38 results about "Attack device" patented technology

The invention discloses an Internet of Things malicious traffic detection method and device and a storage medium, and the method comprises the following steps: S1, collecting malicious traffic data of Internet of Things equipment, and classifying and constructing a malicious traffic sample library; s2, converting the malicious traffic data into a grayscale image by adopting a text imaging method, and performing normalization, noise reduction and feature enhancement; s3, extracting local binary pattern features, global image features and high-order local automatic correction features, and constructing a malicious traffic feature database; s4, training the malicious traffic detection model by adopting a space-time capsule Transform, extracting space and time features, and performing classification training; s5, collecting real-time traffic data, calculating an abnormal score by using the trained model, and judging a traffic category; and S6, sending a detection result to a command and control server, triggering an alarm, and sending a blocking or isolating instruction to the attacked device. The method improves the accuracy and real-time performance of malicious traffic detection, and is suitable for security monitoring and protection of the Internet of Things.

The invention discloses a Teensy virus identification and protection method for a mobile hard disk, and relates to the technical field of virus identification and protection.The method effectively identifies high-simulation attack equipment through composite equipment fingerprint construction and combination of hardware ripple features and dynamic protocol response, and breaks through the limitation of traditional single feature detection; meanwhile, the protocol state transition probability model adopts hidden Markov chain real-time analysis, microsecond-level protocol switching abnormity is accurately captured, and the problem of missing detection caused by rough time granularity of an existing scheme is solved; in addition, a window context instruction association mechanism binds a system focus state with an HID operation, and blocks a hidden attack chain formed by legal instruction combination; the hierarchical fusing strategy fuses protocol endpoint control and physical layer isolation, so that the availability of a storage function is ensured, meanwhile, attack blocking is realized, and the situation that normal use is influenced due to full-port forbidding in a traditional scheme is avoided.

The present invention discloses a distributed energy storage system based on the Internet of Things, which relates to the technical field of distributed energy storage. A first acquisition module is used to acquire device information of a distributed energy storage power station based on the Internet of Things. A first establishment module is connected to the acquisition module and is used to obtain protected object devices based on the device information. A second establishment module is connected to the first establishment module and is used to establish a system security defense network for the distributed energy storage power station. A second acquisition module is connected to the second establishment module and is used to acquire real-time status information of the security defense network and the unit defense network based on an associated channel. A processing module is connected to the second acquisition module and is used to acquire attacked devices based on defense information. The present invention reduces the possibility of devices being attacked and damaged, ensures the safety of the energy storage power station, can achieve timely risk avoidance, and greatly improves the safety management of the devices of the energy storage power station.

The embodiment of the invention discloses a jailbreak prompt word generation model training method and device and a jailbreak attack method and device. According to the training method, the training data is automatically generated through prison break attack recognition detection, dependence on manual annotation is reduced, training cost is reduced, and meanwhile training efficiency is improved. Besides, the training method performs self-optimization in each detection and feedback by simulating an attack-detection-feedback closed-loop mechanism and combining a self-supervised learning strategy, so that the prison break cue word generation model can update a prison break strategy in real time and dynamically adapt to novel attacks. The jailbreak prompt word generation model training device, the jailbreak attack method and the jailbreak attack device in the embodiment of the specification also have the above beneficial effects.

The invention relates to the technical field of nut production, in particular to an off-machine tapping device and process for nut production, which comprises a tapping assembly, an electric guide rail arranged on one side of the tapping assembly, a tapping machine arranged at the output end of the electric guide rail, a trapezoidal plate arranged at the bottom of the tapping machine, and three groups of driving parts arranged on the inner side of the tapping assembly, the output end of each driving part is connected with a conduction part, each conduction part is slidably connected with a clamping plate, the top of each conduction part is provided with a transmission plate, and the inner side of each clamping plate is provided with a to-be-tapped part; in the process that the electric guide rail drives the tapping machine to move downwards, the tapping machine is matched with the trapezoidal plate to extrude the transmission plate, and the transmission plate is matched with the transverse moving plate to transmit force generated when the electric guide rail drives the tapping machine to move downwards to the longitudinal part. And the longitudinal part is matched with the inclined surface of the clamping plate to amplify the downward moving force of the tapping machine and reduce the transverse moving distance of the clamping plate to clamp the to-be-tapped part.

Described herein, according to various aspects, are unmanned aerial systems (UAS) that can carry multiple layered modules on a mission. An exemplary UAS may include layered modules that contain functional components such as communication relay modules, armor, batteries, charging modules, propulsion modules, GPS modules, sensor modules, processors, databases, lights, explosive devices, electronic attack devices, payloads, flotation and / or buoyancy control devices, etc. The layered modules can be easily added and / or removed, which allows the UAS to be reconfigured to perform different missions without significantly modifying the structure of the UAS. The layered modules can be deployed at specific locations along a flight path of the UAS to perform location-dependent functionalities (e.g., surveillance of a target region). Multiple layered modules can be coupled to expand upon the payload capacity and the functionality of the UAS. Such an UAS can thus provide a versatile, multifunctional vessel for performing different autonomous missions for military and commercial applications.

The invention discloses a method and a device for updating a network attack path diagram, terminal equipment and a storage medium, and belongs to the field of information security, and the method is the method for updating the network attack path diagram. Therefore, more comprehensive path coverage is realized; and the potential target attack path is automatically generated according to the connection relationship between the threat node and each path node in the network attack path graph, so that the path searching efficiency is improved, and the query omission of the potential attack path can be reduced. Therefore, the updating efficiency of the network attack path diagram can be improved, the path related to the attack behavior can be updated more accurately and comprehensively, and delay and omission of manual troubleshooting are avoided. By implementing the invention, the problems of incomplete path coverage and low updating efficiency of the network attack path diagram in the prior art can be solved.

The present invention relates to a CAN bus intrusion prevention circuit and method. The circuit includes a microprocessor (MCU), NPN transistors Q1, Q2, and Q3, coupling capacitors C1 and C2, current-limiting resistors R3, R4, R5, R6, R7, R8, R9, and R10, a 3.5V voltage-stabilizing diode D2, a 2.5V voltage-stabilizing diode D3, and a 1.5V voltage-stabilizing diode D4. The microprocessor MCU has a board-level communication interface O1 for receiving instructions to activate an intrusion prevention function, and a PWM pin for outputting a PWM signal. The PWM signal has a frequency that is ten times or more greater than the baud rate of the connected CAN bus, a high level of not less than 3.3V, and a duty cycle of not less than 0.9. Based on the characteristics of the CAN link layer protocol, the present invention can immediately initiate intrusion prevention upon detecting abnormal CAN bus data, thereby actively shielding illegal or hijacked attacking devices and protecting bus security.

The present invention relates to a target attack device and a swarm control system comprising same. The target attack device may comprise: a main body; a mounting unit, which is disposed on one side of the main body and accommodates an explosive member; a memory, which is embedded in the main body and stores at least one instruction; and at least one processor, which is embedded in the main body and executes the at least one instruction.

The utility model discloses an unmanned plane fire attack device, including unmanned plane and install in the ammunition mounting and release mechanism of unmanned plane bottom, ammunition mounting and release mechanism includes the pod, and the storehouse of pod installs the hanging board, is installed on the rudder machine of hanging board, and the executive end of rudder machine is installed and inserts through the side wall of pod one side and with the rotation of side wall links to each other the follow -up cover, and the end of follow -up cover forms the boss of the diameter that gradually contracts from inside to outside, and is provided with the lock catch of one end along the radial outward extension of follow -up cover in the end of boss, ammunition is along the length direction of pod and is hung in the pod through the bandage, and one end of bandage is fixed with one side of hanging board, and the other side is provided with the snap ring, and the snap ring is hung on the boss, when the lock catch of follow -up cover end is realized to the ammunition's hanging of rudder machine rotation drive to the above, when the lock catch of follow -up cover end is realized to the ammunition's release of rudder machine rotation drive, and the snap ring is slipped off from the boss, and the whole body structure is simple and convenient operation.

Devices, systems, and methods of detecting a vishing attack, in which an attacker provides to a victim step-by-step over-the-phone instructions that command the victim to log-in to his bank account and to perform a dictated banking transaction. The system monitors transactions, online operations, user interactions, gestures performed via input units, speed and timing of data entry, and user engagement with User Interface elements. The system detects that the operations performed by the victim, follow a pre-defined playbook of a vishing attack. The system detects that the victim operates under duress or under dictated instructions, as exhibited in irregular doodling activity, data entry rhythm, typographical error introduction rhythm, unique posture of the user, alternating pattern of listening to phone instructions and performing online operations via a computer, and device orientation changes or spatial changes that characterize a device being used to perform an online transaction while also talking on the phone.

The invention discloses a malicious suffix construction method, a controllable jailbreak attack method and a controllable jailbreak attack device, the method designs a jailbreak attack framework in a diffusion model SD, and the jailbreak attack method is operated from a text mode and an image mode. A transferable malicious suffix not containing sensitive words is learned in a text mode, a cosine loss function is used, the malicious suffix is close to malicious prompt semantics containing explicit sensitive words in an encoder layer, and after the learned malicious suffix is added to a jailbreak object prompted by an input text, the jailbreak object is prompted by the text. And converting the harmless prompt into a sensitive image generation instruction. And in an image mode, through a designed security checker loss and text consistent loss function, carrying out back propagation gradient optimization on the input original image to be edited, so that the generated image passes through the check of the security checker, and an image containing NSFW content is generated. According to the method, the security limitation of a security checker can be bypassed, the jail break attack is realized, the security vulnerabilities existing in the current text graph model are revealed, and the security protection measures of the model are evaluated.

The invention discloses an attack and defense simulation method and device for a power system and electronic equipment, and the method comprises the steps: constructing a three-dimensional simulation scene corresponding to the power system, and determining a target power transmission line model in all power transmission line models of the three-dimensional simulation scene; adding an unmanned aerial vehicle model in a preset range of the three-dimensional simulation scene, and determining an azimuth angle and spatio-temporal trajectory data of the unmanned aerial vehicle model flying towards the target power transmission line model according to the initial coordinate of the unmanned aerial vehicle model and the central point coordinate of the target power transmission line model; when the unmanned aerial vehicle model is controlled to fly above the target power transmission line model according to the azimuth angle and the spatial-temporal trajectory data, simulating the operation of projecting an attack instrument model by using the unmanned aerial vehicle model and attacking the target power transmission line model through the attack instrument model; and a three-dimensional simulation scene of the power system attacked by the attack instrument model is obtained, so that a user can intuitively and stereoscopically obtain an attack and defense simulation process of the power system.

In a network system in which a server receives packets each including a source address, and in which the server ordinarily responds to each packet, Distributed Denial of Service attacks may be launched by malicious actors controlling a plurality of network devices. In such an attack, the attacking devices may spoof the IP address of a legitimate device, e.g., they may include, in each packet, the source address of the legitimate device. As such, systems and methods for increased security using client address manipulation are provided.

The utility model discloses a handheld low altitude unmanned aerial vehicle detection strike equipment, it includes fuselage and mounting mechanism, the bottom fixed mounting of fuselage has installation barrel, mounting mechanism includes the inner ring fixedly installed in installation barrel, and the detection equipment is installed in the installation barrel, is equipped with a plurality of chutes on the detection equipment, and the rectangular block of sliding connection with the inner wall sliding of chute is connected in the chute, and the rectangular block penetrates the inner ring and is connected with its sliding, and the outer ring of sliding connection with the inner ring is set up in the installation barrel, and a plurality of inclined blocks are fixedly installed on the outer ring, and the inclined block is set up with rectangular block one to one, and the inclined surface of inclined block and the inclined surface of rectangular block slide and abut, the cooperation between this equipment utilizes the outer ring, the inner ring, rectangular block, inclined block and fixed column, has improved the installation efficiency of detection equipment, has guaranteed the stability of detection equipment installation simultaneously.

Apparatuses and methods for mitigating speculative based attacks on a processor are disclosed. In one example of the disclosed technology, an apparatus includes a processor, the apparatus having a memory positioned to store profiler data to measure at least one performance criterion for an instruction stream executed by the processor, and having control logic configured to select one of a plurality of mitigation schemes to mitigate a speculative based attack on the apparatus based on the measured performance criterion. The apparatus can include a remediation unit that can prevent a speculative side effect by implementing a delay scheme, a redo scheme, or a rollback scheme, which prevents side effect data generated by a mis-speculative instruction from becoming visible to an attacker.

The application provides a kind of Internet of Things botnet DDoS attack defense method, device and storage medium, it is related to Internet of Things technical field, by the conversion relationship between sleeping device, normal device, latent device and attack device is constructed botnet DDoS attack attack-defense differential game model;Calculate attacker legal packet loss income, defender legal packet loss loss and attack cost and defense cost;According to the attacker legal packet loss income, defender legal packet loss loss and attack cost and defense cost, build instantaneous payment function;Solve the equilibrium solution of attack-defense zero-sum differential game model, obtain optimal saddle point strategy, analyze DDoS attack in Internet of Things botnet from the overall and dynamic point of view, to control the traffic that can be within the scope of victim processing to reach victim, while reducing the security loss of Internet of Things attack-defense system to a lower level.

1. The name of the design product: unmanned aerial vehicle detection and attack device. 2. The use of the design product: after detecting the unmanned aerial vehicle, the interference signal is launched to counter the unmanned aerial vehicle. 3. The design points of the design product: in shape. 4. The picture or photo that best indicates the design points: perspective view 1.

The invention discloses a fire attack method based on an unmanned aerial vehicle, and the method comprises the following steps: after receiving an instruction, rushing to a combat site, and assembling an unmanned aerial vehicle fire attack device; the unmanned aerial vehicle is started for self-inspection, and flight path planning is carried out according to the task target position information; after the self-inspection is completed, the operator controls the unmanned aerial vehicle to fly to a target point through the handheld operation terminal, and investigates the ground along the way according to a picture transmitted back in real time by the photoelectric investigation load; when the unmanned aerial vehicle is about to arrive at the target area, the unmanned aerial vehicle decelerates and flies and searches and confirms the target; after the target is confirmed, the unmanned aerial vehicle is adjusted to the position over the target, and bomb dropping is conducted; then the unmanned aerial vehicle climbs and the damage effect is observed, and whether secondary attack is carried out or not is determined according to the damage effect; if the secondary attack needs to be carried out, the unmanned aerial vehicle returns to load the bomb and continues to carry out fire attack; otherwise, after homeward voyage, the operator withdraws the unmanned aerial vehicle and packages the unmanned aerial vehicle to return to the gathering place.

The embodiment of the invention provides a security protection method and device, electronic equipment and a medium, which are used for solving the problem of low security caused by DDoS attack in the related technology. In the embodiment of the invention, the electronic equipment constructs the feature vectors by determining the transmission features of the candidate abnormal source IP addresses, determines the connection relationship between the corresponding nodes based on the similarity between the feature vectors, and generates the graph structure according to the connection relationship between the nodes. The information transmission capability of nodes in a network is measured through a betweenness center value, and high-betweenness nodes are often key nodes in DDoS attacks. And performing intervention on the candidate attack equipment corresponding to the key node, so that the candidate attack equipment misjudges the current network state and / or loses control on other equipment, thereby improving the security.

The present application provides a method and device for adjusting a network attack prediction model. The method includes generating an attack event sequence for each attacked device based on a security event log; training an LSTM model (LSTM(W1, W2)) using a set of attack event sequences for all attacked devices; using the trained model to embed all attack event sequences into a multidimensional vector space; clustering all points of the attack event sequences in the multidimensional vector space to obtain N clusters; and fine-tuning the LSTM model using the attack event sequences corresponding to the points in the multidimensional vector space in each cluster to obtain an adjusted LSTM model for each cluster #imgabs0# where (1≤i≤M), so that the network attack prevention device can predict subsequent attack events of the real-time attack sequence in the network based on the adjusted LSTM model of each cluster.

The present application provides a method, device, and system for forwarding a BIERv6 message, the method comprising: a first network device receives a BIERv6 message, the first network device being a bit forwarding router BFR or a bit forwarding egress router BFER; the first network device determines whether the value of the hop limit field in the BIERv6 message is less than or equal to a preset threshold on the first network device, wherein the preset threshold is a number greater than or equal to 2, which is determined based on the number of one or more consecutive second network devices connected to the first network device, and the second network device is a device that does not support BIER forwarding; when the value of the hop limit field in the BIERv6 message is less than or equal to the preset threshold, the first network device avoids forwarding the BIERv6 message. The technical solution provided by the present application can avoid the waste of network bandwidth and the waste of bandwidth of the attacked device caused by a large number of ICMPv6 error messages, and improve the security of BIERv6 message forwarding.

A system and method of using generative AI to maintain conversations with attacking devices to discover their adversary techniques and tactics. The method includes receiving an initial message originating from an attacking device and directed to a target device. The method includes generating, using one or more classification models, a maliciousness score for the initial message indicating that the initial message is associated with one or more types of malicious activity. The method includes providing, by a processing device, the initial message to a predictive model trained to maintain conversations with attacking devices by predicting responses to malicious messages. The method includes generating, using the predictive model, two or more responses based on the initial message and at least one subsequent message, wherein each response of the two or more responses causes the attacking device to send a respective subsequent message to the predictive model.

The embodiments of the present application disclose a model reverse attack method, a model reverse attack device, and a computer-readable storage medium for performing a model reverse attack while improving the similarity between a generated target attack image and a target privacy image. The method of the embodiment of the present application includes: performing preset rule processing on an obtained target space vector, inputting the processed target space vector into a pre-trained synthesis network to obtain an attack image output by the synthesis network, inputting the attack image into a target classifier to obtain a probability value of a target class of the attack image output by the target classifier, and optimizing the processed target space vector based on the probability value of the target class of the attack image so that the optimized target space vector is input into the synthesis network to obtain an optimized attack image output by the synthesis network.

The present invention discloses a method for attacking OFDM communications based on a reconfigurable metasurface: Step 1, constructing a database for storing the phases and amplitudes of multiple state transition sequences and their corresponding harmonics; Step 2, compressing the database; Step 3, determining the type of attack. If an indiscriminate attack is required, proceed to Step 4; if a targeted attack is required, proceed to Step 5; Step 4, designing the metasurface configuration required for indiscriminate attacks using the metasurface, proceed to Step 7; Step 5, designing the metasurface configuration for all directional combinations of targeted attacks using the metasurface; Step 6, selecting the metasurface configuration corresponding to the corresponding directional combination; Step 7, controlling the working state of the metasurface meta-atom according to the metasurface configuration to implement the metasurface attack. The method of the present invention utilizes a metasurface device that originally enhances the signal as an attack device, inducing a legitimate OFDM signal to generate a frequency-deviation signal, destroying the key orthogonality of the OFDM subcarriers and severely degrading communication performance.

The application discloses a vehicle-mounted reconnaissance and attack integrated device, and relates to the technical field of vehicle-mounted unmanned aerial vehicles, which comprises a reconnaissance and attack device integrated body, a reconnaissance and attack holder is arranged at the bottom end of the reconnaissance and attack device integrated body, the reconnaissance and attack holder is arranged in connection with the integrated base, and the integrated base is detachably arranged on the frame at the top end of the vehicle. The reconnaissance and attack holder comprises a hollow holder shell structure, a movable notch is formed in the top end of the holder shell structure, a holder mounting disc is arranged at the top end of the holder shell structure and is used for mounting and connecting the holder mounting disc of the reconnaissance and attack device integrated body, and a connecting mechanism for driving the reconnaissance and attack device integrated body to move is arranged in the holder shell structure. The shock absorption structure arranged in the integrated device plays a shock absorption protection role on the reconnaissance and attack device integrated body. The integrated base is additionally arranged and is used for quickly mounting and connecting the reconnaissance and attack holder structure with the frame at the top end of the vehicle and adjusting the same in place.

The invention provides a network attack source tracing evidence obtaining method and system and a storage medium. The method comprises the steps that attack data with attack features and characterizing attack attributes are acquired; retrieving information collection knowledge matched with the data attack type in a knowledge base, wherein the information collection knowledge comprises information collection dimensions and tools of attacked equipment in historical cases; determining an information collection dimension and a tool of the attacked device based on attack data and knowledge by using the large model; pushing an information collection tool to the attacked equipment, and enabling the attacked equipment to collect equipment information according to the information collection dimension; retrieving traceability evidence obtaining knowledge matched with the equipment information in a knowledge base, wherein the traceability evidence obtaining knowledge comprises equipment information, attack data and traceability evidence obtaining results in historical cases; and by utilizing the large model, based on equipment information, knowledge and attack data, outputting traceability evidence obtaining results, including a result for verifying whether attack characteristics exist, a result for judging whether potential attacks exist in equipment and a corresponding type, a traceability result of an attack path and evidence for each result.

In a network system in which a server receives packets each including a source address, and in which the server ordinarily responds to each packet, Distributed Denial of Service attacks may be launched by malicious actors controlling a plurality of network devices. In such an attack, the attacking devices may spoof the IP address of a legitimate device, e.g., they may include, in each packet, the source address of the legitimate device. As such, systems and methods for increased security using client address manipulation are provided.

The application discloses a rocket-assisted shore attacking device for modified use of a straight-running torpedo, comprising a straight-running torpedo, stabilizing wings, a booster, a fuel bin, a release device support, a torpedo clamping plate and a rotating shaft, and a pulley cover; the straight-running torpedo is clamped and fixed in the release device support through the torpedo clamping plate, and the tail of the support is coaxially connected with the fuel bin and the booster in sequence; four groups of stabilizing wings are fixed and arranged on the periphery of the release device support and connected with the fuel bin; the torpedo clamping plate is opened and closed through the rotating shaft, and the separation of the booster and the straight-running torpedo can be completed at a predetermined position; and the device is adapted to a rotating torpedo launching tube with a rotating base and a tube latch. The device can realize the modified use of inventory equipment without changing the straight-running torpedo body, greatly improves the shooting range of the old inventory straight-running torpedo, realizes the near-surface destruction capability of the straight-running torpedo to the shore side anti-landing reinforced concrete obstacles by using the explosion power, opens a road for subsequent large-scale landing, is compatible with the existing launching device, and has low modification cost.

This invention provides a fault handling method, apparatus, and electronic device. The method includes: receiving a fault message sent when a first device malfunctions, wherein the first device is at least one of a plurality of monitored devices managed by a management device, and the fault message is used to indicate that the value of a first monitoring indicator when the first device transmits data is greater than or equal to a first monitoring threshold corresponding to the first monitoring indicator; obtaining at least one configuration information associated with the data transmitted by the first device; obtaining historical abnormal data of the first monitoring indicator associated with each configuration information; and determining, based on the historical abnormal data, whether to obtain the address information of the attacked device that caused the first device malfunction.