8 results about "Critical function" patented technology

The invention relates to the technical field of cloud native monitoring, in particular to an eBPF-based adaptive probe deployment and distributed context tracking method, system and device and a storage medium. Performing static analysis and dynamic monitoring on a target application through an adaptive probe scheduler, constructing a function criticality scoring model, intelligently selecting a probe type and deploying the probe type to a key function; the method comprises the following steps: capturing a distributed tracking identifier by applying a semantic probe, analyzing application layer data, performing desensitization processing, and injecting an anchor point context into kernel mode storage; establishing a context transfer mechanism based on the process group identifier, monitoring cross-service calling through a network connection hook probe, and realizing deterministic association transfer by using a socket identifier; and performing multi-level context fusion through a network behavior probe, and associating the network behavior with the application context in real time to generate complete call chain information. According to the method, the problems of static fragility and context fragmentation of probe deployment in a cloud native environment are solved, and self-adaptive end-to-end full link tracking is realized.

The invention relates to a method (100) for ensuring functional safety of a safety-critical function in a distributed system (20), in particular in a vehicle (1) or a device (8) communicating with a vehicle (1), with a first implementation configuration (EK1) and a second implementation configuration (EK2) for performing the safety-critical function, wherein the first implementation configuration (EK1) and / or the second implementation configuration (EK2) are dynamically configured by the distributed system (20), comprising the following steps: a) Collecting (101) first and / or second meta-information (303, 305), wherein the first meta-information (303) describes the properties of the first execution configuration (EK1) and the second meta-information (305) describes the properties of the second execution configuration (EK2); b) Checking (102) the independence of the second execution configuration (EK2) from the first execution configuration (EK1) based on the collected first and / or second meta-information (303, 305); c) Select and apply (103) a mitigation measure, depending on the independence check in step b.

The description relates to a method to secure data processing in a computer arranged according to a hybrid software architecture. The aid hybrid architecture relies on a dual operating system comprising a General-Purpose Operating System “GPOS” and a Trusted Operating System “TOS” running critical functions. The execution of a current application by the GPOS implying an access of at least one primitive to the TOS. The method comprises implementing by the GPOS an authentication procedure requiring an authentication validation granted by the TOS, and upon at least a validation of the authentication by the TOS, authorizing said at least one primitive to access to the TOS.

The invention discloses a software security assessment method and system based on dynamic and static correlation analysis. The method comprises the following steps: automatically decrypting and loading a binary file of target software to recover an analyzable memory image; performing static analysis on the memory image, extracting key assets based on a predefined rule base, positioning a safety key function, and generating a static analysis result containing potential risk points; automatically generating a test case according to the result, and injecting the test case into the target software in operation through a dynamic instrumentation technology to monitor the behavior during operation, and generating a dynamic analysis result; performing correlation comparison on the dynamic and static analysis results to verify the authenticity of the vulnerability and calculate a risk score; and automatically generating a structured security assessment report according to the score and the repair knowledge base. According to the method, full-process automation of vulnerability detection and verification is realized, the false alarm rate is remarkably reduced, the security risk is quantified, and the method can be widely applied to APP security detection and compliance evaluation scenes.

The invention is suitable for the technical field of embedded system security, and relates to an embedded real-time operating system security operation management method, a medium and a terminal.The method comprises the steps that a security protection strategy of a system is designed, and the security protection strategy of the system is solidified into a nonvolatile memory of a security coprocessor through a security interface; the system is powered on, the safety coprocessor guides the main processor to be started and monitors the starting state, a recovery mechanism is triggered if abnormity occurs, the main processor starts a real-time operating system and initializes peripherals, and hardware resource configuration is completed; the security coprocessor monitors a task scheduling signal and an instruction bus of the CPU, checks an entry address and a return address of a key function, and prevents ROP attack; and the security coprocessor performs hardware-level real-time comparison on the monitoring data and the security protection strategy, and triggers a response mechanism if the monitoring data and the security protection strategy are illegal. The method is realized through independent hardware, and the real-time performance, the safety and the reliability of safety monitoring of the embedded system are improved.

This invention relates to a method for coordinating measurement gaps and discontinuous reception, comprising the following steps: S1, terminal capability reporting and identification; S2, network-side collaborative configuration strategy; S3, dynamic adjustment mechanism. This invention provides a method for coordinating measurement gaps and discontinuous reception, which can save terminal power consumption. By forcibly aligning the measurement gaps to the C-DRX period and prioritizing their placement within the onDuration period, connected-state power consumption is minimized. Measurement performance is guaranteed, ensuring the integrity and availability of the measurement gaps. The terminal will not miss necessary measurements due to power saving, ensuring the performance of critical functions such as handover and carrier aggregation, and maintaining network connectivity robustness. Network efficiency is high, as decisions and configurations are primarily made by the network side, requiring minimal modifications to the terminal and being easy to implement and deploy. The dynamic adjustment strategy allows the collaborative relationship to adapt to dynamic changes in the terminal's service status, maintaining the effectiveness of the strategy.

The present specification relates to a method of securing data processing in a computer arranged according to a hybrid software architecture. The auxiliary hybrid architecture relies on a dual operating system including a trusted operating system "TOS" running critical functions and a general operating system "GPOS". The execution of the current application by the GPOS inevitably includes the access of at least one primitive to the TOS. The method includes implementing, by the GPOS, an authentication process that requires authentication confirmation granted by the TOS, and authorizing the at least one primitive to access the TOS at least upon authentication confirmation by the TOS.