100 results about "Defence system" patented technology

Provided are an active defense system and method for an unknown threat. The system includes an intelligent threat early-warning module (10), an unknown threat detection module (20) and a self-adaption defense processing module (30). The intelligent threat early-warning module (10) is configured to perform threat prediction on a power grid situation data set collected from a power information network in real time to obtain threat early-warning information and send the information to the unknown threat detection module (20). The unknown threat detection module (20) is configured to perform threat detection and analysis on collected unknown threat network data when receiving the threat early-warning information to generate a threat analysis report and send the report to the self-adaption defense processing module (30). The self-adaption defense processing module (30) is configured to trigger a defense processing operation corresponding to a preset threat defense strategy according to the threat analysis report.

The invention discloses a power transmission line insulator dual defense system and method, and belongs to the technical field of power transmission line maintenance, in the system, a power supply subsystem generates, stores and conveys high-pressure gas, and a primary defense subsystem and a secondary defense subsystem are respectively communicated with the power supply subsystem through high-pressure conveying hoses to obtain a high-pressure gas source; the first defense subsystem is arranged around an insulator of the power transmission line and forms an annular air curtain to prevent rain and snow from being attached to the surface of the insulator; the secondary defense subsystem detects and removes rain and snow breaking through the annular air curtain; the photovoltaic power supply subsystem is used for providing power for the whole defense system; all the subsystems are electrically connected with the intelligent control subsystem, and the intelligent control subsystem is used for coordinating starting, operation and parameter adjustment of all the subsystems. The problems that an existing anti-icing technology is high in energy consumption and slow in response, an icing micromechanism is difficult to capture, and protection is insufficient due to the fact that extreme working conditions are difficult to reproduce are solved, and efficient blocking and removing of rain and snow are achieved.

The invention provides a domain self-adaption-based generative attack and defense confrontation method. Directional interference on a black-box intelligent system is realized by constructing a generative confrontation network framework. The method takes a domain self-adaption theory in transfer learning as a core, builds a dynamic mapping relation between a white box model group and a black box target system, designs a dual-channel generative adversarial network, jointly supervises sample authenticity and cross-model transfer consistency through cross entropy loss and KL divergence constraint, builds a dynamic boundary feedback system, and achieves the dynamic boundary feedback. And a disturbance generation strategy of the generator is adjusted according to the real-time attack effect, and a self-adaptive attack and defense game closed loop is formed. Compared with a traditional black box attack method, the method has the advantages that migration robustness of an adversarial sample in a model heterogeneous scene is remarkably improved, stable attack efficiency can still be maintained when a defense system has protection mechanisms such as adversarial training and input reconstruction, and the method can be applied to the fields such as penetration testing of an intelligent security system and the like. And a technical support is provided for vulnerability evaluation of the intelligent system in a complex environment.

The invention relates to the technical field of network security, and particularly discloses a heterogeneous network security defense system and method based on artificial intelligence, and the system comprises a full-dimensional perception layer which is used for obtaining original data of heterogeneous network security through a hardware-level data collection and protocol self-adaption technology; the cognitive enhancement layer is used for undertaking the output of the full-dimensional perception layer and optimizing the threat identification precision through four-dimensional spatial-temporal feature fusion and antagonism feature purification; the intelligent decision-making layer is used for accurately depicting a complex attack mode through hypergraph modeling and causal reasoning based on output of the cognitive enhancement layer; according to the method, through integration of four-dimensional spatial-temporal feature fusion and antagonistic feature purification technologies, the identification precision of complex and variable threats in a heterogeneous network is remarkably improved, especially for unknown or variable attack means; by means of hypergraph modeling and causal reasoning technologies, a complex attack mode is accurately described, an optimal defense action sequence is automatically generated, and conversion from passive defense to active defense is achieved.

The invention provides an attack technology and tactical identification method oriented to honey array linkage. The method comprises the following steps: coding according to malicious sample data and associated TTP labels, and constructing a training data set; constructing an interpretable discrimination model for binary classification modeling to obtain a behavior triggering weight vector and an offset item of the malicious sample; extracting dominant trigger rules to construct a mapping inference rule base; obtaining alarm data, extracting a behavior clue based on a preset standard behavior dimension set, converting the behavior clue to obtain a trigger identifier, and mapping the alarm data into an alarm behavior vector; constructing a prediction TTP label set of the alarm behavior vector and recording a trigger path; and encapsulating the behavior semantic data, constructing an execution strategy response rule set, performing mapping in the execution strategy response rule set according to the behavior semantic data to obtain an execution strategy, and adjusting honey array deployment according to the execution strategy. By applying the method, accurate identification and transparent reasoning of the potential TTP in the attack activity can be constructed and realized, and linkage scheduling of a defense system is supported.

The invention discloses a network attack traceability and defense system based on rule reasoning and multi-agent collaboration, which comprises a multi-source data acquisition module in modular design, a quick decision-making module based on rule reasoning, a multi-agent collaboration decision-making module and an attack chain visualization module, and key tasks such as data acquisition, threat identification, path analysis and visual display are cooperatively completed. Two innovation modules of rule reasoning and multi-agent cooperation are introduced, so that the overall intelligent level of the network attack tracing and defending system is improved, the response speed and judgment accuracy of the network attack tracing and defending system in a variable threat environment and the dynamic adaptation capability of a security policy are enhanced, and the network attack tracing and defending system has important application and popularization values.

The invention discloses an anti-bacteriophage escherichia coli chassis cell based on combination of bacteriophage adaptive evolution and a bacterial anti-bacteriophage defense system. Receptor genes of bacteriophages are excavated through co-evolution of bacteriophages T1, T4, T7, vBEcoMP251 and vBEcoMP255 and escherichia coli strains, the resistance of escherichia coli to the bacteriophages is enhanced by knocking out screened bacteriophage receptors on the genome level, and meanwhile, defense systems shedu and septu with the ability to resist the bacteriophages are obtained through screening. The resistance of escherichia coli to the bacteriophage is further enhanced by integrating the gene to the ylbe and yeeP gene loci, construction of multi-resistant broad-spectrum chassis cells of the bacteriophage is completed, and certain application prospects are achieved.

A cell phone case to hold a concealed defense system, comprising, a concealed defense system, a cell phone case, and an attachable means to removably attach the concealed defense system to the back of the cell phone case to form a flat foot that stabilizes and directs the defense system toward the danger or a target. The concealed defense system can be a flat mini pepper spray canister or a flat defense projectile device.

The invention relates to a dynamic defense system and method for durability degradation of a reinforced concrete structure. The system comprises a composite fabric network pre-buried in the reinforced concrete structure, a sensing unit for monitoring the health state of the structure and a response control unit, the composite fabric network comprises conductive row fiber bundles and conductive column fiber bundles which are intercrossed and woven into a two-dimensional matrix skeleton and can be addressed independently; arranging a plurality of repairing microcapsules which adopt a specific sensitive polymer wall material to package a chemical repairing agent at cross nodes, and additionally arranging function execution assemblies at corresponding nodes according to requirements; and the response control unit applies an excitation signal exceeding a preset threshold value to the target node, and generates or triggers the function execution component to form a corresponding external excitation energy field to act on the sensitive polymer wall material of the repairing microcapsule, so that the sensitive polymer wall material is broken or subjected to phase change to release the chemical repairing agent. According to the method, the threat position, the threat type and the threat level can be accurately positioned, and the repair range and strength are dynamically adjusted.

The invention discloses an attack detection method and system for gateway equipment. According to the heterogeneous cooperative defense system based on protocol context awareness provided by the invention, a'kernel mode instruction recombination-user mode adversarial learning 'double-engine architecture is innovatively constructed, and low-delay extraction of attack features and active evolution of a protection strategy are realized. Specifically, the invention provides a migration type adversarial evaluation model, which breaks through the dependence of a traditional detection scheme on protocol grammar, dynamically constructs a cross-protocol attack sample through a generative adversarial network, captures traffic time sequence anomaly in combination with a bidirectional LSTM, and constructs a dynamic graph containing threat propagation probability and resource occupation trend. Therefore, feature migration and generalization modeling can be carried out on unknown or variant attack behaviors, the recognition capability on zero-day attacks and cross-protocol attacks is enhanced, and finally the detection accuracy is improved.

The invention discloses a transformer active defense system testing device and method based on high-speed partial discharge data playback, and the device comprises a high-speed partial discharge data storage unit which stores the original data of partial discharge; the high-speed network interface unit transmits the partial discharge data in the selected network message format; the FPGA data processing and playback unit analyzes the network message, extracts an original partial discharge data point, and converts the original partial discharge data point into a high-speed digital signal according to precise time sequence control; the high-speed digital-to-analog converter converts the high-speed digital signal into an analog signal; the signal conditioning and interface unit is used for conditioning the analog signal into an analog partial discharge signal meeting the input requirement of a partial discharge acquisition unit of the active defense system to be tested; and the control and configuration unit monitors and records the playback process state and the protection action response of the active defense system to be tested. According to the invention, various performance indexes of the active defense system can be verified safely, efficiently and truly.

The invention discloses a network security monitoring and defending system, which comprises a multi-source data acquisition module, an intelligent threat analysis module, a dynamic defending execution module, a central control module and a threat intelligence updating module, and the modules are in bidirectional interaction through encrypted communication links. The central control module realizes multi-source data fusion through a dynamic weighting algorithm, coordinates time sequence scheduling of each module, automatically triggers load balance when the module load exceeds 80%, and ensures stable operation of the system under peak flow; an encrypted communication link guarantees data transmission security between modules, defense instructions are prevented from being tampered, and the overall operation stability of the system is improved by 70% compared with a traditional system.

The application provides a method for identifying attack technology and tactics facing the linkage of honeycomb, comprising: encoding and constructing a training data set according to malicious sample data and associated TTP labels; constructing an interpretable discriminant model for binary classification modeling to obtain the behavior trigger weight vector and bias term of the malicious sample; extracting explicit trigger rules to construct a mapping inference rule library; obtaining alarm data, extracting behavior clues based on a preset standard behavior dimension set and converting to obtain a trigger identifier, mapping the alarm data into an alarm behavior vector; constructing a prediction TTP label set of the alarm behavior vector and recording the trigger path; packaging behavior semantic data, constructing an execution strategy response rule set, mapping the behavior semantic data in the execution strategy response rule set to obtain an execution strategy, and adjusting the deployment of the honeycomb according to the execution strategy. The method can construct and realize the accurate identification and transparent inference of the potential TTP in the attack activity, and support the linkage scheduling of the defense system.

The application discloses a kind of dynamic attack surface transformation active defense system for production system, it is related to network security field, the active defense system includes: system support module, interface interpreter module, mobile target construction module, dynamic arrangement module, management module, information processing module, threat monitoring module;System support module provides the camouflage function of network service, file system and user account, and is converted into standard interface by interface interpreter module for upper module call, mobile target construction module interacts with system support module by interface interpreter, supports dynamic arrangement camouflage resource, dynamic arrangement module adjusts the attack surface characteristics of system resource according to the real-time threat information provided by threat monitoring module, when potential attack is found by threat monitoring module, threat information is passed to management module, and dynamic arrangement module is triggered to adjust, information processing module records log and shows system state and threat alarm, assist administrator decision-making.

The present disclosure provides a security event cooperative defense method, a defense device, a defense system and a medium, relates to the technical field of network security, and aims to solve the problem of how to realize cooperative defense of security events. The method comprises the following steps: a certain defense device acquires a first hash calculation result of a security event of the defense device itself and second hash calculation results of security events of the rest of the defense devices, and obtains the intersection of the first hash calculation result and the second hash calculation results to determine a cooperative defense device for cooperatively defending a certain security event with the defense device itself; the certain defense device acquires a first defense strategy of the defense device itself for a certain security event and second defense strategies of the cooperative defense devices for the certain security event, and performs game playing according to the first defense strategy and the second defense strategies to acquire a final defense strategy of the defense device itself and the cooperative defense devices for defending part of security phenomena of the certain security event. The present disclosure realizes cooperative defense of security events through hash intersection and strategy game playing.

Proposed is a security module suitable for operating on a system comprising a set of resources, the system being suitable for managing at least one service in a cloud computing environment, the system being suitable for implementing cloning operations, a cloning operation involving a source resource contributing to the at least one service before the cloning operation and a target resource contributing to the at least one service at the end of the cloning operation as a replacement for the source resource, the module being configured to clone a resource from the set in accordance with a delay representative of an estimated vulnerability of the resource.

To provide a Tsar-class hydrogen bomb response evacuation system, temporary evacuation structures, a nuclear weapon attack deterrence defense system, and a Tsar-class hydrogen bomb assuming system that can mitigate damage, assuming a direct hit on Tokyo's 23 wards by a Tsar-class hydrogen bomb.SOLUTION: The system includes a preparedness ranking table and temporary evacuation structures 0 to 2 based on the ranking table. The preparedness ranking table is made up of a response readiness depending on the distance from the hypothetical hypocenter of a tsar hydrogen bomb, according to a rank corresponding to the expected time of a tsar hydrogen bomb fall and the expected degree of damage depending on the distance from the hypothetical hypocenter. Temporary evacuation structures 1 and 2, located more than 100 km from the hypothetical hypocenter of a tsar hydrogen bomb, are reinforced concrete buildings with a ceiling made of lead sheet 100 with a filter, and store daily necessities, at least one week's worth of limited water and food, and radiation-resistant protective clothing.SELECTED DRAWING: Figure 1

The application discloses a kind of dynamic security defense method and system based on thermal migration and deep learning, by preliminary discrimination of traffic using intrusion detection system, again using the malicious traffic detection module based on deep learning review and determine as malicious traffic, SDN controller forwards traffic to low interaction honeypot, when attack depth reaches critical point, the copy of normal host of timed snapshot is activated as high interaction honeypot by honeypot management system, then using redirection forwarding engine TCP_REPAIR agent switches connection to high interaction honeypot.The application relates to the field of network defense technology, uses the malicious traffic detection technology based on deep learning, accurately shunts encrypted or non-encrypted normal and malicious traffic, makes up the defect that traditional defense system can only detect non-encrypted traffic, simultaneously using TCP thermal migration technology, optimizes the shortcomings of long time consumption and non-concealed switching in traditional TCP connection switching process, effectively improves the dynamic defense capability of system and utilization rate and decoy capability of honeypot cluster.

The application discloses a plough head mold GXU-F34 for promoting linaloe, and the plough head mold GXU-F34 is obtained by purifying and separating samples cut from old trees and can be used for promoting linaloe. The plough head mold GXU-F34 is a plant endophyte, can continuously produce some enzymes to stimulate the defense system of Aquilaria plants, and a series of enzymes produced by saprophytic fungi microorganisms play an important role in the defense mechanism of Aquilaria plants, and finally lead to the production of linaloe.

This invention discloses a low-altitude unmanned aerial vehicle (UAV) all-domain monitoring and targeted jamming defense system. This invention relates to the field of UAV defense technology and includes an airship platform, a detection module, a jamming module, a decoy module, a control module, a power module, and a ground command center. The airship platform is a tethered balloon, and its pod integrates the core working units of the detection module, jamming module, decoy module, control module, and power module. The power module receives AC power from the ground via a tethered cable. This low-altitude UAV all-domain monitoring and targeted jamming defense system overcomes the inherent limitations of traditional ground-deployed defenses, effectively avoids communication blind spots caused by terrain and features, and upgrades from single-area protection to wide-range coverage. It can capture UAV signals at greater distances, allowing sufficient time for countermeasures, accurately distinguishing between compliant UAVs and illegal intrusion targets, avoiding misjudgments and accidental damage, and ensuring the normal operation of legitimate operations.

A pet protection collar and defense system for a dog, or other animal, includes a collar with at least two electrodes on the exterior side of the collar, an electronics unit and a power supply that may be located on the collar, or in an attached vest, that are operable to create a potential voltage difference between the first and second electrodes when at least one pressure sensing pad in the collar, or vest, detects an external force being applied to it. The electronics unit may provide a wirelessly adjustable countdown delay. The delay is between the time of detecting the external force to the time of creating the potential difference between the electrodes, to allow a pet to engage in normal rough-and-tumble play without shocking a playful second dog that contacts the electrodes.

The application discloses an APT organization malicious code defense method based on prior knowledge guided adversarial training, comprising the following steps: extracting distribution information of malicious code labels; calculating the frequency of each label appearing in a data set, which is used as prior knowledge for subsequent adversarial training; in the adversarial training process, selecting a label which is more likely to be misclassified as a target label according to the distribution information of the malicious code labels, and determining the sampling frequency of the target label according to the appearance frequency of the label through a weighted random sampling technology, so as to guide the generation process of the adversarial sample; using a generative adversarial network (GAN) to generate an adversarial sample; training the generated adversarial sample and the original sample as a training set to obtain a malicious code detection model, and the training target is to minimize the weighted combination of standard loss and adversarial loss, and the defense against malicious code attacks is realized based on the malicious code detection model. The application can improve the overall detection capability and robustness of the APT organization malicious code defense system.

To provide a defense system capable of tracking a suspicious flying object that has left a work area.SOLUTION: A defense system 1A includes a facility 10, a photographing device 30 that generates photographic data of a work area of the facility 10, an unmanned flying body 100 that generates video data during flight, and a control device 40A. The control device 40A performs first detection control to detect a suspicious flying object X that has entered the work area, second detection control to detect that the suspicious flying object X has left the facility, and tracking control to cause the unmanned flying body 100 to track the suspicious flying object X that has left the facility.SELECTED DRAWING: Figure 1

The invention discloses Escherichia coli for fermentation production of riboflavin anti-bacteriophage, and belongs to the technical field of microorganisms. Receptor genes of bacteriophages are excavated through co-evolution of bacteriophages T1, T7, vBEcoMP251 and vBEcoMP255 and escherichia coli strains, the resistance of escherichia coli to the bacteriophages is enhanced by knocking out screened bacteriophage receptors on the genome level, and meanwhile, defense systems Gabija and KELM with the ability of resisting bacteriophages JNUWH1 and JNUWD and defense systems Shedu and Septu with the ability of resisting bacteriophages T4 are obtained through screening. Gene is integrated to a genome to strengthen the resistance of escherichia coli to bacteriophage, construction of the anti-bacteriophage chassis cell is completed, meanwhile, genes lacI, pfkA, edd and eda are knocked out, the anti-bacteriophage escherichia coli chassis cell for fermentation production of riboflavin is obtained, and a certain application prospect is achieved.

The invention discloses a defense system and method for network attacks and electronic equipment. The system comprises a resource monitoring module, a statistics and matching module and an address verification module. The resource monitoring module is used for starting or closing the functions of the statistics and matching module and / or the address verification module according to the key index data and the corresponding threshold value of the protected equipment; the statistics and matching module is used for identifying whether the first connection establishment request of which the token verification fails is attack traffic or not according to a preset source address rule; and the address verification module is used for sending a reconnection establishment notification containing the token to the source address of the first connection establishment request identified as the attack traffic, and identifying the source address corresponding to the first connection establishment request as an attack source address if the second initial signaling message is not received and the number of token verification failures in the statistical period exceeds a threshold value. By adopting the system, the QUIC-based semi-open connection attack can be efficiently defended.

The application discloses a kind of high specificity tumor imaging fluorescent probe, preparation method and application thereof, belong to fluorescent probe technical field, the structural formula of the fluorescent probe is as shown in formula III, formula IV: compared with the specificity fluorescent probe that currently exists, high specificity tumor imaging fluorescent probe III and IV will tumor growth attack system and tumor defense system combination, without introducing bulky targeting group in molecule, also do not need to obtain specific site by a large number of screening, with better performance-price ratio.Compared with the fluorescent probe I and II without being improved, high specificity tumor imaging fluorescent probe can effectively realize the distinction of normal cells and tumor cells at cell level.

The invention discloses an intrusion detection and defense system, method and equipment, a vehicle, a medium and a program product, the intrusion detection and defense system comprises a cooperative controller and a plurality of detection and defense devices, and the detection and defense devices are correspondingly deployed on a plurality of target devices of the vehicle. Cooperative intrusion detection is carried out on a plurality of target devices through each detection and defense device, intrusion detection data is obtained and fed back to a cooperative controller, and the cooperative controller carries out cooperative analysis based on the intrusion detection data of each detection and defense device and sends a defense instruction to the corresponding detection and defense device when an abnormal event is analyzed. And each detection defense device responds to the defense instruction of the cooperative controller so as to perform security defense on the corresponding target device and the network thereof. The cooperative intrusion detection and defense function of the cross-node, cross-domain or cross-regional network on the vehicle is realized, the accuracy of vehicle safety detection is improved, and the safety risk of the vehicle is reduced.

This invention discloses a DNS attack detection and defense system based on adversarial networks, belonging to the DNS field. It consists of a data acquisition and feature engineering module, an adversarial sample generation module, a multimodal detection engine module, and a dynamic defense and feedback system. First, the data acquisition and feature engineering module captures and parses DNS traffic in real time, extracting multi-dimensional behavioral features to generate structured feature data, which is then divided into normal samples and attack samples. This data is input into the adversarial sample generation module, which uses a Wasserstein distance-optimized generative adversarial network to create highly deceptive adversarial attack samples. Next, the normal samples and adversarial attack samples are mixed and input into the multimodal detection engine module for fusion analysis, outputting attack probabilities and classification results. Finally, the classification results are transmitted to the dynamic defense and feedback system, which automatically executes various response strategies and simultaneously feeds feedback into the database update system, forming a closed-loop adaptive defense mechanism. This invention improves the accuracy and efficiency of DNS attack detection.

Provided are anti defense proteins, viruses comprising same as well as methods of producing and using such proteins and viruses. Also provided are methods of identifying putative anti-defense system polypeptides.

This invention provides a user access method and apparatus based on proof-of-work in a mobile target defense system. The method includes receiving a resource request from a target user; allocating the resource request to proxy nodes in a hierarchical proxy cluster through the mobile target defense system, authenticating the target user, obtaining a target proof-of-work task, and returning the target proof-of-work task to the target user; receiving a solution corresponding to the target proof-of-work task from the target user; returning a service result associated with the resource request if the solution is correct; and re-authenticating the target user through the mobile target defense system if the solution is incorrect. By employing the proof-of-work driven user access mechanism provided by this invention, the security and stability of user access are improved in the mobile target defense system.