49 results about "Attack device" patented technology

The invention discloses an Internet of Things malicious traffic detection method and device and a storage medium, and the method comprises the following steps: S1, collecting malicious traffic data of Internet of Things equipment, and classifying and constructing a malicious traffic sample library; s2, converting the malicious traffic data into a grayscale image by adopting a text imaging method, and performing normalization, noise reduction and feature enhancement; s3, extracting local binary pattern features, global image features and high-order local automatic correction features, and constructing a malicious traffic feature database; s4, training the malicious traffic detection model by adopting a space-time capsule Transform, extracting space and time features, and performing classification training; s5, collecting real-time traffic data, calculating an abnormal score by using the trained model, and judging a traffic category; and S6, sending a detection result to a command and control server, triggering an alarm, and sending a blocking or isolating instruction to the attacked device. The method improves the accuracy and real-time performance of malicious traffic detection, and is suitable for security monitoring and protection of the Internet of Things.

The invention discloses a Teensy virus identification and protection method for a mobile hard disk, and relates to the technical field of virus identification and protection.The method effectively identifies high-simulation attack equipment through composite equipment fingerprint construction and combination of hardware ripple features and dynamic protocol response, and breaks through the limitation of traditional single feature detection; meanwhile, the protocol state transition probability model adopts hidden Markov chain real-time analysis, microsecond-level protocol switching abnormity is accurately captured, and the problem of missing detection caused by rough time granularity of an existing scheme is solved; in addition, a window context instruction association mechanism binds a system focus state with an HID operation, and blocks a hidden attack chain formed by legal instruction combination; the hierarchical fusing strategy fuses protocol endpoint control and physical layer isolation, so that the availability of a storage function is ensured, meanwhile, attack blocking is realized, and the situation that normal use is influenced due to full-port forbidding in a traditional scheme is avoided.

The present invention discloses a distributed energy storage system based on the Internet of Things, which relates to the technical field of distributed energy storage. A first acquisition module is used to acquire device information of a distributed energy storage power station based on the Internet of Things. A first establishment module is connected to the acquisition module and is used to obtain protected object devices based on the device information. A second establishment module is connected to the first establishment module and is used to establish a system security defense network for the distributed energy storage power station. A second acquisition module is connected to the second establishment module and is used to acquire real-time status information of the security defense network and the unit defense network based on an associated channel. A processing module is connected to the second acquisition module and is used to acquire attacked devices based on defense information. The present invention reduces the possibility of devices being attacked and damaged, ensures the safety of the energy storage power station, can achieve timely risk avoidance, and greatly improves the safety management of the devices of the energy storage power station.

The embodiment of the invention discloses a jailbreak prompt word generation model training method and device and a jailbreak attack method and device. According to the training method, the training data is automatically generated through prison break attack recognition detection, dependence on manual annotation is reduced, training cost is reduced, and meanwhile training efficiency is improved. Besides, the training method performs self-optimization in each detection and feedback by simulating an attack-detection-feedback closed-loop mechanism and combining a self-supervised learning strategy, so that the prison break cue word generation model can update a prison break strategy in real time and dynamically adapt to novel attacks. The jailbreak prompt word generation model training device, the jailbreak attack method and the jailbreak attack device in the embodiment of the specification also have the above beneficial effects.

A system and method for modelling a cyber-physical system to act as a honeypot for cyberattacks. The method including: building a virtual instance of the cyber-physical system including a physical layer and a cyber layer that controls the physical layer; generating a safety set defined by control barrier functions, the safety set delineates the bounds within which the cyber-physical system can operate safely; receiving a cyberattack payload from an attacking device; simulating physical dynamics of the physical layer and operation of the cyber layer; projecting whether the cyberattack payload can force the cyber-physical system to exit the safety set based on the simulated physical dynamics; and performing a safety action on the cyber-physical system when the physical system is projected to exit the safety set due to the cyberattack payload.

The invention provides a malicious attack equipment identification method and device based on JA4 fingerprint characteristics, and relates to the technical field of network information security. The method comprises the following steps: firstly, acquiring an equipment fingerprint sample set of a malicious request and an equipment fingerprint sample set of a non-malicious request, then acquiring JA4 fingerprint features of each sample in the equipment fingerprint sample set of the malicious request and the equipment fingerprint sample set of the non-malicious request, and then training a hostile attack equipment identification model based on the JA4 fingerprint features of the samples to obtain a hostile attack equipment identification model; and finally, unknown fingerprint information is input into the trained hostile attack equipment identification model, and the equipment type of the equipment corresponding to the unknown fingerprint information is obtained. Therefore, the sample with the JA4 fingerprint feature is utilized to learn the hostile attack equipment identification model, and the unknown fingerprint information is input into the trained model to obtain the equipment type of the equipment corresponding to the unknown fingerprint information, so that the identification accuracy of the hostile attack equipment can be improved.

The utility model relates to the technical field of drilling and tapping all-in-one machines, in particular to a high-speed and high-precision drilling and tapping all-in-one machine which comprises a mounting bottom plate, a drilling and tapping device body is arranged at the top of the mounting bottom plate, fixing and limiting mechanisms are symmetrically arranged at the top of the mounting bottom plate, and a connecting bottom plate is movably clamped between the inner sides of the fixing and limiting mechanisms. Clamping mechanisms are symmetrically arranged at the top of the connecting bottom plate, each clamping mechanism comprises a fixed connecting block, connecting air pipes are symmetrically arranged on one side of each fixed connecting block, and the parts can be stably clamped in the part clamping process through the arranged clamping mechanisms; and meanwhile, parts with different boundary dimensions can be clamped and fixed, the parts can be in a stable state in the machining process, then the parts can be in a stable state in the high drilling and tapping process, the overall machining precision is guaranteed, and operation is convenient.

The invention relates to the technical field of nut production, in particular to an off-machine tapping device and process for nut production, which comprises a tapping assembly, an electric guide rail arranged on one side of the tapping assembly, a tapping machine arranged at the output end of the electric guide rail, a trapezoidal plate arranged at the bottom of the tapping machine, and three groups of driving parts arranged on the inner side of the tapping assembly, the output end of each driving part is connected with a conduction part, each conduction part is slidably connected with a clamping plate, the top of each conduction part is provided with a transmission plate, and the inner side of each clamping plate is provided with a to-be-tapped part; in the process that the electric guide rail drives the tapping machine to move downwards, the tapping machine is matched with the trapezoidal plate to extrude the transmission plate, and the transmission plate is matched with the transverse moving plate to transmit force generated when the electric guide rail drives the tapping machine to move downwards to the longitudinal part. And the longitudinal part is matched with the inclined surface of the clamping plate to amplify the downward moving force of the tapping machine and reduce the transverse moving distance of the clamping plate to clamp the to-be-tapped part.

Described herein, according to various aspects, are unmanned aerial systems (UAS) that can carry multiple layered modules on a mission. An exemplary UAS may include layered modules that contain functional components such as communication relay modules, armor, batteries, charging modules, propulsion modules, GPS modules, sensor modules, processors, databases, lights, explosive devices, electronic attack devices, payloads, flotation and / or buoyancy control devices, etc. The layered modules can be easily added and / or removed, which allows the UAS to be reconfigured to perform different missions without significantly modifying the structure of the UAS. The layered modules can be deployed at specific locations along a flight path of the UAS to perform location-dependent functionalities (e.g., surveillance of a target region). Multiple layered modules can be coupled to expand upon the payload capacity and the functionality of the UAS. Such an UAS can thus provide a versatile, multifunctional vessel for performing different autonomous missions for military and commercial applications.

The invention discloses a method and a device for updating a network attack path diagram, terminal equipment and a storage medium, and belongs to the field of information security, and the method is the method for updating the network attack path diagram. Therefore, more comprehensive path coverage is realized; and the potential target attack path is automatically generated according to the connection relationship between the threat node and each path node in the network attack path graph, so that the path searching efficiency is improved, and the query omission of the potential attack path can be reduced. Therefore, the updating efficiency of the network attack path diagram can be improved, the path related to the attack behavior can be updated more accurately and comprehensively, and delay and omission of manual troubleshooting are avoided. By implementing the invention, the problems of incomplete path coverage and low updating efficiency of the network attack path diagram in the prior art can be solved.

The present invention relates to a CAN bus intrusion prevention circuit and method. The circuit includes a microprocessor (MCU), NPN transistors Q1, Q2, and Q3, coupling capacitors C1 and C2, current-limiting resistors R3, R4, R5, R6, R7, R8, R9, and R10, a 3.5V voltage-stabilizing diode D2, a 2.5V voltage-stabilizing diode D3, and a 1.5V voltage-stabilizing diode D4. The microprocessor MCU has a board-level communication interface O1 for receiving instructions to activate an intrusion prevention function, and a PWM pin for outputting a PWM signal. The PWM signal has a frequency that is ten times or more greater than the baud rate of the connected CAN bus, a high level of not less than 3.3V, and a duty cycle of not less than 0.9. Based on the characteristics of the CAN link layer protocol, the present invention can immediately initiate intrusion prevention upon detecting abnormal CAN bus data, thereby actively shielding illegal or hijacked attacking devices and protecting bus security.

The present invention relates to a target attack device and a swarm control system comprising same. The target attack device may comprise: a main body; a mounting unit, which is disposed on one side of the main body and accommodates an explosive member; a memory, which is embedded in the main body and stores at least one instruction; and at least one processor, which is embedded in the main body and executes the at least one instruction.

The utility model discloses an unmanned plane fire attack device, including unmanned plane and install in the ammunition mounting and release mechanism of unmanned plane bottom, ammunition mounting and release mechanism includes the pod, and the storehouse of pod installs the hanging board, is installed on the rudder machine of hanging board, and the executive end of rudder machine is installed and inserts through the side wall of pod one side and with the rotation of side wall links to each other the follow -up cover, and the end of follow -up cover forms the boss of the diameter that gradually contracts from inside to outside, and is provided with the lock catch of one end along the radial outward extension of follow -up cover in the end of boss, ammunition is along the length direction of pod and is hung in the pod through the bandage, and one end of bandage is fixed with one side of hanging board, and the other side is provided with the snap ring, and the snap ring is hung on the boss, when the lock catch of follow -up cover end is realized to the ammunition's hanging of rudder machine rotation drive to the above, when the lock catch of follow -up cover end is realized to the ammunition's release of rudder machine rotation drive, and the snap ring is slipped off from the boss, and the whole body structure is simple and convenient operation.

Devices, systems, and methods of detecting a vishing attack, in which an attacker provides to a victim step-by-step over-the-phone instructions that command the victim to log-in to his bank account and to perform a dictated banking transaction. The system monitors transactions, online operations, user interactions, gestures performed via input units, speed and timing of data entry, and user engagement with User Interface elements. The system detects that the operations performed by the victim, follow a pre-defined playbook of a vishing attack. The system detects that the victim operates under duress or under dictated instructions, as exhibited in irregular doodling activity, data entry rhythm, typographical error introduction rhythm, unique posture of the user, alternating pattern of listening to phone instructions and performing online operations via a computer, and device orientation changes or spatial changes that characterize a device being used to perform an online transaction while also talking on the phone.

The invention discloses a method for positioning parameters of an underwater mud attack device crane based on a bottom-seated construction mother ship, which belongs to the technical field of shipwreck salvage. The method comprises the following steps: scanning and surveying a sunken ship to be attacked with a jack hole and constructing a bottom-seated construction mother ship position map; adding an underwater mud attack device to the optimized position map and designing a placement position; determining an operating radius R and a rotation angle θ when a crane is used to lower the underwater mud attack device; lowering the underwater mud attack device by the crane and adjusting the placement position and orientation; the crane hook drives the underwater mud attack device to touch the seabed mud surface and sit firmly and start the process of attacking the jack hole; when the first jack hole process is completed, repeating the above steps to position the underwater mud attack device at other jack hole positions; the method is mainly applied to the situation where the bottom-seated ship is used as a salvage construction mother ship, and based on the characteristic that the absolute position of the bottom-seated construction mother ship does not change substantially after the bottom-seating is completed, the underwater mud attack device can be accurately and efficiently positioned to meet the construction requirements of attacking the jack hole.

A first controller of a first device monitors communication to a first vehicle connected to the network. Further, when it is detected that an attack on the first vehicle is being carried out from the attack source device, the first controller transmits a first command for activating a honeypot server simulating a vehicle system of the first vehicle to the second device and transmits a second command for transferring packets transmitted from the attacking device to the first vehicle to the second device to a communication device that relays communication to the first vehicle in the network. Further, a second controller of a second device processes packets transmitted from the attack source device to the first vehicle and transferred to the second device by the communication device.

The invention discloses a malicious suffix construction method, a controllable jailbreak attack method and a controllable jailbreak attack device, the method designs a jailbreak attack framework in a diffusion model SD, and the jailbreak attack method is operated from a text mode and an image mode. A transferable malicious suffix not containing sensitive words is learned in a text mode, a cosine loss function is used, the malicious suffix is close to malicious prompt semantics containing explicit sensitive words in an encoder layer, and after the learned malicious suffix is added to a jailbreak object prompted by an input text, the jailbreak object is prompted by the text. And converting the harmless prompt into a sensitive image generation instruction. And in an image mode, through a designed security checker loss and text consistent loss function, carrying out back propagation gradient optimization on the input original image to be edited, so that the generated image passes through the check of the security checker, and an image containing NSFW content is generated. According to the method, the security limitation of a security checker can be bypassed, the jail break attack is realized, the security vulnerabilities existing in the current text graph model are revealed, and the security protection measures of the model are evaluated.

The invention discloses an attack and defense simulation method and device for a power system and electronic equipment, and the method comprises the steps: constructing a three-dimensional simulation scene corresponding to the power system, and determining a target power transmission line model in all power transmission line models of the three-dimensional simulation scene; adding an unmanned aerial vehicle model in a preset range of the three-dimensional simulation scene, and determining an azimuth angle and spatio-temporal trajectory data of the unmanned aerial vehicle model flying towards the target power transmission line model according to the initial coordinate of the unmanned aerial vehicle model and the central point coordinate of the target power transmission line model; when the unmanned aerial vehicle model is controlled to fly above the target power transmission line model according to the azimuth angle and the spatial-temporal trajectory data, simulating the operation of projecting an attack instrument model by using the unmanned aerial vehicle model and attacking the target power transmission line model through the attack instrument model; and a three-dimensional simulation scene of the power system attacked by the attack instrument model is obtained, so that a user can intuitively and stereoscopically obtain an attack and defense simulation process of the power system.

In a network system in which a server receives packets each including a source address, and in which the server ordinarily responds to each packet, Distributed Denial of Service attacks may be launched by malicious actors controlling a plurality of network devices. In such an attack, the attacking devices may spoof the IP address of a legitimate device, e.g., they may include, in each packet, the source address of the legitimate device. As such, systems and methods for increased security using client address manipulation are provided.

The utility model discloses a handheld low altitude unmanned aerial vehicle detection strike equipment, it includes fuselage and mounting mechanism, the bottom fixed mounting of fuselage has installation barrel, mounting mechanism includes the inner ring fixedly installed in installation barrel, and the detection equipment is installed in the installation barrel, is equipped with a plurality of chutes on the detection equipment, and the rectangular block of sliding connection with the inner wall sliding of chute is connected in the chute, and the rectangular block penetrates the inner ring and is connected with its sliding, and the outer ring of sliding connection with the inner ring is set up in the installation barrel, and a plurality of inclined blocks are fixedly installed on the outer ring, and the inclined block is set up with rectangular block one to one, and the inclined surface of inclined block and the inclined surface of rectangular block slide and abut, the cooperation between this equipment utilizes the outer ring, the inner ring, rectangular block, inclined block and fixed column, has improved the installation efficiency of detection equipment, has guaranteed the stability of detection equipment installation simultaneously.

Apparatuses and methods for mitigating speculative based attacks on a processor are disclosed. In one example of the disclosed technology, an apparatus includes a processor, the apparatus having a memory positioned to store profiler data to measure at least one performance criterion for an instruction stream executed by the processor, and having control logic configured to select one of a plurality of mitigation schemes to mitigate a speculative based attack on the apparatus based on the measured performance criterion. The apparatus can include a remediation unit that can prevent a speculative side effect by implementing a delay scheme, a redo scheme, or a rollback scheme, which prevents side effect data generated by a mis-speculative instruction from becoming visible to an attacker.

The present invention relates to the field of battle game technology, and in particular to a battle system, a battle data transmission method and device, wherein the battle system includes: an attacking device is a device that initiates an attack in a battle; a hitting device is a device that is hit by an attacked device; the attacking device is used to send attack information in a preset attack mode in a target attack event, and the attack information at least includes identity information used to characterize the identity of the attacking device; the hitting device is used to receive the attack information and obtain an attack result used to characterize that the hitting device is hit by the attacking device; the hitting device is also used to send the attack result in a device broadcast mode to all target devices within the broadcast coverage of the hitting device. The present invention not only achieves the technical effect of notifying the attack result, but also eliminates the need to network each device before the battle, so that any device can join the battle at any time and obtain the attack result, and the restoration of the attack result can be achieved from any target device.

The application provides a kind of Internet of Things botnet DDoS attack defense method, device and storage medium, it is related to Internet of Things technical field, by the conversion relationship between sleeping device, normal device, latent device and attack device is constructed botnet DDoS attack attack-defense differential game model;Calculate attacker legal packet loss income, defender legal packet loss loss and attack cost and defense cost;According to the attacker legal packet loss income, defender legal packet loss loss and attack cost and defense cost, build instantaneous payment function;Solve the equilibrium solution of attack-defense zero-sum differential game model, obtain optimal saddle point strategy, analyze DDoS attack in Internet of Things botnet from the overall and dynamic point of view, to control the traffic that can be within the scope of victim processing to reach victim, while reducing the security loss of Internet of Things attack-defense system to a lower level.

1. The name of the design product: unmanned aerial vehicle detection and attack device. 2. The use of the design product: after detecting the unmanned aerial vehicle, the interference signal is launched to counter the unmanned aerial vehicle. 3. The design points of the design product: in shape. 4. The picture or photo that best indicates the design points: perspective view 1.

The utility model belongs to the technical field related to fire fighting instruments, and provides a hornet nest picking fire attack device which comprises an extension rod, an ignition assembly, a pressing assembly and a bottle placing frame, a handle is arranged at one end of the extension rod, the bottle placing frame is arranged at the other end of the extension rod, and a hydraulic gas storage bottle is clamped on the bottle placing frame; the ignition assembly comprises a high-voltage arc generator and an ignition needle, the high-voltage arc generator is arranged at the end, provided with the handle, of the extension rod, the ignition needle is arranged at the outer side end of the bottle containing frame, and the high-voltage arc generator is connected to the ignition needle through the output end of a high-voltage live wire. The pressing assembly comprises a driving part, a traction rope, a pressing rod and a reset spring, the driving part is hinged to the end, provided with the handle, of the extension rod, one end of the traction rope is arranged on the driving part, the other end of the traction rope penetrates through the extension rod and is arranged on the pressing rod, and the bottom of the pressing rod is hinged to the end, away from the handle, of the extension rod.

The invention discloses a fire attack method based on an unmanned aerial vehicle, and the method comprises the following steps: after receiving an instruction, rushing to a combat site, and assembling an unmanned aerial vehicle fire attack device; the unmanned aerial vehicle is started for self-inspection, and flight path planning is carried out according to the task target position information; after the self-inspection is completed, the operator controls the unmanned aerial vehicle to fly to a target point through the handheld operation terminal, and investigates the ground along the way according to a picture transmitted back in real time by the photoelectric investigation load; when the unmanned aerial vehicle is about to arrive at the target area, the unmanned aerial vehicle decelerates and flies and searches and confirms the target; after the target is confirmed, the unmanned aerial vehicle is adjusted to the position over the target, and bomb dropping is conducted; then the unmanned aerial vehicle climbs and the damage effect is observed, and whether secondary attack is carried out or not is determined according to the damage effect; if the secondary attack needs to be carried out, the unmanned aerial vehicle returns to load the bomb and continues to carry out fire attack; otherwise, after homeward voyage, the operator withdraws the unmanned aerial vehicle and packages the unmanned aerial vehicle to return to the gathering place.

The embodiment of the invention provides a security protection method and device, electronic equipment and a medium, which are used for solving the problem of low security caused by DDoS attack in the related technology. In the embodiment of the invention, the electronic equipment constructs the feature vectors by determining the transmission features of the candidate abnormal source IP addresses, determines the connection relationship between the corresponding nodes based on the similarity between the feature vectors, and generates the graph structure according to the connection relationship between the nodes. The information transmission capability of nodes in a network is measured through a betweenness center value, and high-betweenness nodes are often key nodes in DDoS attacks. And performing intervention on the candidate attack equipment corresponding to the key node, so that the candidate attack equipment misjudges the current network state and / or loses control on other equipment, thereby improving the security.

The present application provides a method and device for adjusting a network attack prediction model. The method includes generating an attack event sequence for each attacked device based on a security event log; training an LSTM model (LSTM(W1, W2)) using a set of attack event sequences for all attacked devices; using the trained model to embed all attack event sequences into a multidimensional vector space; clustering all points of the attack event sequences in the multidimensional vector space to obtain N clusters; and fine-tuning the LSTM model using the attack event sequences corresponding to the points in the multidimensional vector space in each cluster to obtain an adjusted LSTM model for each cluster #imgabs0# where (1≤i≤M), so that the network attack prevention device can predict subsequent attack events of the real-time attack sequence in the network based on the adjusted LSTM model of each cluster.

The utility model relates to the technical field of safety monitoring, in particular to a communication system based on port perimeter safety, which comprises a detection module, a transmission module, a control module, an attack device and an alarm module, the transmission module transmits data of the detection module, the control module is connected with the transmission module and analyzes and judges the data in the transmission module, the alarm module is connected with the control module and gives an alarm in case of an abnormal condition, the attack device is connected with the control module and works in case of an abnormal condition, and the detection module detects the perimeter of a port in real time. And data is transmitted to the transmission module, and the control module works when an intruder is found, so that the alarm module and the attack device work at the same time, measures are taken in time when the intruder enters a boundary, and potential safety hazards are further reduced.

The present application provides a method, device, and system for forwarding a BIERv6 message, the method comprising: a first network device receives a BIERv6 message, the first network device being a bit forwarding router BFR or a bit forwarding egress router BFER; the first network device determines whether the value of the hop limit field in the BIERv6 message is less than or equal to a preset threshold on the first network device, wherein the preset threshold is a number greater than or equal to 2, which is determined based on the number of one or more consecutive second network devices connected to the first network device, and the second network device is a device that does not support BIER forwarding; when the value of the hop limit field in the BIERv6 message is less than or equal to the preset threshold, the first network device avoids forwarding the BIERv6 message. The technical solution provided by the present application can avoid the waste of network bandwidth and the waste of bandwidth of the attacked device caused by a large number of ICMPv6 error messages, and improve the security of BIERv6 message forwarding.