11 results about "Business impact" patented technology

The application relates to the technical field of network security and discloses an attack surface management method based on multi-source intelligence fusion, which comprises the following steps: collecting original data through a dynamic asset fingerprint library construction module and generating asset portrait data by using a machine learning algorithm; mapping the asset portrait data into a graph database node and an edge through an attack path simulation engine, executing a graph path search algorithm, outputting an attack path simulation result and a business influence score; executing a repair suggestion instruction through an automatic repair verification module, sending a re-simulation request to the attack path simulation engine, and verifying whether the attack path is blocked according to a secondary simulation result. The application can realize real-time discovery of dynamic assets and supply chain risks, accurate quantification of attack path influence by using a graph database, effective cutting of attack paths by repair measures and non-introduction of new risks through a secondary simulation and an abnormality detection mechanism, and dynamic and accurate closed-loop management of attack surface risks.

This invention relates to the field of software development technology and discloses a method, apparatus, device, and storage medium for interface iteration risk alarm. The method includes: acquiring data returned by the interface after an iterative update as comparison data, and acquiring pre-stored data returned by the interface before the iterative update as reference data; converting the comparison data and reference data into a structured data model in a preset format using a nested structure to generate a first structured data representation and a second structured data representation; performing a multi-dimensional comparison based on the first and second structured data representations to obtain a multi-dimensional comparison result; and determining whether to trigger an alarm notification based on the business impact of the multi-dimensional comparison result. Applying the technical solution of this invention can solve the problems of inefficiently handling complex data structure comparisons during interface iteration and the imperfect alarm mechanism in the prior art.

The invention relates to a method and equipment for tracing and repairing water conservancy data quality abnormity, and a medium, and belongs to the technical field of intelligent water conservancy. Collecting multi-source water conservancy data, extracting data features and generating a standardized feature vector set; constructing a three-layer Bayesian network topological structure of circulation link-business influence factor-anomaly type, training to obtain a dynamic weight Bayesian network model adaptive to the water conservancy scene, inputting the standardized feature vector into the dynamic weight Bayesian network model obtained by training, outputting quality anomaly root cause probability distribution, and obtaining the quality anomaly root cause probability distribution. The posterior probability of each abnormal root cause is calculated through a Bayesian formula, and a root cause output traceability result is judged; performing graded repair and verification according to different traceability results; and the repaired qualified data is synchronized to a data asset module of the water conservancy credible data space for service output and generation of a visual data quality report. According to the method, the traceability precision is remarkably improved, and the service adaptability is higher.

The application discloses an industrial internet high-risk software identification system and method, and particularly relates to the technical field of industrial internet security, and comprises an industrial software gene map automatic construction module, a business context-aware dynamic risk assessment module and a map-associated precise disposal strategy recommendation module; through multi-dimensional feature acquisition and fusion technology, a unique digital identity is generated for software assets, precise identification is realized; the real security risk of software assets is dynamically quantified by comprehensively considering vulnerability severity, business criticality and network exposure; based on asset relationship map and game analysis, the optimal disposal strategy with the least impact on business is generated and recommended for high-risk software. The application solves the problems of inaccurate industrial software identification, risk assessment out of business context and lack of intelligent decision support for disposal measures in the prior art, realizes automatic closed-loop management from identification, evaluation to disposal, and significantly improves the security protection capability of the industrial internet.

The application discloses a kind of multimodal AI model continuous learning and management method, belong to artificial intelligence operation and wisdom park management cross technical field.This method is based on incremental data, inserts the lightweight adaptation parameter module corresponding to trigger event in the main network of multimodal AI model, freezes the original parameters of main network, and only trains lightweight adaptation parameter module based on dynamic parameter isolation mechanism, to generate the new function unit associated with trigger event;Register the new function unit as a capability node in the version graph of directed acyclic graph structure;New version model containing new function unit is deployed online through safe gray release pipeline.The scheme of the application fundamentally avoids the coverage of new task learning to historical knowledge, effectively solves the problem of catastrophic forgetting and coupling of each modal model, realizes the traceability, explainability and combinability of model evolution, and reduces the business impact risk of model online to production environment.

This invention provides an evaluation device, evaluation system, evaluation program, and evaluation method that enable highly accurate assessment of the business impact of individual vulnerabilities in implemented hardware and software. [Solution] The evaluation device comprises an input unit, an identification unit, a calculation unit, an output unit, and a storage device that stores vulnerability information, including at least the technical impact characteristics for each of several existing vulnerabilities. The input unit receives externally configured device information and first impact information, which evaluates the degree of business impact on the system under evaluation if any of the configured devices are subjected to a cyberattack. The identification unit identifies one or more vulnerabilities present in any of the configured devices based on the configured device information and vulnerability information. The calculation unit extracts the technical impact characteristics for each of the one or more vulnerabilities from the vulnerability information and calculates second impact information for each vulnerability by correcting the first impact information using the technical impact characteristics. The output unit outputs the second impact information.

Provided are an evaluation device, an evaluation system, an evaluation program, and an evaluation method that can highly accurately evaluate the degree of business influence due to individual vulnerabilities related to hardware and software that are installed. The present invention comprises: a storage device that stores vulnerability information including at least technical influence characteristics relating to each of a plurality of existing vulnerabilities; an input unit for inputting, from outside, constituent device information about one or more constituent devices constituting a system to be evaluated, and first influence degree information obtained by evaluating the degree of business influence on the system to be evaluated if any one of the constituent devices is subjected to a cyberattack; an identification unit that identifies one or more possessed vulnerabilities that exist in any one of the constituent devices, on the basis of the constituent device information and the vulnerability information; a calculation unit that extracts, from the vulnerability information, the technical influence characteristics relating to each of the one or more possessed vulnerabilities, and calculates second influence degree information by correcting the first influence degree information using the technical influence characteristics for each possessed vulnerability; and an output unit that outputs the second influence degree information.

The application relates to the technical field of big data processing, and provides a multi-cluster index updating method, device, equipment, medium and product.The method comprises the following steps: for each search cluster in a search cluster set, the search cluster is determined as a target search cluster for current index updating, the business flow of the target search cluster is smoothly migrated to the remaining search clusters, and data index updating is performed on the target search cluster after the business flow diversion is completed; and after all the search clusters complete the data index updating, corresponding business flows are allocated to the search clusters. The multi-cluster index updating method provided by the application avoids the unstable interface response caused by the simultaneous index updating of all the clusters through the strategy of cluster-by-cluster isolation updating and flow smooth migration, the flow allocation is uniformly restored after the updating of all the clusters is completed, the business influence generated in the updating iteration process is controlled at a very low level, the performance and stability of the search system are greatly improved, and the user experience is improved.

This invention discloses an intelligent detection method and system for legacy system code technical debt, belonging to the field of software engineering technology. The method includes: a multi-dimensional code knowledge graph construction step, a dynamic construction step of a structural debt pattern library, a topological constraint relaxation subgraph isomorphic matching step, a business impact score jointly driven by graph centrality and version history step, and a multi-objective priority ranking and refactoring strategy closed-loop recommendation step. This invention achieves deep modeling of code structure relationships by constructing a code knowledge graph, achieves systematic detection of architecture-level anti-patterns through subgraph isomorphic matching, achieves quantitative priority ranking of technical debt through business impact scoring, and achieves continuous adaptive optimization of detection accuracy through closed-loop feedback.

The present application relates to a security evaluation management and control method, system, device and medium of a controlled network environment, and belongs to the technical field of network security. The method comprises: collecting and preprocessing multi-source heterogeneous data, and outputting standardized multi-source heterogeneous data; matching the business type according to the business feature template, optimizing the weight and combination of the basic risk evaluation index system, and obtaining a customized index system; inputting the standardized multi-source heterogeneous data into the system after quantization, and outputting the current risk evaluation result and the future risk trend prediction result; extracting multi-modal features, carrying out abnormal behavior detection after fusion through an attention mechanism, and outputting the detection result; finally, inputting the evaluation, prediction and detection results into a reinforcement learning control model, executing an initial strategy, calculating the risk reduction rate and the business impact degree, dynamically adjusting the reward function and optimizing the loss function, and outputting a dynamic strategy. The present application takes into account the dual core needs of precise risk prevention and control and business continuous operation of the controlled network environment.

This invention relates to the field of network security technology, specifically to a multi-dimensional dynamic risk assessment system for smart city network systems. The system includes an asset topology construction module, a risk calculation module, a business impact quantification module, and a result output and decision support module. The asset topology construction module collects asset attribute information and communication relationships in real time using active scanning tools and passive traffic monitoring devices to construct an asset topology map. The risk calculation module integrates threat intelligence streams and historical security events to calculate the asset vulnerability score and threat probability score for each asset. The business impact quantification module quantifies and calculates the business impact value based on the set of impact propagation paths and in conjunction with business system value assessment rules. The result output and decision support module generates a global risk matrix based on three-dimensional aggregation, outputting a risk heatmap, a risk prediction model, and a priority list of asset hardening recommendations. This invention enables real-time identification, quantitative analysis, and intelligent decision-making regarding smart city risks.