Patents
Literature
Patsnap Eureka AI that helps you search prior art, draft patents, and assess FTO risks, powered by patent and scientific literature data.

582 results about "Copying" patented technology

Copying is the duplication of information or an artifact based on an instance of that information or artifact, and not using the process that originally generated it. With analog forms of information, copying is only possible to a limited degree of accuracy, which depends on the quality of the equipment used and the skill of the operator. There is some inevitable generation loss, deterioration and accumulation of "noise" (random small changes, that have not sound) from original to copy when copies are made. This deterioration accumulates with each generation. With digital forms of information, copying is perfect. Copy and paste is frequently used by a computer user when they select and copy an area of text or content.

Multi-image forgery detection method and system based on cross-modal visual large language model

The invention provides a multi-image forgery detection method and system based on a cross-modal vision large language model, and relates to the technical field of image processing and computer vision, and the method comprises the steps: constructing a data set, and carrying out the preprocessing of the data set; according to the preprocessed data, respectively extracting visual features and language features through a pre-trained visual Transform and a language model so as to obtain cross-modal features; according to the cross-modal features, the visual features and the language features are clustered, cross-modal similarity is calculated, a matching relation is established, fusion is carried out, and fused multi-modal features are obtained; and according to the fused multi-modal features, performing adversarial training through a generator and a discriminator to generate an adversarial network. According to the method, high-precision detection and effective detection of multiple image counterfeiting types such as positioning splicing, copying and pasting, AIGC generation and the like are realized.
Owner:GUANGDONG POLYTECHNIC NORMAL UNIV

Strain copyright protection system and method based on DNA watermark technology

The invention discloses a strain copyright protection system based on a DNA watermark technology. The system comprises a DNA watermark embedding module, a block chain storage and verification module, a strain authentication and tracking module and a security and privacy protection module. The invention further discloses a strain copyright protection method based on the DNA watermarking technology. The method comprises the steps of strain copyright information generation and coding, DNA watermark site selection and editing, strain screening and verification, copyright information uplink and strain use and tracking. According to the method, the copyright information of the strain is coded into the DNA watermark, the DNA watermark is embedded into the genome non-functional region of the strain, and the copyright information is stored and verified in combination with a block chain technology, so that intellectual property protection with high concealment and high safety of the biological strain is realized; illegal copying and tampering of strains are prevented, reliable copyright authentication and tracking functions are provided, and the method has wide application prospects and remarkable market value.
Owner:JIYIN CHUANGWU (SHANGHAI) TECHNOLOGY CO LTD

Automatic data transformation during copying and past operations

A method is provided. The method is executed by a transformation engine implemented as a computer program within a computing environment. The method includes selecting a transformation option to transform source data of a source field and providing an input field that prompts for an input. The source data is in a first format. The method includes transforming the source data into transformed data based on the transformation option and the input and providing the transformed data to a destination field. The transformed data is in a second format.
Owner:UIPATH INC

Text information extraction method and system based on large language model

The invention discloses a text information extraction method and system based on a large language model, and belongs to the technical field of natural language processing. Inputting the obtained text information data into the trained text information extraction model, and performing text information processing; wherein the training of the text information extraction model comprises the following steps: constructing a generative and discriminant text information extraction model based on a large language model; constructing a dialogue strategy gradient discrete prompt optimization framework to enhance the prompt stability; and constructing a noise channel matrix, and performing data enhancement and stability enhancement. According to the method, the stability of the model and the accuracy of the extraction result are effectively improved by introducing the judgment component, the balance between generation and copying is optimized by designing the dynamic generation probability calculation module and the extension word list mechanism, the stability and accuracy of text information extraction are effectively improved, and the user experience is improved. And efficient and reliable technical support is provided for scenes such as public opinion analysis and knowledge graph construction.
Owner:WUHAN UNIV

CAD three-dimensional model modeling design method and device and storage medium

The invention discloses a CAD three-dimensional model modeling design method and device and a storage medium, topological information and geometric data of three-dimensional model data are separated, so that the geometric data can be loaded / unloaded as required, dynamic optimization processing of the geometric data can be better carried out according to different design stages and design scenes, and the design efficiency is improved. Therefore, the loading resource quantity of the three-dimensional model is reduced, geometric data cache processing is further introduced, repeated loading and creation of complex geometric curve / curved surface objects are reduced, and the utilization and processing efficiency of geometric data is improved. Meanwhile, under the condition that different topological edge / surface primitives share the same bottom-layer geometric curve / curved surface, geometric data are set to be shared, so that copying and redundancy of the geometric data are avoided, the three-dimensional model loading resource quantity is further reduced, the operation efficiency of system resources is improved, and the system performance is improved. And finally, the use experience of the user is greatly improved.
Owner:CHONGQING NUOYUAN IND SOFTWARE TECHNOLOGY CO LTD

Data protection method and system based on CDP

The invention relates to the technical field of data protection, and provides a CDP-based data protection method and system, and the method comprises the steps: incremental snapshot generation: a data source agent monitors the data change on a main data source, and generates an incremental snapshot; real-time copying: the transmission engine transmits the incremental snapshot to a backup server in real time; snapshot management: the backup server manages the incoming incremental snapshot data, including operations of storage, indexing, compression and the like; and recovery operation: the user can select proper recovery options through the management console, such as a specific time point, a specific application program or a specific file level to carry out recovery operation. By adopting the method, a user can realize minimum data loss and fastest-speed recovery of key data.
Owner:HANGZHOU PEER TO PEER INFORMATION TECH CO LTD

Data replication method and device based on DMA, equipment and storage medium

The invention relates to a data replication method and device based on DMA, equipment and a storage medium. The method comprises the following steps: receiving a data copying instruction, wherein the data copying instruction comprises an initial source address, an initial destination address and a copying data length; determining an alignment difference between the initial source address and the initial destination address; an association ID table is determined according to the data copying instruction and the alignment difference, and in the association ID table, the association ID of one write request corresponds to the association ID of one or two read requests; and for one write request, obtaining a corresponding read request according to the associated ID table and the alignment difference, and writing a target result corresponding to the read request into a target storage medium according to the address of the write request. By adopting the method, the problem that the initial address is not aligned during data copying can be effectively solved.
Owner:沐曦集成电路(南京)有限公司

Disaster recovery method, device and system

A disaster recovery method, device and system can be applied to the technical field of storage. The method comprises the steps that a first data center synchronously copies backup data to a second data center through a first synchronous copying link; under the condition that a third data center is normal, the first data center asynchronously copies the backup data to the third data center through a first asynchronous copying link; under the condition that the third data center breaks down, the first data center asynchronously copies the backup data to a fourth data center through a second asynchronous copying link; wherein the first data center and the second data center are both production centers, the first data center and the second data center are located in a first area, the third data center and the fourth data center are both disaster recovery centers, and the third data center and the fourth data center are located in a second area. The disaster recovery performance of the disaster recovery system can be reduced in a stepped manner, so that user demands can be met to the greatest extent.
Owner:CHENGDU HUAWEI TECH CO LTD

Lock-free single-memory data sharing method and device for embedded real-time system

The invention discloses a lock-free single-memory data sharing method and device for an embedded real-time system. The method comprises the following steps: statically distributing a unique memory space for each message type; when a publisher task needs to update shared data, new data is written into a memory space of a corresponding message type, it is ensured that data writing is completed and is visible to other tasks, the atomic version number of the memory space is progressively increased, and data publishing is completed; and when the subscriber task needs to read the shared data, firstly reading the atomic version number of the memory space, then copying the content in the memory space to the local buffer area, reading the atomic version number again, and if the two version numbers are consistent, confirming that the read data is complete, otherwise, executing the reading process again. According to the method, the use of a lock can be avoided, dynamic memory allocation is avoided, copying of multiple memories is avoided, and efficient, strong-determinacy, extremely-low-memory-overhead, safe and reliable inter-task data communication is realized.
Owner:CHENGDU UNITED AIRCRAFT TECHNOLOGY CO LTD

Data zero-copy processing method and system based on eBPF zero-trust gateway

The invention discloses a data zero-copy processing method and system based on an eBPF zero-trust gateway, and belongs to the technical field of computer network security. According to the method, an XDP program is loaded on a network card driving layer, and an AFXDP technology is combined to construct a kernel mode and user mode shared memory pool UMEM; when an original message arrives, an eBPF unit mounted by an XDP program intercepts the message in real time, a tunnel packaging space is reserved in situ in an original memory, and if the head space is insufficient, a new memory page is logically mapped from a UMEM standby buffer pool to achieve extension. Identity fingerprints are generated by extracting message feature vectors, load in-situ encryption is completed in cooperation with a kernel kTLS module, and data are prevented from being returned to a user mode for processing. According to the method, multiple copying and context switching of a kernel-user mode of a traditional SSL VPN are eliminated, the throughput is improved by 2-3 times, the delay is reduced to the microsecond level, the CPU utilization rate is reduced by 40% or above, application layer DDoS attacks are effectively defended, and the method is suitable for 5G edge computing and cloud native zero-trust gateway scenes.
Owner:JIANGSU ENLINK NETWORK TECH CO LTD

Bionic information processing method and system based on electromagnetic metasurface

The invention relates to the technical field of electromagnetic metasurfaces and bionic computing, and discloses a bionic information processing method and system based on an electromagnetic metasurface. The method comprises the following steps: S1, mapping DNA sequence information into a multi-dimensional coding state of the bionic metasurface information processing unit in an electromagnetic adjustable parameter space; s2, realizing co-evolution of the multi-dimensional coding state in space, frequency, phase and amplitude dimensions by dynamically regulating and controlling electromagnetic response parameters of the bionic metasurface information processing unit; and S3, using propagation and interference of electromagnetic waves in the diffraction neural network and a near-field coupling effect between the bionic metasurface information processing units to complete copying, logical operation and information read-write operation of the DNA sequence information. The functions of DNA coding, copying, logic calculation, information reading and writing and the like are uniformly mapped into the programmable electromagnetic metasurface platform, and cooperative processing of information in the aspects of space, electromagnetism and algorithm is achieved.
Owner:苏州仿生材料科学与工程中心

Data security protection method and system for large model training

The invention discloses a data security protection method and system for large model training. The core of the method is that a data safe box trusted application (TA application) is deployed in a trusted execution environment (TEE) and cooperatively works with a user-defined virtual file system driver at a host machine side, so that an end-to-end secret state data access control link is constructed. Before encryption protection of sensitive data, a measurement value (including code hash, configuration parameters and a runtime state) of a current TEE instance is submitted to a remote verification service through a data safe box TA application, and the verification service only sends the measurement value (including code hash, configuration parameters and a runtime state) of the current TEE instance to the remote verification service after confirming that the TEE environment meets a preset security policy (such as a kernel version, a software version and configuration parameter compliance). And generating a secret key encrypted by a custom virtual file system on a host machine side through derivation. And malicious copying of a system memory and a storage medium is prevented, so that the traditional attack defense capability is effectively improved.
Owner:PANOVASIC TECHNOLOGY CO LTD

Data processing method and system

The invention discloses a data processing method and system, and the method comprises the steps that a first client broadcasts a write command, the write command comprises a first identifier, the first content of a to-be-written first object and a to-be-written first version number, and the first identifier is the local maximum duration identifier of more than half of servers in a copy group; when a local maximum duration identifier of the server in the copy group is a first identifier and a maximum version number corresponding to a local first object is smaller than the first version number, first content and the first version number are written in by the server, and first information indicating agreement of the write command is sent to the first client; the first client broadcasts a submission command when receiving first information sent by more than half of servers including the first server in the copy group, and the submission command indicates that the state of the first content corresponding to the first version number is updated to be submitted. When data copying is achieved, a certain degree of error-tolerant rate is achieved, write operation delay can be reduced, and data processing efficiency is improved.
Owner:HUAWEI TECH CO LTD

Distributed large model reasoning method and system based on modular cache

The invention provides a distributed large model reasoning method and system based on modular cache, and the method comprises the steps: disassembling a prompt into modules which can be independently reused through modular division driven by Schema, and calculating the attention Key-Value state of each module in advance before reasoning for caching. When a user request arrives, the system firstly performs module analysis and cache assembly on a prompt, loads a cache as required and supplements a missed part, and then injects a complete KV state into a reasoning process. Meanwhile, a layered and distributed scheduling mechanism is designed, a global scheduler selects a target GPU based on a cache hit rate and a node load, and a local scheduler manages cache copying and elimination in a node, so that load balancing and cache multiplexing are both considered. According to the scheme, repeated calculation can be remarkably reduced, the first Token delay is reduced, the system throughput rate is increased, and the method is suitable for high-repetition prompt scenes such as code generation and long text question and answer.
Owner:ZHEJIANG UNIV

Printer

1. Name of the Design Product: Printer. 2. Use of the Design Product: For scanning, copying or printing. 3. Design Key Points of the Design Product: Lies in the shape. 4. Picture or Photograph that Best Indicates the Design Key Points: Perspective view. 5. The bottom view is an infrequently used view, so the bottom view is omitted.
Owner:ZHUHAI PANTUM ELECTRONICS CO LTD

Design method of intelligent document indication copying and clearing system based on artificial intelligence

The invention relates to a design method of an intelligent document indication copying and clearing system based on artificial intelligence, and belongs to the field of computer software. According to the handwritten endorsement content recognition method, a handwritten recognition algorithm model is established for handwritten endorsement content recognition, firstly, the handwritten endorsement area image is obtained, input is provided for handwritten content recognition, the handwritten endorsement content is recognized and extracted, manual extraction and input work is avoided, and the difficulty and measurement of manual recognition work are reduced. In order to improve the accuracy of content finally obtained by handwritten instructions, a content error correction link is added, a content error correction algorithm model is established, error detection is carried out from the two aspects of word granularity and word granularity through word segmentation, an optimal correction word is obtained through a language model, error correction is completed, and the final accuracy of handwritten content recognition is greatly improved. And through a template engine technology, the document is automatically generated according to the constructed copying and clearing template, so that the work of manually sorting and inputting the document is omitted, and the document circulation speed is greatly improved.
Owner:BEIJING INST OF COMP TECH & APPL

Systems, methods, and devices for preventing credential passing attacks

In some embodiments, a computer-implemented method for preventing credential passing attacks may include receiving an input; determining whether the input is a credential access command, wherein the determination includes searching for occurrences of references to executables related to adding, reading, copying, or performing actions with respect to a credential, if the input is determined to be a credential access command, performing anomaly detection, wherein performing the anomaly detection includes evaluating whether a user is a valid domain user, whether an elapsed time of the credential is greater than a maximum lifetime of the credential, and whether a privilege attribute certificate of the credential is valid, determining that an anomaly exists if the command was generated by an invalid domain user; an elapsed time of a credential is greater than a maximum lifetime, or the privilege attribute certificate of the credential is invalid, and performing mitigation of the anomaly.
Owner:SENTINELONE INC

Method and system for realizing compatible file hard link and S3 shallow copy based on distributed key-value pair

The invention discloses a method and a system for realizing compatible file hard link and S3 shallow copy based on a distributed key-value pair, a file metadata key-value pair is used as a metadata storage main body of a file or a directory, a key consists of a file system ID (Identity), a parent directory ID and a file or directory name, and a value contains metadata information; a reverse index file handle key value pair is introduced to serve as a unique invariant identifier, a key is composed of a file system ID, an initial parent directory ID, an initial file or first N characters of a directory name and a file ID, and a value contains a current file metadata key and a reference count. When files or directories are created and deleted, the files or the directories are located at the same one-key value pair node in a large probability, and one-stage submission is supported to improve performance; hard linking and S3 shallow copying are achieved at the same time, independent file metadata key-value pairs and reverse index file handle key-value pairs are created for the hard linking and the S3 shallow copying, reverse index file handle keys of the target file are recorded by file metadata values of the file metadata key-value pairs, reference counts of the reverse index file handle values of the target file are updated, and performance and compatibility are both considered.
Owner:SANDSTONE DATA TECH CO LTD +1

Canvas element copying and pasting method and device, electronic equipment and storage medium

The invention provides a canvas element copying and pasting method and device, electronic equipment and a storage medium, and belongs to the field of data copying and pasting, and the method comprises the steps: obtaining to-be-copied canvas element data, carrying out data coding on the to-be-copied canvas element data to obtain user-defined type data, and storing the user-defined type data in a database; performing data type conversion on the to-be-copied canvas element data to obtain alternative type data, and storing the user-defined type data and the alternative type data into a pasteboard; after a pasting request is received, whether the target pasting position supports the user-defined type data or not is judged, if the target pasting position supports the user-defined type data, the user-defined type data are analyzed and pasting operation is executed, and if the target pasting position does not support the user-defined type data, the alternative type data are analyzed and pasting operation is executed. According to the method, the to-be-copied canvas element data is encoded into the user-defined type data to reduce the data volume of the pasteboard, and is converted into the user-defined type data and the alternative type data to shorten the data analysis time length, so that the user experience is improved.
Owner:WUHAN JINGCHEN INTELLIGENT IDENTIFICATION TECH CO LTD

Software development environment construction method and device, equipment, medium and program product

The embodiment of the invention provides a software development environment construction method and device, equipment, a medium and a program product, and relates to the technical field of software development. The method comprises the following steps: acquiring a software development kit on a target architecture host machine; creating a file structure of the container mirror image, and copying the software development kit into the file structure; in any host machine, setting a prefabricated basic mirror image, and copying contents in the file structure into the basic mirror image in a layering manner through a file structure copying instruction to obtain a container file of the container mirror image; and constructing a container mirror image based on the container file, wherein an environment provided by the container mirror image is used for developing software of the target architecture. By the adoption of the method, a software development environment based on the basic mirror image can be constructed, the purposes of cross compiling, automatic compiling and testing can be achieved in a cross-framework mode, the software development difficulty can be lowered, and the software development efficiency can be improved.
Owner:上海云骥智行智能科技有限公司

Hierarchical verification-based data synchronization method, apparatus and device, and medium

The invention relates to the technical field of data processing, can be applied to business scenes of financial science and technology, medical health and the like, and discloses a data synchronization method, device, equipment and medium based on hierarchical checking.The method comprises the steps that partitioning operation is conducted on source end data and target end data, a hierarchical check structure containing root check values is constructed, and the source end data and the target end data are synchronized; comparing whether the root verification values are consistent or not; and when the root check values are inconsistent, traversing and comparing the hierarchical check nodes, identifying data blocks which are different from the content of the target-end data block sequence in the source-end data block sequence, transmitting the different data blocks from the source-end device to the target-end device, and completing data updating at the target end. According to the method, accurate identification of data content differences is realized through a hierarchical verification structure, only data blocks with differences are transmitted, and waste of network and storage resources caused by a traditional full-quantity copying mode is avoided, so that the efficiency and reliability of data migration are remarkably improved on the premise of ensuring data consistency.
Owner:PING AN TECH (SHENZHEN) CO LTD

Document management method and system and computer readable storage medium

The invention relates to the technical field of industrial document management, in particular to a document management method and system and a computer readable storage medium. The method comprises the following steps: constructing a structure tree according to a plurality of documents and a plurality of entries; according to a preset standard relationship type, establishing an association relationship between the entries; according to user requirements, target operation is executed on the items in the structure tree, and the target operation comprises any one of item reference, item copying and item distribution. The method not only solves the problems of cross-document multiplexing of contents, consistency keeping and circulation and use of entries in a plurality of contexts, but also realizes fine management control of the entry level.
Owner:SHANGHAI YILEAD INFORMATION TECH CO LTD

Element generation method and device, computing equipment, storage medium and program product

The embodiment of the invention provides an element generation method and device, computing equipment, a storage medium and a program product, and the element generation method comprises the steps that in response to a selection operation of an element copying interface, a first element corresponding to the selection operation is acquired, and first text content and first picture content are extracted from the first element; inputting the first picture content into an image analysis model to generate first text description information, and inputting the first text content and the first text description information into a semantic generation model to generate second text content and second text description information, the second text content and the second text description information are used for describing a second element which has the same structure and different content with the first element; and inputting the second text description information into the image generation model to generate a second picture content, and combining the second picture content with the second text content to generate a second element. Therefore, the generated elements are kept the same in structure and different in content, and the diversity of element copying is enriched.
Owner:BEIJING KANYUN SOFTWARE CO LTD

Data processing method and device, computer equipment, readable storage medium and program product

The invention relates to a data processing method and device, computer equipment, a readable storage medium and a program product. When data migration is needed, the first target number of data blocks and the second target number of verification blocks in each data strip are determined based on the first number of target storage devices and the total number of first storage devices, the data blocks are migrated, and the number of the verification blocks is adjusted. The data blocks and the verification blocks in each data strip meet the first target number and the second target number after migration. Compared with a traditional method of copying the whole data of the target storage device to other storage devices, the scheme analyzes the ratio of the data blocks to the verification blocks in each data strip after data migration by combining the first number and the total number, migrates each data block and adjusts the number of the verification blocks, and the data migration efficiency is improved. And the data blocks and the verification blocks of each data strip after migration respectively meet the first target number and the second target number, so that the space utilization rate of the storage array is improved after data migration.
Owner:SUGON INFORMATION IND +1

printer

1. The name of the product of this design: printer. 2. Purpose of this design product: for scanning, copying or printing. 3. The design key point of this appearance design product lies in the shape. 4. The picture or photo that best illustrates the design points: three-dimensional picture. 5. The bottom view is not commonly used and is omitted.
Owner:ZHUHAI PANTUM ELECTRONICS CO LTD

Method for improving data acquisition efficiency of electric energy meter, acquisition terminal and medium

The invention provides a method for improving the data acquisition efficiency of an electric energy meter, an acquisition terminal and a medium, and aims to solve the problem of acquisition failure caused by various data identifiers of a 645 protocol electric energy meter, a pre-acquisition mechanism is introduced, the actual support condition of the electric energy meter for multiple selectable identifiers is detected in advance, a copying and reading scheme is dynamically adjusted, and the acquisition efficiency of the 645 protocol electric energy meter is improved. The acquisition success rate and the execution efficiency are improved; and meanwhile, state marking is performed on the electric energy meter with abnormal communication response, and overtime judgment threshold adjustment is performed based on the state, so that invalid occupation of resources is avoided, and the overall operation stability of the system is improved. On the premise that field equipment is not replaced, the integrity, timeliness and system compatibility of data collection can be effectively improved, and the method is suitable for large-scale and multi-type electric energy meter coexisting intelligent meter reading scenes.
Owner:QINGDAO ITECHENE TECH CO LTD

Method for quickly copying form based on browser plug-in

The invention provides a method for quickly copying a form based on a browser plug-in. The method is used for executing the following steps: a plug-in installation and activation step, a data source selection step, a data extraction step, a target page positioning step, a data matching and filling step and a data verification and adjustment step. According to the method, the problems that in the prior art, manual copying and pasting of the webpage table data are tedious in operation, low in efficiency and prone to errors can be solved, and therefore rapid, accurate and convenient webpage table data copying is achieved.
Owner:GUANGDONG NAISI INTELLIGENT TECH CO LTD

Visual anti-counterfeiting traceability method and system for seafood products based on block chain

The invention discloses a block chain-based visual anti-counterfeiting traceability method and system for seafood products, and relates to the technical field of traceability and anti-counterfeiting. The method comprises the following steps: acquiring a traceability information set containing a product unique identifier PID; the blockchain smart contract encapsulates the information into evidence storage data and records the evidence storage data to be stored on the chain; generating a dynamic two-dimensional code image containing a random number and a digital signature based on the on-chain PID; the front-end page responds to the suspension operation to trigger visual display; and the client scans the code and verifies the validity of the digital signature, and finally generates a visual traceability detail page and returns the visual traceability detail page to the client after verification succeeds. The three-in-one dynamic two-dimensional code technology is used for effectively resisting the copying and counterfeiting risk, the refined management and control of sensitive information are realized in combination with a permission-driven data layering mechanism, and the user traceability efficiency is remarkably improved by using suspension trigger type interaction. The technical problems of weak anti-counterfeiting capability, data display mixing and operation flow splitting in traditional seafood traceability are solved.
Owner:LIAONING UNIVERSITY

Optimizing dirty page copying for a workload received during live migration that makes use of hardware accelerator virtualization

Embodiments described herein are generally directed to an improved workload submission handling strategy for workloads received during live migration and targeting VFs of a hardware accelerator. In an example, while performing a live migration of a source VM running on a source host to a destination VM of a destination host, a new workload targeting a VF of a first HW accelerator of the source host is identified by a HW status manager of the source host by trapping the workload submission channel. Based on a nature of the new workload, the HW status manager determines whether to transfer the new workload to the destination host. Responsive to an affirmative determination, the HW status manager causes the new workload to be submitted to a VF of a second HW accelerator of the destination host by incorporating information regarding the new workload within a migration stream associated with the live migration.
Owner:INTEL CORP

Security monitoring method and system, electronic equipment and storage medium

The embodiment of the invention provides a security monitoring method and system, electronic equipment and a storage medium, and the method comprises the steps: loading a security interception program in a kernel mode, the security interception program is used for monitoring a security event when a container runs in an operation system, and the container is used for creating the container in the operation system when the container runs; updating the preset security policy through the security interception program to obtain a target security policy; monitoring and managing the safety behavior of the container according to the target safety strategy in the user mode; various events during container running can be intercepted and processed by running the safety interception program in the kernel mode, frequent switching between the user mode and the kernel mode or a large amount of data copying operation are not needed, consumption of system resources is low, and the resource utilization rate and the response speed of the container are improved; by dynamically updating and adjusting the preset security policy, the security requirement during container operation can be better met.
Owner:CHINA TELECOM CLOUD TECH CO LTD