2results about How to "Prevent execution" patented technology

This invention relates to an open extension system and method for graphical programming software, belonging to the field of computer software technology. The system includes: an extension repository, which uses an independently deployed remote service to store and manage approved third-party extension packages and maintain extension metadata mapping files; a client extension management module, which loads the metadata mapping files when the editor starts and initiates extension loading requests on demand in response to user operations; a dynamic loading and security sandbox module, which retrieves extension packages from the extension repository according to loading requests and loads them into a secure, isolated environment for execution; an application programming interface (API) module, which provides standardized API interfaces for third-party extensions; and an aspect-oriented injection engine, which dynamically weaves the functional logic of third-party extensions during editor runtime. This invention overcomes the limitations and closed nature of block-based extensions, achieving secure, efficient, and flexible extension of graphical programming software.

The invention provides a bidirectional detection protection method and system for industrial control instructions and data transmitted in the same channel. The method comprises the following steps: acquiring network communication flow between an upper computer and a numerical control system; separating a control instruction or service data from the network communication flow; determining the flow direction of the control instruction or the service data; if the flow direction is uplink, detecting the control instruction by adopting a first external intrusion detection strategy aiming at the control instruction, and detecting the service data by adopting a second external intrusion detection strategy aiming at the service data; if the flow direction is downlink, detecting the control instruction by adopting a first internal anomaly detection strategy aiming at the control instruction, and detecting the service data by adopting a second internal anomaly detection strategy aiming at the service data; and executing a corresponding response strategy according to a detection result. The accuracy and the real-time performance of detection are remarkably improved, and the system resource overhead and the false alarm rate are reduced.