96results about How to "Prevent malicious attacks" patented technology

The invention provides an expandable block chain identity authentication method and system for a distributed resource aggregation scene, and relates to the technical field of block chain identity authentication, and the method comprises the steps: receiving a user identity authentication request, generating an identity identification string through a distributed Hash algorithm, and selecting a verification node cluster to deploy a smart contract; each verification node executes the smart contract to verify the identity identification string, constructs an access authority control strategy and generates an authentication block; and when the number of the blocks reaches a preset threshold value, selecting a newly added verification node based on the terminal equipment information, deploying an intelligent contract, and realizing distributed storage through the verification node cluster broadcast authentication blocks. According to the invention, the expandability of identity authentication is improved, the dynamic expansion of the verification node is realized, and the reliable storage and efficient propagation of the authentication information are ensured.

The invention relates to an HTTP (Hyper Text Transport Protocol) short message gateway processing method and device, equipment and a storage medium. The method comprises the following steps: firstly, carrying out multi-dimensional verification on a short message sending request, and then, carrying out auditing and template matching on short message contents. And based on an audit result, considering multiple factors to select an optimal sending channel. Distributing priorities for the short messages according to user characteristics and system states, and putting the short messages into a multi-level feedback queue; and based on the type of the short message, selecting a channel and a user package to carry out charging and quota control. The short message information is stored in a distributed cache system, a sending task is processed through an asynchronous processing queue and a working thread pool, a failover and intelligent retry mechanism is implemented, and efficient and reliable short message sending is ensured. According to the HTTP short message gateway processing scheme, a large number of concurrent requests can be efficiently processed, the sending channel is intelligently selected, the sending priority is flexibly controlled, charging is accurate, and the HTTP short message gateway processing scheme has the fault transfer capability.

The invention relates to the technical field of network security, in particular to a method and device for detecting illegal external connection of a terminal and a storage medium, and the method comprises the steps: obtaining all terminal equipment connected with a local area network, distinguishing authorized terminal equipment and unauthorized terminal equipment through authorization detection, and carrying out the risk grading of the authorized terminal equipment; the method comprises the following steps: generating an external connection behavior data set by combining client monitoring data, network layer monitoring data and intranet detection data, extracting key information such as an external connection target, access time, a protocol type and a port number, and dividing into pure intranet connection equipment, normal external connection equipment and unknown external connection equipment according to external connection permissions; inputting the log data of the unknown external connection equipment into the log anomaly detection model based on the Transform architecture, identifying an abnormal event, and calculating a log risk score; and if the log risk score exceeds a preset threshold, determining that the device is an illegal external connection device. According to the method, accurate detection of illegal external connection behaviors is realized, and the safety performance of a monitoring system is remarkably improved.

The invention provides an intelligent cold station control system based on machine learning, which relates to the technical field of energy and power engineering and is divided into an infrastructure part and an intelligent auxiliary part, the infrastructure part comprises a data acquisition subsystem, a data analysis and preprocessing subsystem, a machine learning model training subsystem, an intelligent control strategy generation subsystem, a real-time monitoring subsystem, a fault diagnosis and early warning subsystem, a man-machine interaction subsystem, an energy management subsystem and a communication subsystem. The intelligent auxiliary part comprises a self-adaptive optimization subsystem, a load prediction subsystem, an equipment health assessment subsystem, an intelligent cooperation subsystem, a virtual simulation subsystem, a green energy access subsystem and a safety protection subsystem, and the energy management subsystem generates output of the subsystems according to an intelligent control strategy and performs optimization management on energy consumption of the cold station. Through precise load prediction, intelligent control strategy generation and energy management optimization, the energy consumption of the cold station is reduced, and energy-saving operation is realized.

The invention relates to the technical field of communication data inspection, solves the technical problem of lack of safety in the data transmission and processing process in the traditional technology, and particularly relates to a data consistency inspection method and system for intelligent ship sailing credible decision of an inland ship. The method specifically comprises five parts: zero-trust identity verification and access control, data encryption and communication security, time synchronization and verification mechanism, redundancy check and fusion of multi-source data, and multi-ship trust degree dynamic evaluation based on a consistency check result. According to the invention, each data interaction between the ship and the shore base, between the ships and between the ship and the environment is subjected to identity verification and safety examination. And in combination with time synchronization, multi-source data fusion, redundancy check, anomaly detection and the like, the data consistency and credibility of the navigation decision are ensured, and the navigation safety of the inland ship and the anti-attack ability of the system are remarkably improved.

The invention discloses a chip test mode protection circuit and a control method thereof, the chip test mode protection circuit comprises a pin switching safety circuit, a pin switching module, a test mode module and a normal function mode module, in the test mode, a first pin of a chip inputs a clock signal TCLK, a second pin of the chip inputs a specific sequence signal TDI, and the first pin of the chip is connected with the pin switching safety circuit; the pin switching safety circuit matches an input specific sequence signal TDI with a pre-stored sequence signal stored in the pin switching safety circuit, and if matching succeeds, the pin switching module is controlled to switch connection between the test mode module and the first pin and connection between the normal function mode module and the second pin of the chip and between the test mode module and the normal function mode module and connection between the normal function mode module and the second pin of the chip. According to the invention, it can be ensured that a test mode can be safely entered without additionally adding chip pins, and the test mode cannot be entered during normal work.

The invention belongs to the technical field of network security detection, and discloses an industrial network security intelligent detection system, which comprises the following steps of: summarizing log data in an industrial control network, and auditing user behaviors and security events; establishing an intrusion blacklist model, detecting an access behavior in real time, and identifying an attack behavior based on a white list rule; and recording detailed information of the attack behavior, and giving an alarm according to a severity rule. By comprehensively analyzing the log data in the industrial network, deep analysis of the network content is realized, and the compliance of the operation content and the access behavior can be effectively evaluated; meanwhile, the user behavior characteristics are extracted from the operation log, a set of behavior baselines is constructed, the user behaviors can be monitored in real time, abnormal behaviors can be found and marked in time, the identification capability of potential security threats is remarkably improved, and a powerful guarantee is provided for maintaining stable operation of an industrial network.

The invention provides an identity authentication method based on a national cryptographic algorithm, and relates to the technical field of identity authentication, and the method comprises the steps: carrying out the first verification through the national cryptographic algorithm in response to the first input of a user; the first verification comprises user name and password verification; obtaining user first information, equipment information and position information through the first verification; obtaining a login risk score of the user according to the first verification, the equipment information and the position information, and determining whether to enter multi-level authentication or not according to the login risk score; monitoring each link in the authentication process in real time, and recording log information; determining abnormal authentication according to the log information; according to the abnormal authentication, carrying out early warning and determining a locking time length; by integrating an advanced cryptography technology and an intelligent authentication strategy, the security of online services and the user experience are effectively improved, hostile attacks are prevented, and excessive limitation on legal users is also avoided.

The invention discloses an APP interface security verification method and system in an iOS mixed mode, and the method comprises the steps: enabling an APP to initiate a request to a server side, obtaining a current security verification code and validity period information, and storing the security verification code and the validity period information in a data storage region of the APP; intercepting a native network request and a WebView network request of the APP to obtain a first network request; obtaining a security check code in a data storage area of the APP, and checking the rule to generate a security check parameter; modifying an interface domain name in the first network request, and respectively adding the security verification parameter to the corresponding first network request to obtain a second network request containing an encryption parameter; performing security verification on the second network request at the server side according to the verification rule, and returning a verification result to the APP; and executing corresponding operation according to the verification result. The invention relates to the technical field of safety verification, and solves the problem of potential safety hazards of an interface under a mixed mode architecture.

The invention discloses a traditional Chinese medicine analysis and identification system, method, equipment and medium based on a large model, and the system comprises a data collection module which is used for collecting multi-dimensional data of traditional Chinese medicines, a data preprocessing module which is used for carrying out the cleaning, standardization processing and feature extraction of the collected data, and a data analysis module. The data processing module is used for analyzing and processing received data by utilizing a pre-trained deep large model, the result output module is used for outputting an analysis result to a user in a visual manner, and the analysis result output module comprises a visual chart, a detailed report form and an intelligent feedback module according to the feedback of the user on the analysis result and the actual application condition. Through multi-dimensional data acquisition, advanced preprocessing, deep large model analysis and the like, the practicability is improved by modules of accurate identification, intelligent feedback, collaborative analysis and the like of the traditional Chinese medicine, data updating and the like ensure that the system advances with the times, powerful technical support is provided for industrial development of the traditional Chinese medicine, and the quality and safety of the traditional Chinese medicine are guaranteed.

The invention provides a constellation software batch automatic upgrading method and system based on a laser link. Firstly, a ground control center generates a plurality of reconstruction packets, and the reconstruction packets are sequentially sent to a low-orbit earth satellite through a high-bandwidth microwave communication channel. Then, after the satellite receives the reconstructed packets, the correct reconstructed packets are reserved, and data increment packets are extracted at the same time; after the database receives the information that the satellite completes reconstruction, other satellites with software version numbers lower than those of the satellites in the constellation network to which the satellites belong are counted immediately, and the models of the satellites are transmitted to the satellites. And the satellite divides the incremental packet into a plurality of small packets, and after forward error correction coding and numbering processing, the small packets are multiplexed by using a DVB-S2 protocol and transmitted to a target satellite through an optimal laser link. The target satellite restores the complete incremental package, software updating is carried out in the dynamically determined idle time period, meanwhile, unified updating of ground database configuration is carried out, and therefore efficient and reliable batch upgrading is achieved.

The embodiment of the invention relates to the technical field of password security, and provides a password guessing method and device, electronic equipment and a medium, and the method comprises the steps: obtaining a to-be-guessed target password; guessing a target position where the target password may have character transformation through a password language model of a self-attention mechanism; and replacing the characters at the target position based on a plurality of character replacement rules learned by the password language model of the self-attention mechanism in a training process to obtain a guess password data set. Therefore, password guessing and rule extraction are carried out based on password analysis, the obtained guessed password can effectively simulate conversion of a user on the password, meanwhile, character and structure distribution of the password can be effectively learned, and the accuracy and the coverage rate of the guessed password are improved.

The invention discloses a short multimedia message sending method, a short multimedia message sending system, a medium and a product, and relates to the field of information transmission. Selecting short and multimedia message sending channels of which the real-time load rates are lower than a preset load rate threshold value from the plurality of short and multimedia message sending channels as candidate channels; determining a short multimedia message feature data set according to the short multimedia message sending request; determining channel feature data according to the candidate channels; inputting the short multimedia message feature data set and the channel feature data into a preset sending failure probability prediction model to obtain a sending failure probability; when the sending failure probability exceeds a preset probability threshold value, sending the short multimedia message to the receiver through the standby channel; and when the sending failure probability is lower than a preset probability threshold, sending the short multimedia message to the receiver through the candidate channel. By implementing the method, the success rate of sending the short multimedia message can be improved.

The invention discloses a method for flexibly configuring terminal equipment by a server based on PCIe Switch, which comprises the following steps of: adding labels in a Switch mfg configuration page, marking information of each label, then enumerating PCIe equipment after firmware initialization, and finally attaching special information ChassisPhysslot Num to each station. The method comprises the following steps: after a BIOS (Basic Input Output System) is initially electrified, enumerating equipment, classifying Switch Bridge, PCIe equipment under the Bridge and endpoint equipment directly hung under Host, reporting information related to PCIe to a BMC (Baseboard Management Controller) through an IPMI (Intelligent Platform Management Interface), analyzing the information after the BMC receives the information, and transmitting the analyzed information to a Web UI (User Interface) or Redfish. According to the method, multiple working modes of Switch are supported, the firmware file can be signed, and hostile attacks are prevented.

The present invention proposes a bidirectional source address verification device, which belongs to the field of network communication technology. The device adopts a layered design method of the data plane and the control plane to realize the mutual cooperation of inter-layer functions; the bidirectional source address verification device includes a bidirectional source address verification engine and a classification module of the data plane, a hash summary generator of the control plane, and a bidirectional source address verification information database. The bidirectional source address verification engine is used to realize the extraction of five-tuple information of the data packet and the source address verification function; the classification module is used to realize message classification; the hash summary generator selects a suitable hash function to generate a unique hash summary from the five-tuple information; the bidirectional source address verification information database stores the hash summary, and sets the life cycle of different types of message information to realize hash summary life cycle management. By saving and comparing the information of the request message, the message performs source address verification, which can realize bidirectional verification of the source address, avoid malicious attacks, and help improve network security.

The invention belongs to the field of security in a multi-core system chip, and discloses a security bus architecture for a multi-core Chiplet chip system, which comprises five parts, namely an active intermediate layer, a functional chip, a storage chip, a Core chip and a security chiplet, and is characterized in that the Core chip comprises a CPU core of the chip system; the storage chip comprises a memory for storing data and codes; the functional chip comprises most peripherals and functional IPs; the active interposer is used for connecting all the chiplets and realizing access control of each chiplet, and the security chiplet is used for managing and controlling security configuration of the whole chip system. When a chiplet provided by a supplier cannot be trusted, the secure bus architecture can isolate and restrict access to non-secure chiplets. A bus architecture is realized in a secure active interposer, and the access authority of each small chip in a chip system is configured by a secure small chip, so that the data access of other small chips can be ensured to be controlled, and the system security is enhanced.

The invention relates to a security mode command transmission method and device, electronic equipment, a chip and a medium, and the method comprises the steps: receiving a 5G system non-access layer 5GS NAS message transmitted by network equipment, and the 5GS NAS message carries a security mode command; the initiation purpose of the security mode command is distinguished by combining the security header type of the 5GS NAS message; the security header type comprises integrity protection and encryption; wherein the partial security mode command is subjected to integrity protection and encryption, so that the security of the partial security mode command can be improved, the partial security mode command is prevented from being maliciously attacked, and the security of the NAS message is improved.

The application is a kind of automation testing and application fluency testing method based on control matching, relating to the field of Android end automation testing.The application method comprises: setting a test script containing behavior simulation and fluency determination in advance, reading the corresponding test script after the Android end receives a test command; acquiring interface control structure positioning target control, executing simulation operation; starting timing after each simulation operation, and acquiring all control elements of the current interface when reaching the set time threshold, judging whether the interface is loaded or not in combination with the interface structure information recorded in the fluency determination script; obtaining application fluency determination result according to the interface loading condition at different time thresholds and returning to the server end.The application does not need to acquire ROOT permission, does not need to connect PC end for testing, is safer, is more convenient to use, reduces the adaptation cost, and is higher in testing accuracy and testing speed.

The invention relates to a website data security protection system based on a block chain. The system comprises an access verification module used for verifying a data access request initiated by a user terminal at a proxy re-encryption node based on a distributed account book and an intelligent contract of a block chain to obtain a verification result; the data acquisition module is used for acquiring encrypted website data corresponding to the data access request when the verification result meets a preset condition; the data processing module is used for re-encrypting the encrypted website data through a proxy re-encryption algorithm based on the data access request to obtain new ciphertext data; and the data sending module is used for sending the new ciphertext data to the user terminal, and the data is decrypted based on the user private key to obtain the original website data. According to the system, by utilizing the block chain and proxy re-encryption, the potential safety hazard of a traditional centralized authentication system is avoided, the security of data can be guaranteed, and the transparency and credibility of data access are improved at the same time.

The invention relates to the technical field of network security, and discloses a man-machine attack behavior classification method and device and a network security protection method, and the man-machine attack behavior classification method comprises the steps: obtaining man-machine attack behavior data; performing feature extraction on the man-machine attack behavior data, and constructing a classification rule based on the extracted features; updating the constructed classification rule to a cloud rule base; and performing rule matching on to-be-classified man-machine attack behavior data by using the updated cloud rule library, and outputting a classification result. According to the method, multi-dimensional information of attack behaviors is captured through feature extraction, and interpretable classification rules with high adaptability are constructed. Dynamic updating and rapid synchronization are achieved through the cloud rule base, novel attacks are coped in time, the newest rule is used during matching, the false alarm rate is reduced, the classification accuracy is improved, and reliable support is provided for network security protection.

The application provides a railway track traffic control management method and system, and relates to the technical field of railway track traffic control.The method comprises the following steps: establishing a time synchronization network based on a railway NTP protocol; using a colored Petri net model to perform vulnerability state reachability analysis on an NTP protocol authentication process based on a trusted certificate, and judging whether the current protocol has vulnerability; determining a first dynamic key and a second dynamic key according to key parameters of the NTP protocol authentication process; performing verification according to the first dynamic key and the second dynamic key; if the verification is passed, correcting a synchronization time signal; generating a synchronization timestamp for a target train; collecting real-time running parameters; determining a tracking interval time; and generating and issuing a control instruction.According to the application, the running state of the train can be controlled according to the communication security state and the tracking interval time, and the reliability of the real-time running parameters in time and the line utilization rate of the train are improved.

The invention provides a vehicle-mounted sensor network system based on a ZIGbee technology and a data transmission method, the system comprises a sensor node, a ZIGbee node, a ZIGbee coordinator and a ZIGbee gateway, sensors form a mesh topology structure based on the zigbee technology, internal and external network isolation is performed, the expansibility of the vehicle-mounted sensor is improved, and the data transmission efficiency of the vehicle-mounted sensor is improved. The accuracy of the vehicle state is improved, and the problems that a can bus can only be connected with 110 nodes at most and only supports a bus topological structure, and fault diagnosis and isolation are difficult are solved.

The invention relates to the technical field of big data, and provides a data security management platform and a business data processing method and device. Wherein a security group strategy management module in the data security management platform is used for configuring a security group rule of a cloud server, receiving a service request data stream sent by a client, and sending the service request data stream to a multi-level security defense module in the platform under the condition that the service request data stream is subjected to security detection; and the multi-level security defense module performs multi-level security detection on the service request data stream, and sends the filtered target service request data stream to the service processing module under the condition that the service request data stream is subjected to multi-level detection and data filtering is completed, so that the service processing module executes corresponding service processing operation. And the service processing result is fed back to the client through the multi-level security defense module and the security group strategy management module in sequence. By adopting the platform, the data security can be improved.

The application discloses a code updating method and device of firmware and electronic equipment. The method comprises the following steps: obtaining a target code package from a first cache area, wherein the first cache area is an area obtained by dividing a storage area of a controller; determining a first position of firmware original code in the first area and a second position corresponding to the first position in a second area; updating the firmware original code in the second area corresponding to the second position based on the target code package; in the case that the firmware original code in the second area is updated, switching to the second position of the second area to continue running and updating the firmware original code in the first area; and in the case that the firmware original code in the first area is updated, switching back to the first area to continue running according to the corresponding position. The application solves the technical problem of low updating reliability when updating the code of the firmware in the related art.

The invention discloses a switch port management method of a vehicle-mounted Ethernet. The method comprises the following steps: determining an Ethernet topology; the Ethernet topology comprises a main interaction domain controller with a switch and a small controller interacting with the domain controller; mAC addresses are distributed to a main interaction domain controller and a small controller, and a specific port number is distributed to the corresponding controller according to the connection requirement of each controller; planning an IP address space, and determining an IP address corresponding to each controller; firewall setting is enhanced for the controller related to interaction with the outside, and an inbound and outbound rule is configured. According to the invention, port management is adopted, and network flow is divided and isolated through physical ports, so that the network configuration is simplified, the complexity of a network architecture is reduced, and the cost is reduced; and by enhancing firewall setting and setting an inbound rule and an outbound rule, data packets entering and exiting the network are monitored and filtered, illegal access and unauthorized traffic transmission are limited, the security of the network is improved, and the risk that fine access control and traffic isolation cannot be provided is made up.

The invention relates to the technical field of medical big data, in particular to a kettle micro-service-based medical big data unified interface management method, which comprises the following steps of 1, data acquisition: acquiring medical data from each data source through kettle micro-service, and storing the medical data in a data warehouse; step 2, data cleaning: cleaning and converting the collected data, removing repeated data, correcting wrong data, converting data formats and the like so as to ensure the quality and consistency of the data; and step 3, data modeling: according to business requirements, modeling and analyzing the cleaned data, and establishing a logic model and a physical model of the data warehouse. According to the method, the interface development efficiency is improved, the data interface can be quickly developed and deployed by using the kettle micro-service, and the interface development efficiency is greatly improved. By establishing a unified data interface management platform, centralized management and maintenance can be carried out on the data interfaces, and the maintenance cost of the interfaces is reduced.

The application discloses a method for verifying a Fabric complex endorsement strategy in cross-chain, wherein the Fabric blockchain first registers an MSP list, a chain code ID and an endorsement strategy description into a cross-chain network, transmits a generated cross-chain transaction to a relay chain, then the relay chain analyzes a transaction execution result and a set of endorsement node signatures, generates an endorsement strategy interpreter, and confirms that the transaction execution result is consistent with the chain code ID registered in the cross-chain network, and if not, the verification fails, and finally the endorsement strategy interpreter verifies the set of signatures. The application can verify a complex endorsement strategy customized by a user, is friendly to a user of the Fabric network, does not need to write a verification strategy by itself, and only needs to submit an endorsement strategy description, and can prevent a user from performing malicious attacks through different chain codes.

The present invention relates to the field of navigation information technology, and in particular to a Beidou navigation device cluster timing method. The method comprises the following steps: starting a navigation device in a Beidou navigation device cluster, placing it in a standby state, and detecting a spread spectrum signal to determine whether a timing broadcast signal exists; if a spread spectrum signal is detected, controlling the navigation device to capture the spread spectrum signal to obtain the spread spectrum signal; demodulating the spread spectrum signal to obtain the signal content, wherein the signal content includes timing information and telegram content; extracting time information from the signal content to obtain time information, and performing time synchronization operations on each navigation device in the Beidou navigation device cluster according to the time information. Based on the high-precision ranging characteristics of the spread spectrum signal and utilizing the spread spectrum signal processing capability of the existing navigation receiver, the present invention provides a safe, reliable, higher-precision solution that is fully compatible with the existing Beidou navigation receiver hardware and software.

The present invention relates to an anti-crawler method and system combining WASM with data encryption. The method comprises the following steps: initializing a WASM bytecode cache pool, the WASM bytecode cache pool generates a random number through the SecureRandom class of Java and inputs it into the WASM bytecode cache pool, and then generates a key through the AES algorithm based on the random number in the WASM bytecode cache pool; dynamically generating JAVA code containing decryption logic, and embedding the key into the code in the form of an array; translating the dynamically generated JAVA code to generate WASM decryption bytecode, and saving the WASM decryption bytecode and the key together in the WASM cache pool; before a webpage backend service returns request data, obtaining a key and a corresponding WASM decryption bytecode from the cache pool, encrypting the data using the key, and then returning the ciphertext data and the WASM decryption bytecode.