opening and being joined with the first sheet by a first seal line, a second seal line and a third seal line at a left side, a right side and an upper side to form the closed space, the sterile processing indicators being disposed between the third seal line and a ladle-shaped end and the third seal line and another ladle-shaped end respectively.

The invention discloses a website security defense method. The method comprises the following steps: obtaining the number of website access requests in a preset time period corresponding to each region; comparing the website access request with a set website access request threshold value in a standard area, and determining an overvalue rate of the website access request; extracting an IP addresscorresponding to logging in the website in an area of which the overvalue rate is greater than a set standard overvalue rate; obtaining an access threshold of the website IP address; judging whether the real-time access frequency of each IP address in the area of which the overbalance rate is greater than the set standard overbalance rate is greater than the access threshold of the website IP address or not; and carrying out flow limiting processing on the IP address of which the actual access frequency is greater than the access threshold of the website IP address, otherwise, counting the access time and the access number of the IP address in the prediction time period, and recording and storing the access time and the access number. The access frequency of the IP address is limited, theaccess threshold value is reduced, the access frequency of the IP address is reduced, the website is prevented from being attacked, and the defense capability of the website is improved.

The invention discloses an earthquake-induced landslide lake rescuing drainage device and an implementation method. The drainage device comprises a water inlet, a check valve, a check valve rubber gasket, a check valve rotating shaft, a water outlet, a valve, a valve rubber gasket, a valve rotating shaft, a valve clamping part, a valve clamping part rotating shaft, a telescopic pipe, a spiral telescopic bracket, a light high-strength and waterproof fabric, a female flange, a bump, a notch, a male flange, a screw rotating shaft, a thumb screw, a screw rod, a water filling nozzle and a water filling nozzle switch. The earthquake-induced landslide lake rescuing drainage device disclosed by the invention is composed of siphon parts which are telescopic and are easy to disassemble and assemble; and the drainage device is light in weight, high in strength and convenient for rescue workers to carry or for a helicopter to deliver. The rescue workers can conduct a drainage operation on a landslide lake which is formed by earthquake-induced landslide before large excavating machineries arrive, so as to reduce a water level and to avoid burst of the landslide lake as well as to provide time guarantee for the large excavating machineries, which arrive later, to excavate the landslide lake.

The present disclosure envisages enforcing micro-segmentation policies on a user computer that intermittently migrates between a secured enterprise network and an unsecured network, for instance, a public network. The present disclosure envisages switching between appropriate micro-segmentation policies, in-line with the change in the current location of the user device, the change triggered by the user device migrating from the enterprise network to an unsecured network or vice-versa. The present disclosure envisages selectively enforcing micro-segmentation policies upon a user device based on the current location thereof, such that the micro-segmentation policies and the corresponding access permissions assigned to the user device differ in line with the current location of the user device, thereby exposing sensitive enterprise resources, forming a part of the enterprise network, in a selective and restricted manner, in line with the micro-segmentation policies enforced upon the user device based primarily on the current location of the user device.