215 results about "Bytecode" patented technology

The invention relates to the field of risk data visual tracing, and provides a visual track tracing method and system for a risk checking task, and the method comprises the steps: analyzing a heterogeneous data stream, separating a source metadata set, calculating an original structure entropy fingerprint, intercepting an end feature, embedding a global tracking identifier, and generating a packaging data package; generating transformed service data by using dynamic byte code instrumentation, constructing a runtime execution context and a differential snapshot, and transmitting an instantiated track node object according to a shunt delivery strategy; mapping and instantiating the logical topology execution graph based on the Hash fragments, and marking a pollution state and generating a total element execution link graph when the logic topology execution graph is abnormal; the method comprises the steps of generating a topology summary data packet, rendering a real-time state view, responding to physical interaction operation to construct a retrieval request data packet, reconstructing a full-amount service load through topology backtracking and reverse data evolution, and generating an attribution view in combination with static codes and rule description. According to the method, a dynamic trajectory tracing and full-link risk visualization mechanism of massive heterogeneous data is constructed.

The invention discloses a real-time anti-fraud transaction intelligent analysis system and method based on multi-chain collaboration, and the system comprises a dynamic federated learning module which is used for dynamically loading and updating a global model during the operation of a JVM (Java Virtual Machine) by adopting a Java Agent bytecode enhancement technology; the multi-chain collaborative verification engine comprises an alliance chain and a private chain, the alliance chain is formed by taking a plurality of banks as organization nodes and is used for distributed evidence storage of transaction characteristics among financial institutions, and the private chain is maintained by a supervision mechanism and is used for auditing and compliance verification; and the real-time stream processing pipeline processes the transaction request in a stream processing mode to obtain feature data, and makes a decision based on the feature data and the global model output by the dynamic federation learning module. The intelligent risk control system which supports cross-mechanism collaboration, privacy protection, high throughput and low delay is constructed, and the problems that in the prior art, model updating is lagged, a verification mechanism is not transparent, and processing delay is high are solved.

The invention relates to the technical field of mobile application continuous integration automation, and discloses a multi-channel APP automatic packaging system which comprises the steps that byte code files in a released mobile terminal APP installation package are acquired, and an occupied symbol space set is generated; generating an available confusion namespace by using set complementary operation; extracting method-level code change by using an abstract syntax tree difference algorithm, and generating a change method set; generating a patch special confusion rule for the change method set by using a namespace allocation algorithm; compiling and obfuscating the change method set by applying a patch special obfuscating rule to generate a safe obfuscating patch byte code; performing packaging and signature operation on the safe obfuscation patch byte code, and outputting a minimized obfuscation safe hot repair patch pack; according to the method, the technical problems that class definition conflicts or method calling errors occur after the hot repair patch is loaded, and the downloading success rate of a user is affected due to the overlarge size of the hot repair patch are solved.

The invention discloses a contract vulnerability detection method and system based on cross-granularity feature fusion and meta-learning, and relates to the technical field of block chain security, the method comprises the following steps: obtaining a source code and a compiled byte code of a contract to be detected; source code semantic features are extracted from the source code, operation code execution features are extracted from the byte code, and graph structure features are extracted after a program dependency graph is constructed from the source code; performing cross-granularity attention interaction to generate cross-granularity fusion features; performing type-aware feature modulation on the cross-granularity fusion feature and a vulnerability type identifier of the current detection task, training a classifier by adopting a meta-learning strategy, and outputting a vulnerability detection result; and in response to the vulnerability detection result that the vulnerability exists, positioning the vulnerability code position based on the graph-source code attention weight matrix generated in the cross-granularity attention interaction process, thereby solving the problem of poor generalization ability in a rare vulnerability scene with scarce samples.

The invention discloses an AI service intelligent fault tolerance and degradation method, device and equipment based on a Java bytecode enhancement technology, a medium and a product, and relates to the technical field of AI service integration. According to the method, in a class loading period of Java application starting, a loaded class is scanned to identify target methods marked with declarative fault-tolerant annotations, a bytecode operation framework is utilized to enhance the target methods so as to implant a unified fault-tolerant logic interception entry, and then in a running period, when the target methods are called, the target methods are subjected to fault-tolerant annotation processing. And triggering a fault-tolerant interceptor through the interception entrance to analyze the annotation to obtain a fault-tolerant strategy, allocating an independent fault-tolerant component instance to the fault-tolerant interceptor based on the unique identifier of the method, constructing and executing an enhanced call chain containing a fusing check and retry mechanism, and finally, if the execution of the call chain fails, executing the fault-tolerant interceptor. And if yes, a preset degradation method in the fault-tolerant strategy is automatically executed, so that complete non-intrusive decoupling of AI service fault-tolerant management and service logic can be realized, and the reliability of the system is remarkably improved.

The invention provides a monitoring method and system for a high-frequency transaction scene based on an eBPF. The monitoring method comprises the steps that a pre-compiled eBPF byte code program is loaded into a Linux kernel; an eBPF probe is deployed at an event trigger point of each layer of the network protocol stack; establishing a data storage and processing mechanism in a kernel space by using an eBPF Map, acquiring real-time data through a probe, and performing preliminary analysis; further processing is carried out based on the analysis result, and if abnormity is detected, an alarm is given and information is recorded. The technical problem that microsecond-level continuous monitoring and accurate acquisition of abnormal events cannot be realized in high-frequency transactions is solved.

The invention belongs to the field of end-cloud collaborative computing and lightweight virtualization, and provides an end-cloud collaborative lightweight application distribution and isolated operation method and system, which adopts a WASM byte code as a unique format for application distribution, compiles an application into a WASM module at a cloud and then distributes the WASM module to an end side device; the end side equipment combines read-only configuration data of a host with a temporary file system Tmpfs of a memory by utilizing OverlayFS on a file level, and maps the data into a virtual file system in a WASM sandbox; on the symbol level, a dynamic WASI bridge is introduced, according to the requirement of an import section in a WASM module, the native capacity of a host system is injected into WASM operation in a host function mode in real time, and the heterogeneous hardware characteristics of end-side equipment are adapted. The method is suitable for an end-side environment with an immutable operating system as a base, and is compatible with a cloud containerization deployment scene.

The invention provides a kernel bypass-based non-sharing architecture key value cache acceleration method and system, and the method comprises the steps: splitting a complete key value cache processing logic into a plurality of eBPF subprograms, compiling the plurality of eBPF subprograms into bytecode files, loading the bytecode files to a kernel, and mounting the bytecode files to an XDP hook point of a specified network interface; eBPF mapping is created and initialized; the method comprises the following steps: receiving a data packet at a network card driving layer through an XDP hook point, after screening a target data packet conforming to a preset protocol type and a port, analyzing the target data packet to extract a request command type and a key, calculating a hash value of the key, and temporarily storing the request command type and the hash value in a head reserved field of the target data packet; redirecting the target data packet to the target CPU core in combination with eBPF mapping, the request command type and the hash value; and the target CPU core executes data operation on the target data packet to generate a response message, and sends or forwards the response message from the receiving network card to the target network card. According to the method, high-performance cache processing in the kernel is realized.

The invention discloses a Java JAR packet encryption protection method and device, equipment and a medium, and the Java JAR packet encryption protection method comprises the steps: splitting a JAR packet decryption key into two fragments, and statically storing the two fragments in a starter program and a dynamic link library in a nonlinear confusion structure, thereby avoiding the exposure of a key plaintext. During starting, the starter transmits the first secret key fragment to the dynamic link library through secure inter-process communication, and the first secret key fragment is combined with the second fragment in the memory to restore a complete secret key. And during class loading, the Java agent intercepts a request and transmits an encrypted class byte code to the dynamic link library through the JNI, the encrypted class byte code is decrypted by using the restored key, and a plaintext is returned for loading. According to the method, static decompilation and dynamic memory dump attacks are prevented, and the anti-reverse and anti-leakage capabilities of Java software in a privatized deployment environment are remarkably improved.

The invention discloses a data calculation method and device, a storage medium and an electronic device, and relates to the field of data processing.The method comprises the steps that a data calculation request initiated by a client side is received, and the data calculation request at least comprises a service identifier and input parameters; byte codes and service definition information corresponding to the service identification are inquired from a database, the service definition information comprises an input parameter definition, a processing unit definition, execution logic of a processing unit and an output parameter definition, and the processing unit comprises an inquiry unit and a calculation unit; constructing a data processing sequence according to the byte code and the service definition information, the data processing sequence being used for determining an execution sequence of the processing unit; executing a processing task generated according to the data processing sequence, calling a query unit based on the input parameter to obtain to-be-calculated data from the data source, calling a calculation unit to calculate the to-be-calculated data, and obtaining a calculation result output according to the output parameter definition; and sending a calculation result to the client.

The invention relates to a dynamic SQL (Structured Query Language) detection method and system, a program product and a storage medium and device thereof. The method comprises the following steps: deploying a Jar packet for SQL detection to a target server; configuring a javaagent parameter in a starting parameter of a to-be-detected application service of the target server, wherein the javaagent parameter specifies a path of the Jar packet on the target server; when the to-be-detected application service is started, the Java virtual machine loads the Jar packet according to the Java proxy parameters, and byte code enhancement is carried out on an SQL executor so as to insert detection logic in the SQL execution stage; and when the to-be-detected application service processes a request, executing SQL detection through the detection logic inserted by the byte code enhanced code.

The application discloses a concurrent program vulnerability detection method based on fuzzy testing and static analysis, and comprises the following steps: compiling a to-be-detected program source code, obtaining a bytecode file according to the compiling, then performing static analysis to obtain a concurrent vulnerability pair; performing program insertion on the concurrent vulnerability pair to obtain a program binary file with inserted code; taking the program binary file with inserted code as a test program, adding an initial input file in an input queue, adding a concurrent vulnerability-oriented mechanism in AFL and adding a judgment mode of whether an input is interesting, and pruning unfeasible paths; performing fuzzy testing to realize vulnerability detection. The application can not only utilize the characteristics of concurrent program vulnerabilities, use an optimized redundant node static analysis technology to reduce the number of concurrent vulnerability detections, but also use a fuzzy testing technology to efficiently reproduce the occurrence process of the concurrent program vulnerabilities, so that more efficient and more intuitive concurrent vulnerability detection is realized.

The invention discloses an electric vehicle V2G intelligent power distribution method based on sequence control, and the method comprises the steps: collecting power grid operation data and vehicle state data, and constructing an energy state data set after preprocessing; the central scheduling layer generates a self-evolution sequence compiler, and optimizes and generates a sequence control byte code; the group coordination layer constructs an energy state coordination game mechanism and executes local coordination and Nash equilibrium search; the edge execution layer loads the three types of strategies and executes consensus consistency verification and correction; the charging pile terminal executes the S-policy script and collects and uploads execution feedback information; and the central scheduling layer retrains a compiler according to feedback, recompiles scripts and updates a control strategy. According to the method, the self-evolution sequence compiler, the energy state collaborative game mechanism and the multi-strategy consensus executor are introduced, so that dynamic scheduling, adaptive optimization and safe consistent execution of the V2G intelligent power distribution process of the electric vehicle are realized.

The invention discloses a Java decompiling method, device and equipment and a computer readable storage medium. The method comprises the following steps: extracting a class file, a resource file, a configuration file and a static resource by decompressing a Java deployment package; based on a predefined third-party library feature library, utilizing Hash comparison and package name / method signature feature matching to accurately classify the class file into a third-party library or a self-researched code; performing byte code analysis on the self-developed class file to generate structured data, and inputting the structured data into a customized large language model (based on byte code-source code parallel corpus training) to generate an initial source code; the optimization step comprises the steps of correcting errors by a static grammar checker and automatically supplementing annotations by a byte code constant pool; reconstructing a project directory structure based on the package name; a class dependency graph is generated through static call graph analysis; and finally, integrating the initial source code, the dependency graph and the configuration file, automatically generating an interface document, a framework document and a configuration document, and realizing complete reverse engineering of the deployment package.

The embodiment of the application discloses a source code positioning detection method and system, electronic equipment and a storage medium, and relates to the technical field of static security detection. The method comprises the following steps: generating a corresponding bytecode file based on a to-be-positioned source code; the bytecode file comprises structure information, metadata and method information; analyzing the bytecode file to obtain intermediate code corresponding to the bytecode file; parsing the intermediate code to generate a function sequence list called in the to-be-positioned source code; the function sequence list comprises attribute information and calling information of a function; and matching and querying according to the function sequence list to determine position information of the to-be-positioned source code. The application can realize accurate matching and positioning of a source code function, thereby solving the false alarm problem of functions with the same name in different modules and being suitable for a source code function static detection scene.

The invention provides a malicious software detection method based on class distance optimization, and the method comprises the steps: obtaining malicious software sample data, and carrying out the preprocessing of the malicious software sample data; decompiling the preprocessed data to obtain a source code file; selecting byte code features from the source code file, and converting the byte code features into an RGB three-channel image; the RGB three-channel image is expanded by adopting the optimized GAN architecture, and an expanded malicious software sample is obtained; inputting the expanded malicious software sample into a deep neural network to obtain a malicious software family classification result; the generated high-quality malicious software image can be used for data enhancement, so that the model is more stable when facing various malicious software variants, the over-fitting risk is reduced, the reliability of a detection system is improved, the data acquisition cost is reduced, a data set is over-expanded, and the detection accuracy is improved. The deep learning model covers more possible malicious software features in the training process, so that manual intervention is reduced, and the automation level of a detection system is improved.

The invention relates to distributed ledger technologies such as consensus-based blockchains, for example, a Bitcoin blockchain. Computer-implemented methods for a trustless, deterministic state machine that is embodied by the locking script of a spending transaction are described. The spending transaction transfers control of at least one digital asset or portion thereof. The spending transaction references a previous transaction that includes a locking script with a bytecode sequence. The spending transaction also includes a locking script with the same bytecode sequence. The spending transaction can be validated by verifying that the bytecode sequences of the locking scripts of the spending and previous transactions match one another. Control of the at least one digital asset or portion thereof can be transferred as a result of execution of the locking script. For example, the locking script can impose a set of conditions for validation of the spending transaction.

A task scheduling system and method of a BPF-based on-chip heterogeneous multiprocessor system, comprising: a scheduling module and a sending module located at a general operating system Linux end, a receiving module located at a real-time operating system end, a BPF bytecode analysis and execution module and a calculation module, the application uses BPF virtual machine technology, uses BPF bytecode as the transmission carrier between the general operating system Linux and the real-time operating system of the on-chip heterogeneous multiprocessor, and schedules the to-be-processed application program in the part of the general operating system Linux to the real-time operating system in real time, and executes in the BPF instruction analysis and BPF virtual machine. The application can achieve certain load balancing and maximize the use of on-chip heterogeneous multiprocessor resources of the system without increasing the hardware design cost.

The invention relates to a method, system and product for dynamically detecting a service hotspot based on a Java Agent, and the method comprises the following steps: configuring a Java proxy parameter in a JVM starting parameter of a target application service, the Java proxy parameter pointing to a path of a proxy JAR packet; starting the target application service, loading and initializing a Java Agent in the proxy JAR packet by a JVM (Java Virtual Machine) according to the Java proxy parameter, and performing byte code enhancement on a predetermined target method in the target application service through the Java Agent so as to implant a monitoring logic; collecting execution information of the method in real time when the enhanced target method is executed through the implanted monitoring logic; analyzing the execution information in real time according to at least one preset dynamic rule; and when the real-time analysis result meets the dynamic rule, judging that the target method is a hotspot method.

This invention relates to the field of smart contract security and discloses a smart contract vulnerability detection method based on self-supervised learning. The aim is to obtain effective structured representations of smart contract vulnerabilities at the bytecode level, and to improve the robustness of smart contract vulnerability detection by learning key features related to vulnerabilities through self-supervised learning. The method includes: collecting smart contract bytecode; constructing a smart contract opcode program dependency graph; extracting vulnerability-related program dependency graph slices to construct a self-supervised learning dataset and a vulnerability detection model training dataset; training a self-supervised learning model using the self-supervised learning dataset and extracting program dependency graph slice features; training a smart contract vulnerability detection model using the vulnerability detection model dataset; and using the trained self-supervised learning model to extract vulnerability-related features of the smart contract under test, and inputting these features into the trained smart contract vulnerability detection model for vulnerability detection.

The embodiments of the present specification provide a method for generating a bytecode, a method for generating a machine code, and a device. The method for generating a bytecode comprises: obtaining a target source code, and applying a first process to the target source code, the first process comprising: replacing a target statement used for an integer operation in the target source code with a preset objective function; on the basis of the target source code after the first processing, generating a target bytecode, the target bytecode comprising a bytecode instruction generated on the basis of a preset function, and the bytecode instruction instructing to perform the integer operation corresponding to the target statement by means of a preset machine instruction sequence, and to perform an overflow check for the integer operation.

The application relates to a security signaling integration method, a system, an electronic device and a storage medium, wherein the security signaling integration method comprises the following steps: encapsulating a security signaling processing capability based on a bytecode enhancement tool to generate a service component; connecting the service component to a video monitoring signaling platform; and using the service component to provide proxy services for target information on the video monitoring signaling platform, wherein the target information refers to communication information between the video monitoring signaling platform and a target device. Through the application, the problems of strong invasiveness, platform binding and inability to be flexibly plugged in caused by the need to modify platform source code in the prior art security capability integration scheme are solved, and zero-invasion integration, cross-platform universality and dynamic pluggability of security signaling capability are achieved.

This specification provide example Java bytecode injection methods, apparatuses and machine-readable storage media, which can be applied to a Javaagent framework deployed in a Java virtual machine. In an example, a to-be-injected Java bytecode submitted by a target service module in at least one service module is obtained, and a target implementation class corresponding to the to-be-injected Java bytecode is determined. A target injection point type corresponding to the target implementation class is determined, and the target injection point type is respectively matched with mapping relationships maintained in the Java virtual machine to determine a target injection mode corresponding to the target injection point type. A globally unique class transformer is invoked so that the class transformer injects, based on the target injection mode, the Java bytecode into a class file that corresponds to the target service module and that is to be loaded by the Java virtual machine.

The invention relates to the technical field of blockchain security, and discloses a blockchain smart contract byte code level security detection method and system, and the method comprises the steps: carrying out the execution of a semantic model through a contract byte code for the dependence of a control flow and a data flow in the execution process of a smart contract, and constructing a contract execution dependence graph; a two-channel contract semantic coding mechanism is used for mining contract mixed granularity execution track coding; performing trajectory coding based on contract mixed granularity, and performing self-supervised reconstruction learning on non-vulnerability execution samples by using a variational auto-encoder enhanced execution trajectory reconstruction model to obtain potential semantic distribution features; and according to the potential semantic distribution characteristics, performing reconstruction error evaluation on the byte code and the execution track of the intelligent contract input in the detection stage by utilizing a reconstruction error judgment mechanism, and judging whether the intelligent contract has potential security vulnerabilities or not. According to the invention, the accuracy, robustness and generalization performance of blockchain smart contract byte code level security detection are improved.

The present disclosure provides a method and device for restoring obfuscation of an Android string, a computer device and a medium, comprising: converting intermediate bytecode of an Android application installation package data into a first representation file and a second representation file; performing semantic understanding on the second representation file to obtain a control flow graph corresponding to a target method body; identifying obfuscation points based on the control flow graph corresponding to the target method body to obtain a plurality of target candidate sentences; generating a corresponding slice standard representation for each target candidate sentence; reversely constructing a program dependency chain based on the plurality of target candidate sentences to obtain a data flow graph structure; determining a minimum code subset based on the data flow graph structure and the slice standard representation corresponding to each target candidate sentence; performing a reorganization operation on the minimum code subset to generate a subprogram; embedding the subprogram into a class file to obtain a target class file; and executing the target class file through the first representation file to obtain a decrypted string. Thus, the success rate of string decryption is improved.

The present application provides a Java application control method and a management platform. The method comprises: receiving an image inputted by a user, the image comprising bytecode corresponding to a Java application and a runtime dependency file of the Java application, the bytecode corresponding to the Java application being obtained by means of compiling a source code corresponding to the Java application; on the basis of an available Java local interface in the bytecode corresponding to the Java application, identifying an available system call set of the Java application in the runtime dependency file, the available Java local interface being a Java local interface that can be used when the Java application runs in a target container; and when the Java application runs in the target container, controlling a system call actually used by the Java application to be within the available system call set. The method can efficiently and accurately limit system calls that an application can use, without affecting the service of the application.

The invention discloses an object relation mapping-oriented entity class dynamic management system and method and a medium. Comprises: a change monitoring module configured to notify an entity class management framework when a table structure change event is monitored; the entity class management framework is configured to obtain changed table structure metadata from metadata storage when receiving a notification of changing the monitoring module, call a byte code generation engine to generate a byte code of a first version entity class, and load the byte code of the first version entity class through a user-defined class loader; after the first version entity class is successfully loaded, the object relation mapping framework is notified to update a metadata model of the object relation mapping framework to reconstruct an internal mapping relation, and version information of a corresponding table structure in metadata storage is updated; and returning the target version entity class matched with the version indication information to the service system initiating the request. According to the method and the device, the entity class can be updated to adapt to database table structure change under the condition that the application service is not restarted.

Embodiments of the present application provide a Flutter application updating method and device, equipment and a storage medium, the method comprising: obtaining, by a terminal where the Flutter application is located, an intermediate bytecode file having a cross-platform feature; the intermediate bytecode file being used for updating the Flutter application; compiling, by a backend compiler pre-installed in the terminal where the Flutter application is located, the intermediate bytecode file having the cross-platform feature to obtain a binary file corresponding to the terminal where the Flutter application is located; and executing the binary file to update the Flutter application. The Flutter application is updated by using the intermediate bytecode having the cross-platform feature, and only one intermediate file needs to be maintained, so that the Flutter application updating can be applied to any platform, and the intermediate bytecode of the Flutter application can be compiled into a binary file of a specific platform by using the user's usage environment, without introducing an additional background system and without user intervention, so that full hot updating of the Flutter application source code is realized.

The embodiment of the invention discloses a program upgrading method and device, an operating system, equipment, a terminal, a medium and a program, and the method comprises the steps: checking whether a called function has an upgrading link or not when an execution function calls a related byte code; under the condition of determining that the called function has the upgrading link, searching a byte code address of an upgrading function in an upgrading module corresponding to the called function through the upgrading link of the called function; and on the premise of keeping the operation domain of the original module, executing the byte code of the upgrading function based on the byte code address of the upgrading function in the upgrading module corresponding to the called function. The technical scheme of the embodiment of the invention can improve the execution speed of the upgrade program and reduce the memory overhead of the system RAM.

An electronic device and a trusted application calling method are provided. After a client application initiates call information, a trusted application development platform receives the call information, determines a native trusted application corresponding to first identification information of the electronic device carried by the calling information from native trusted applications corresponding to at least two (or more) TEE OSs connected to the trusted application development platform, and sends the calling information to the native trusted applications corresponding to the first identification information. The native trusted application corresponding to the first identification information receives the calling information, determines a bytecode trusted application corresponding to the second identification information from at least one bytecode trusted application installed in the native trusted application according to the second identification information carried by the calling information, and calls the bytecode trusted application corresponding to the second identification information.