77 results about "Attack device" patented technology

A system and method of using generative AI to maintain conversations with attacking devices to discover their adversary techniques and tactics. The method includes receiving an initial message originating from an attacking device and directed to a target device. The method includes generating, using one or more classification models, a maliciousness score for the initial message indicating that the initial message is associated with one or more types of malicious activity. The method includes providing, by a processing device, the initial message to a predictive model trained to maintain conversations with attacking devices by predicting responses to malicious messages. The method includes generating, using the predictive model, two or more responses based on the initial message and at least one subsequent message, wherein each response of the two or more responses causes the attacking device to send a respective subsequent message to the predictive model.

The invention discloses an Internet of Things malicious traffic detection method and device and a storage medium, and the method comprises the following steps: S1, collecting malicious traffic data of Internet of Things equipment, and classifying and constructing a malicious traffic sample library; s2, converting the malicious traffic data into a grayscale image by adopting a text imaging method, and performing normalization, noise reduction and feature enhancement; s3, extracting local binary pattern features, global image features and high-order local automatic correction features, and constructing a malicious traffic feature database; s4, training the malicious traffic detection model by adopting a space-time capsule Transform, extracting space and time features, and performing classification training; s5, collecting real-time traffic data, calculating an abnormal score by using the trained model, and judging a traffic category; and S6, sending a detection result to a command and control server, triggering an alarm, and sending a blocking or isolating instruction to the attacked device. The method improves the accuracy and real-time performance of malicious traffic detection, and is suitable for security monitoring and protection of the Internet of Things.

The invention relates to the technical field of generative large models, and discloses a jailbreak attack method for a Chinese large model, which comprises the following steps: performing data enhancement on an attack problem to be input; splicing the enhanced attack problem with the selected attack template; taking the spliced data as the input of a test model, attacking the test model, and obtaining the output of the test model; wherein the test model is a Chinese large model; and judging whether the output of the test model is safe or not according to the constructed safety evaluation model so as to count the attack success rate. The method can adapt to a Chinese attack scene, and the Chinese induction capability is improved. And the attack validity can be quantified by counting the attack success rate. The invention further discloses a jailbreak attack device for the Chinese large model and electronic equipment.

The invention discloses a Teensy virus identification and protection method for a mobile hard disk, and relates to the technical field of virus identification and protection.The method effectively identifies high-simulation attack equipment through composite equipment fingerprint construction and combination of hardware ripple features and dynamic protocol response, and breaks through the limitation of traditional single feature detection; meanwhile, the protocol state transition probability model adopts hidden Markov chain real-time analysis, microsecond-level protocol switching abnormity is accurately captured, and the problem of missing detection caused by rough time granularity of an existing scheme is solved; in addition, a window context instruction association mechanism binds a system focus state with an HID operation, and blocks a hidden attack chain formed by legal instruction combination; the hierarchical fusing strategy fuses protocol endpoint control and physical layer isolation, so that the availability of a storage function is ensured, meanwhile, attack blocking is realized, and the situation that normal use is influenced due to full-port forbidding in a traditional scheme is avoided.

The present invention discloses a distributed energy storage system based on the Internet of Things, which relates to the technical field of distributed energy storage. A first acquisition module is used to acquire device information of a distributed energy storage power station based on the Internet of Things. A first establishment module is connected to the acquisition module and is used to obtain protected object devices based on the device information. A second establishment module is connected to the first establishment module and is used to establish a system security defense network for the distributed energy storage power station. A second acquisition module is connected to the second establishment module and is used to acquire real-time status information of the security defense network and the unit defense network based on an associated channel. A processing module is connected to the second acquisition module and is used to acquire attacked devices based on defense information. The present invention reduces the possibility of devices being attacked and damaged, ensures the safety of the energy storage power station, can achieve timely risk avoidance, and greatly improves the safety management of the devices of the energy storage power station.

The embodiment of the invention discloses a jailbreak prompt word generation model training method and device and a jailbreak attack method and device. According to the training method, the training data is automatically generated through prison break attack recognition detection, dependence on manual annotation is reduced, training cost is reduced, and meanwhile training efficiency is improved. Besides, the training method performs self-optimization in each detection and feedback by simulating an attack-detection-feedback closed-loop mechanism and combining a self-supervised learning strategy, so that the prison break cue word generation model can update a prison break strategy in real time and dynamically adapt to novel attacks. The jailbreak prompt word generation model training device, the jailbreak attack method and the jailbreak attack device in the embodiment of the specification also have the above beneficial effects.

Devices, systems, and methods of detecting a vishing attack, in which an attacker provides to a victim step-by-step over-the-phone instructions that command the victim to log-in to his bank account and to perform a dictated banking transaction. The system monitors transactions, online operations, user interactions, gestures performed via input units, speed and timing of data entry, and user engagement with User Interface elements. The system detects that the operations performed by the victim, follow a pre-defined playbook of a vishing attack. The system detects that the victim operates under duress or under dictated instructions, as exhibited in irregular doodling activity, data entry rhythm, typographical error introduction rhythm, unique posture of the user, alternating pattern of listening to phone instructions and performing online operations via a computer, and device orientation changes or spatial changes that characterize a device being used to perform an online transaction while also talking on the phone.

A system and method for modelling a cyber-physical system to act as a honeypot for cyberattacks. The method including: building a virtual instance of the cyber-physical system including a physical layer and a cyber layer that controls the physical layer; generating a safety set defined by control barrier functions, the safety set delineates the bounds within which the cyber-physical system can operate safely; receiving a cyberattack payload from an attacking device; simulating physical dynamics of the physical layer and operation of the cyber layer; projecting whether the cyberattack payload can force the cyber-physical system to exit the safety set based on the simulated physical dynamics; and performing a safety action on the cyber-physical system when the physical system is projected to exit the safety set due to the cyberattack payload.

The invention provides a malicious attack equipment identification method and device based on JA4 fingerprint characteristics, and relates to the technical field of network information security. The method comprises the following steps: firstly, acquiring an equipment fingerprint sample set of a malicious request and an equipment fingerprint sample set of a non-malicious request, then acquiring JA4 fingerprint features of each sample in the equipment fingerprint sample set of the malicious request and the equipment fingerprint sample set of the non-malicious request, and then training a hostile attack equipment identification model based on the JA4 fingerprint features of the samples to obtain a hostile attack equipment identification model; and finally, unknown fingerprint information is input into the trained hostile attack equipment identification model, and the equipment type of the equipment corresponding to the unknown fingerprint information is obtained. Therefore, the sample with the JA4 fingerprint feature is utilized to learn the hostile attack equipment identification model, and the unknown fingerprint information is input into the trained model to obtain the equipment type of the equipment corresponding to the unknown fingerprint information, so that the identification accuracy of the hostile attack equipment can be improved.

The utility model relates to the technical field of drilling and tapping all-in-one machines, in particular to a high-speed and high-precision drilling and tapping all-in-one machine which comprises a mounting bottom plate, a drilling and tapping device body is arranged at the top of the mounting bottom plate, fixing and limiting mechanisms are symmetrically arranged at the top of the mounting bottom plate, and a connecting bottom plate is movably clamped between the inner sides of the fixing and limiting mechanisms. Clamping mechanisms are symmetrically arranged at the top of the connecting bottom plate, each clamping mechanism comprises a fixed connecting block, connecting air pipes are symmetrically arranged on one side of each fixed connecting block, and the parts can be stably clamped in the part clamping process through the arranged clamping mechanisms; and meanwhile, parts with different boundary dimensions can be clamped and fixed, the parts can be in a stable state in the machining process, then the parts can be in a stable state in the high drilling and tapping process, the overall machining precision is guaranteed, and operation is convenient.

The invention relates to the technical field of nut production, in particular to an off-machine tapping device and process for nut production, which comprises a tapping assembly, an electric guide rail arranged on one side of the tapping assembly, a tapping machine arranged at the output end of the electric guide rail, a trapezoidal plate arranged at the bottom of the tapping machine, and three groups of driving parts arranged on the inner side of the tapping assembly, the output end of each driving part is connected with a conduction part, each conduction part is slidably connected with a clamping plate, the top of each conduction part is provided with a transmission plate, and the inner side of each clamping plate is provided with a to-be-tapped part; in the process that the electric guide rail drives the tapping machine to move downwards, the tapping machine is matched with the trapezoidal plate to extrude the transmission plate, and the transmission plate is matched with the transverse moving plate to transmit force generated when the electric guide rail drives the tapping machine to move downwards to the longitudinal part. And the longitudinal part is matched with the inclined surface of the clamping plate to amplify the downward moving force of the tapping machine and reduce the transverse moving distance of the clamping plate to clamp the to-be-tapped part.

Described herein, according to various aspects, are unmanned aerial systems (UAS) that can carry multiple layered modules on a mission. An exemplary UAS may include layered modules that contain functional components such as communication relay modules, armor, batteries, charging modules, propulsion modules, GPS modules, sensor modules, processors, databases, lights, explosive devices, electronic attack devices, payloads, flotation and / or buoyancy control devices, etc. The layered modules can be easily added and / or removed, which allows the UAS to be reconfigured to perform different missions without significantly modifying the structure of the UAS. The layered modules can be deployed at specific locations along a flight path of the UAS to perform location-dependent functionalities (e.g., surveillance of a target region). Multiple layered modules can be coupled to expand upon the payload capacity and the functionality of the UAS. Such an UAS can thus provide a versatile, multifunctional vessel for performing different autonomous missions for military and commercial applications.

The invention is applicable to the technical field of network security, and relates to an intranet traffic interception method, a medium and a terminal, which can be used for intercepting and capturing an intranet traffic without depending on high-risk vulnerabilities of an attacked device, an intranet switch and an intranet router system or application and a third-party professional traffic monitoring system on the premise of remote non-physical contact with the attacked device. An attacker only needs to access the intranet based on the TCP / IP underlying network combination attack concept, the purpose of intercepting and capturing the flow of the attacked equipment can be achieved, the conditions for initiating attacks to the intranet are greatly reduced, the attack purpose of intercepting and monitoring the flow of the intranet based on the black box current situation can be truly achieved, and the method is wide in application range, wide in attack object coverage and high in practicability. In addition, the method has concealment, after the attack is successful, the existing service operation of the attacked equipment is not influenced, the flow of the attacked equipment is normally transmitted and received, and meanwhile, the attacked equipment is difficult to find that the flow of the attacked equipment is intercepted and monitored, so that the method promotes defense by attack, and better maintains the safety of a network bottom layer.

The invention discloses a method and a device for updating a network attack path diagram, terminal equipment and a storage medium, and belongs to the field of information security, and the method is the method for updating the network attack path diagram. Therefore, more comprehensive path coverage is realized; and the potential target attack path is automatically generated according to the connection relationship between the threat node and each path node in the network attack path graph, so that the path searching efficiency is improved, and the query omission of the potential attack path can be reduced. Therefore, the updating efficiency of the network attack path diagram can be improved, the path related to the attack behavior can be updated more accurately and comprehensively, and delay and omission of manual troubleshooting are avoided. By implementing the invention, the problems of incomplete path coverage and low updating efficiency of the network attack path diagram in the prior art can be solved.

The present invention relates to a CAN bus intrusion prevention circuit and method. The circuit includes a microprocessor (MCU), NPN transistors Q1, Q2, and Q3, coupling capacitors C1 and C2, current-limiting resistors R3, R4, R5, R6, R7, R8, R9, and R10, a 3.5V voltage-stabilizing diode D2, a 2.5V voltage-stabilizing diode D3, and a 1.5V voltage-stabilizing diode D4. The microprocessor MCU has a board-level communication interface O1 for receiving instructions to activate an intrusion prevention function, and a PWM pin for outputting a PWM signal. The PWM signal has a frequency that is ten times or more greater than the baud rate of the connected CAN bus, a high level of not less than 3.3V, and a duty cycle of not less than 0.9. Based on the characteristics of the CAN link layer protocol, the present invention can immediately initiate intrusion prevention upon detecting abnormal CAN bus data, thereby actively shielding illegal or hijacked attacking devices and protecting bus security.

The present invention relates to a target attack device and a swarm control system comprising same. The target attack device may comprise: a main body; a mounting unit, which is disposed on one side of the main body and accommodates an explosive member; a memory, which is embedded in the main body and stores at least one instruction; and at least one processor, which is embedded in the main body and executes the at least one instruction.

The utility model discloses an unmanned plane fire attack device, including unmanned plane and install in the ammunition mounting and release mechanism of unmanned plane bottom, ammunition mounting and release mechanism includes the pod, and the storehouse of pod installs the hanging board, is installed on the rudder machine of hanging board, and the executive end of rudder machine is installed and inserts through the side wall of pod one side and with the rotation of side wall links to each other the follow -up cover, and the end of follow -up cover forms the boss of the diameter that gradually contracts from inside to outside, and is provided with the lock catch of one end along the radial outward extension of follow -up cover in the end of boss, ammunition is along the length direction of pod and is hung in the pod through the bandage, and one end of bandage is fixed with one side of hanging board, and the other side is provided with the snap ring, and the snap ring is hung on the boss, when the lock catch of follow -up cover end is realized to the ammunition's hanging of rudder machine rotation drive to the above, when the lock catch of follow -up cover end is realized to the ammunition's release of rudder machine rotation drive, and the snap ring is slipped off from the boss, and the whole body structure is simple and convenient operation.

The utility model relates to the technical field of hornet nest removal, in particular to a hornet nest fire attack device which comprises a cart body and a liquefied gas bottle, a bearing plate is arranged on the lower portion of the surface of one side of the cart body, a groove is formed in the middle of the surface of the top end of the bearing plate, the liquefied gas bottle is arranged on the inner side of the groove, and a control valve is arranged in the middle of the surface of the top end of the liquefied gas bottle. A connecting port is formed in the middle of the surface of one side of the control valve, a high-pressure air pipe is arranged at one end of the connecting port, a spray gun is arranged on the surface of one end of the high-pressure air pipe, a telescopic rod is arranged on one side of the high-pressure air pipe, and a bandage is arranged in the middle of the surface of one side of the telescopic rod; the firefighter can be rapidly, efficiently and safely assisted in handling the hornet's nest alarm condition, the high-altitude operation risk of the firefighter is reduced, meanwhile, anxiety and difficulty of ordinary people in the jurisdiction can be eliminated in time, the life and property safety of the people is protected, the overall structure is simple, carrying is convenient, performance is stable, practicability is high, and the hornet's nest handling efficiency is remarkably improved.

The utility model belongs to the field of reverse attack devices for simulating tactical confrontation training, and particularly relates to a reverse attack device for simulating tactical confrontation training, which comprises a reverse attack device body, a heat dissipation mechanism is arranged in the reverse attack device body, and a fixing sleeve is fixedly connected onto the reverse attack device body. By designing the sliding rod, the handle, the connecting base, the supporting ring, the guide rod, the spring and other components, the sliding rod is pulled to move to a designated position, then the connecting sleeve and the connecting line are moved, the connecting sleeve moves to a designated position in the fixing sleeve, then the sliding rod is loosened, the sliding rod moves into the clamping groove, and then the connecting sleeve and the connecting line are limited; and the connecting sleeve and the connecting line on the device are prevented from slipping from the reverse attack device body.

Devices, systems, and methods of detecting a vishing attack, in which an attacker provides to a victim step-by-step over-the-phone instructions that command the victim to log-in to his bank account and to perform a dictated banking transaction. The system monitors transactions, online operations, user interactions, gestures performed via input units, speed and timing of data entry, and user engagement with User Interface elements. The system detects that the operations performed by the victim, follow a pre-defined playbook of a vishing attack. The system detects that the victim operates under duress or under dictated instructions, as exhibited in irregular doodling activity, data entry rhythm, typographical error introduction rhythm, unique posture of the user, alternating pattern of listening to phone instructions and performing online operations via a computer, and device orientation changes or spatial changes that characterize a device being used to perform an online transaction while also talking on the phone.

The invention discloses a method for positioning parameters of an underwater mud attack device crane based on a bottom-seated construction mother ship, which belongs to the technical field of shipwreck salvage. The method comprises the following steps: scanning and surveying a sunken ship to be attacked with a jack hole and constructing a bottom-seated construction mother ship position map; adding an underwater mud attack device to the optimized position map and designing a placement position; determining an operating radius R and a rotation angle θ when a crane is used to lower the underwater mud attack device; lowering the underwater mud attack device by the crane and adjusting the placement position and orientation; the crane hook drives the underwater mud attack device to touch the seabed mud surface and sit firmly and start the process of attacking the jack hole; when the first jack hole process is completed, repeating the above steps to position the underwater mud attack device at other jack hole positions; the method is mainly applied to the situation where the bottom-seated ship is used as a salvage construction mother ship, and based on the characteristic that the absolute position of the bottom-seated construction mother ship does not change substantially after the bottom-seating is completed, the underwater mud attack device can be accurately and efficiently positioned to meet the construction requirements of attacking the jack hole.

A first controller of a first device monitors communication to a first vehicle connected to the network. Further, when it is detected that an attack on the first vehicle is being carried out from the attack source device, the first controller transmits a first command for activating a honeypot server simulating a vehicle system of the first vehicle to the second device and transmits a second command for transferring packets transmitted from the attacking device to the first vehicle to the second device to a communication device that relays communication to the first vehicle in the network. Further, a second controller of a second device processes packets transmitted from the attack source device to the first vehicle and transferred to the second device by the communication device.

The invention discloses a malicious suffix construction method, a controllable jailbreak attack method and a controllable jailbreak attack device, the method designs a jailbreak attack framework in a diffusion model SD, and the jailbreak attack method is operated from a text mode and an image mode. A transferable malicious suffix not containing sensitive words is learned in a text mode, a cosine loss function is used, the malicious suffix is close to malicious prompt semantics containing explicit sensitive words in an encoder layer, and after the learned malicious suffix is added to a jailbreak object prompted by an input text, the jailbreak object is prompted by the text. And converting the harmless prompt into a sensitive image generation instruction. And in an image mode, through a designed security checker loss and text consistent loss function, carrying out back propagation gradient optimization on the input original image to be edited, so that the generated image passes through the check of the security checker, and an image containing NSFW content is generated. According to the method, the security limitation of a security checker can be bypassed, the jail break attack is realized, the security vulnerabilities existing in the current text graph model are revealed, and the security protection measures of the model are evaluated.

The invention discloses an attack and defense simulation method and device for a power system and electronic equipment, and the method comprises the steps: constructing a three-dimensional simulation scene corresponding to the power system, and determining a target power transmission line model in all power transmission line models of the three-dimensional simulation scene; adding an unmanned aerial vehicle model in a preset range of the three-dimensional simulation scene, and determining an azimuth angle and spatio-temporal trajectory data of the unmanned aerial vehicle model flying towards the target power transmission line model according to the initial coordinate of the unmanned aerial vehicle model and the central point coordinate of the target power transmission line model; when the unmanned aerial vehicle model is controlled to fly above the target power transmission line model according to the azimuth angle and the spatial-temporal trajectory data, simulating the operation of projecting an attack instrument model by using the unmanned aerial vehicle model and attacking the target power transmission line model through the attack instrument model; and a three-dimensional simulation scene of the power system attacked by the attack instrument model is obtained, so that a user can intuitively and stereoscopically obtain an attack and defense simulation process of the power system.

In a network system in which a server receives packets each including a source address, and in which the server ordinarily responds to each packet, Distributed Denial of Service attacks may be launched by malicious actors controlling a plurality of network devices. In such an attack, the attacking devices may spoof the IP address of a legitimate device, e.g., they may include, in each packet, the source address of the legitimate device. As such, systems and methods for increased security using client address manipulation are provided.

The utility model discloses a handheld low altitude unmanned aerial vehicle detection strike equipment, it includes fuselage and mounting mechanism, the bottom fixed mounting of fuselage has installation barrel, mounting mechanism includes the inner ring fixedly installed in installation barrel, and the detection equipment is installed in the installation barrel, is equipped with a plurality of chutes on the detection equipment, and the rectangular block of sliding connection with the inner wall sliding of chute is connected in the chute, and the rectangular block penetrates the inner ring and is connected with its sliding, and the outer ring of sliding connection with the inner ring is set up in the installation barrel, and a plurality of inclined blocks are fixedly installed on the outer ring, and the inclined block is set up with rectangular block one to one, and the inclined surface of inclined block and the inclined surface of rectangular block slide and abut, the cooperation between this equipment utilizes the outer ring, the inner ring, rectangular block, inclined block and fixed column, has improved the installation efficiency of detection equipment, has guaranteed the stability of detection equipment installation simultaneously.

Apparatuses and methods for mitigating speculative based attacks on a processor are disclosed. In one example of the disclosed technology, an apparatus includes a processor, the apparatus having a memory positioned to store profiler data to measure at least one performance criterion for an instruction stream executed by the processor, and having control logic configured to select one of a plurality of mitigation schemes to mitigate a speculative based attack on the apparatus based on the measured performance criterion. The apparatus can include a remediation unit that can prevent a speculative side effect by implementing a delay scheme, a redo scheme, or a rollback scheme, which prevents side effect data generated by a mis-speculative instruction from becoming visible to an attacker.

The present invention relates to the field of battle game technology, and in particular to a battle system, a battle data transmission method and device, wherein the battle system includes: an attacking device is a device that initiates an attack in a battle; a hitting device is a device that is hit by an attacked device; the attacking device is used to send attack information in a preset attack mode in a target attack event, and the attack information at least includes identity information used to characterize the identity of the attacking device; the hitting device is used to receive the attack information and obtain an attack result used to characterize that the hitting device is hit by the attacking device; the hitting device is also used to send the attack result in a device broadcast mode to all target devices within the broadcast coverage of the hitting device. The present invention not only achieves the technical effect of notifying the attack result, but also eliminates the need to network each device before the battle, so that any device can join the battle at any time and obtain the attack result, and the restoration of the attack result can be achieved from any target device.

The application provides a kind of Internet of Things botnet DDoS attack defense method, device and storage medium, it is related to Internet of Things technical field, by the conversion relationship between sleeping device, normal device, latent device and attack device is constructed botnet DDoS attack attack-defense differential game model;Calculate attacker legal packet loss income, defender legal packet loss loss and attack cost and defense cost;According to the attacker legal packet loss income, defender legal packet loss loss and attack cost and defense cost, build instantaneous payment function;Solve the equilibrium solution of attack-defense zero-sum differential game model, obtain optimal saddle point strategy, analyze DDoS attack in Internet of Things botnet from the overall and dynamic point of view, to control the traffic that can be within the scope of victim processing to reach victim, while reducing the security loss of Internet of Things attack-defense system to a lower level.

The utility model discloses a semi-automatic tapping device which comprises a supporting seat, a shielding frame and a set of guide columns are fixed to the outer wall of the top of the supporting seat, a movable frame is slidably connected to the outer wall of the shielding frame, a movable frame is slidably connected to the outer wall of the top of the movable frame, a pushing mechanism is arranged on the outer walls of the movable frame and the movable frame, and a clamping mechanism is arranged on the outer wall of the movable frame. A collecting box is inserted into the outer wall of the bottom of the supporting seat, the outer wall of the bottom of the collecting hose is arranged on the inner wall of the collecting box, the outer wall of the bottom of the collecting box is connected with a filtering box through threads, and an exhaust fan is arranged on the outer wall of the bottom of the filtering box; an exhaust pipe is arranged at the output end of the exhaust fan, a movable plate is slidably connected to the outer wall of the guide column, and a drilling machine is fixed to the inner wall of the movable plate. According to the tapping machine, scraps generated in the tapping process can be prevented from splashing everywhere, and meanwhile workers can conveniently recycle the scraps.