119 results about "Distributed security" patented technology

The invention relates to the technical field of data security management, and discloses a blockchain-based forestry data security management system and method, and the system comprises a data collection unit which is used for comprehensively obtaining a multi-dimensional information flow of forest ecology and resource states; the data processing unit is used for carrying out deep cleaning, standardized regulation and feature value extraction on the originally collected mass heterogeneous data; the block chain storage unit is used for constructing a permanent, tamper-proof and distributed secure storage infrastructure platform of the forestry core data; a verification unit; the safety control unit is used for constructing a covering data transmission, storage and access full-chain depth defense system structure model; a user interface unit; an auditing unit; and a network communication unit. The method is reasonable in design, and the intelligent analysis module is used for processing to form a forest interannual growth trend prediction function distribution map state visual output result set.

The invention discloses a distributed natural gas pipeline network safety monitoring system and method based on edge computing, and belongs to the field of natural gas pipeline network safety monitoring, and the method comprises the steps: deploying monitoring units at a plurality of target nodes of a natural gas pipeline network, collecting the operation data of a local node by each monitoring unit, and carrying out the multi-dimensional anomaly detection through a first deep learning model; a local security risk event is identified. And the monitoring unit uploads the node operation data and the security risk event to the cloud monitoring center. And the cloud end summarizes and analyzes the data of the plurality of monitoring units to obtain global operation data of the pipe network, and identifies global safety risks through a second deep learning model. And based on the global security risk identification result, the cloud generates a corresponding control instruction and issues the control instruction to the target monitoring unit. And an execution unit connected with the target monitoring unit executes a safety action according to the control instruction. According to the method, accurate, real-time and distributed safety monitoring of the natural gas pipeline network can be realized, and the operation safety and the risk prevention and control capability of the pipeline network are improved.

The invention relates to the technical field of network security protection, in particular to a power monitoring network security detection method and system. The method comprises the following steps: performing comprehensive monitoring object identification on a power monitoring network to obtain a power monitoring object list; carrying out comprehensive monitoring resource demand analysis on the power monitoring network according to the power monitoring object list to obtain power network monitoring resource demand data; performing intelligent agent node deployment analysis on the power monitoring network according to the power monitoring object list and the power network monitoring resource demand data to obtain an agent node deployment topological graph; performing lightweight intelligent agent deployment on the power monitoring network according to the agent node deployment topological graph to obtain a power distributed security monitoring network; and performing monitoring strategy analysis on the power monitoring network based on the power distributed security monitoring network to obtain a power agent node monitoring rule set. According to the invention, comprehensive identification of network threats is realized, and the risk of false alarm and missing alarm is reduced.

The embodiment of the invention provides a test case sample cutting method, device and system and a storage medium, and relates to the technical field of network security testing. The method comprises the following steps: constructing an industrial control system attack tactical library; wherein the tactical library comprises classified and arranged attack techniques and corresponding security attributes; performing information analysis and semantic analysis on the test case sample to generate structured data of the test case sample and / or function points in the test case sample; and cutting the test case sample according to the security attribute and / or the structured data and / or the function point to obtain a test fragment corresponding to the security attribute and / or the function point. According to the method, classification-based attack techniques and security attributes are cut by constructing a tactical library, key information can be accurately extracted and test intentions can be understood through information analysis and semantic analysis, redundant tests are avoided, cut test fragments can concentrate on specific security attributes or function points, the test coverage range is more accurate, and the test efficiency is improved. And the distributed security test effect is improved.

The invention discloses a ground-to-ground heterogeneous cluster formation control method and system based on an adjustable funnel algorithm, and relates to the technical field of distributed formation maneuvering control, and the method comprises the steps: building a dynamic model of a ground-to-ground heterogeneous cluster, and building an undirected graph representing an interaction topological structure of the ground-to-ground heterogeneous cluster; modeling a distributed safety critical formation maneuvering control problem of the air-ground heterogeneous cluster; a fully distributed dynamic compensator facing each follower and a formation maneuvering controller based on an adjustable funnel algorithm are designed, and then a safety-critical control framework based on a disturbance observer is adopted to construct a composite controller; and acquiring a virtual navigator signal and inputting the virtual navigator signal to the constructed various controllers to obtain an actual formation control signal of each follower, and executing distributed safety-critical formation maneuvering control on the followers. Through a distributed safety critical formation maneuvering strategy based on an adjustable funnel method, collision / obstacle avoidance and disturbance suppression of an air-ground heterogeneous cluster can be realized.

The invention discloses an intelligent inspection optimization method for power equipment, and belongs to the technical field of intelligent operation and maintenance of a power system, and the method comprises the steps: firstly obtaining multi-source original data of substation equipment, and fusing the multi-source original data to form fused data; then an alliance chain network is constructed, each transformer substation serves as a node, a plurality of transformer substation nodes, an operation and maintenance center node and a supervision mechanism node jointly form the alliance chain network, and fusion data are stored and shared; federal learning adaptive model optimization is adopted, an edge computing MEC server is deployed at each substation node, and each substation node trains an AI model on the edge computing MEC server based on local data; according to the method, distributed security storage, cross-station credible sharing and distributed model training optimization of the substation inspection data are realized, the model generalization ability is improved while data privacy is protected, the problems of data islands, privacy leakage, response delay and the like in a traditional scheme are solved, and the operation and maintenance efficiency and security of the substation are remarkably improved.

This disclosure describes techniques for distributing security service by performing security policy-based routing among network devices. The techniques include determining a security function to be applied to a packet of a data traffic flow. The security function may be determined based on a security policy and an intended destination of the packet. The techniques may also include determining whether a network device is capable of performing the security function. A route for the packet to the destination may be determined based on whether the network device is capable of performing the security function. As such, distributing security service techniques may improve efficiency in data traffic routing, and may reduce cost and / or prevent redundancy in security service application.

The invention discloses a multi-cascade network security risk dynamic assessment and protection system, and relates to the technical field of network security. Comprising a multi-cascade data acquisition and preprocessing module, a dynamic data traceability graph construction module, a distributed security knowledge graph collaboration module, a multi-cascade risk causal evaluation module and a dynamic protection and closed-loop optimization module. According to the method, a collaborative architecture of multi-cascade data acquisition and preprocessing, dynamic data traceability graph construction, distributed security knowledge graph collaboration, multi-cascade risk causal evaluation and dynamic protection and closed-loop optimization is constructed, and system operation parameters are continuously optimized through a closed-loop feedback link. The dynamic adaptation capability of network security risk assessment to the multi-cascade architecture and the comprehensiveness of assessment results are remarkably improved, and the problems that in the prior art, network security assessment mostly depends on single-dimension data, cross-module deep collaboration is lacked, and dynamic changes of the multi-cascade architecture are difficult to adapt can be solved.

The invention discloses an off-site distributed security data transaction method for privacy protection, and belongs to the field of privacy computing. According to the method, around direct transaction between a data seller and a data buyer, the problems of data tampering and data leakage possibly caused in a traditional centralized intermediary mode are solved, and operation autonomy and data transaction flexibility are returned to a data owner. Specifically, a security calculation method is innovatively introduced, and the balance of data security and availability between a data seller and a data buyer is realized. A security data analysis service provided for a buyer by a seller is presented through two specific security transaction examples (1) based on homomorphic encryption linear regression training and 2) based on secret sharing linear regression training, so that security transaction of data of the seller / buyer is ensured. According to the method, the problems of difficult data copying prevention and difficult secondary transaction prevention are effectively solved, the confidentiality and integrity of data of all parties in the transaction process are ensured, the risk of different credibility of participants is effectively handled, the interference of malicious participants is prevented, and the security and reliability of data transaction are further improved.

The invention relates to the technical field of risk management and control, in particular to a distributed security risk management and control platform fusing situation awareness and an intelligent contract, and the platform comprises an acquisition module, a situation awareness module, a prediction module, an identification module, and an intelligent contract execution module. Multi-dimensional dynamic parameters related to a port cold chain are comprehensively collected and calculated, temperature difference fluctuation is used for reflecting environment stability, frequency jitter is used for reflecting equipment operation states, queue density and emergency brake behaviors are used for reflecting operation intensity and operation risks, trend judgment is carried out based on different situation index occurrence frequencies in a prediction module, and a prediction result is obtained. And in combination with the time continuity and the space aggregation of the abnormal nodes, the transportation speed is finally automatically adjusted through the intelligent contract, so that the problems of risk early warning lagging and difficulty in effective implementation of field control caused by response delay and insufficient prediction timeliness due to dependence on centralized processing are effectively solved.

The invention discloses a wheeled robot distributed safety control method based on a control barrier function, and the method comprises the following steps: S1, building multi-robot communication, so as to enable each robot to exchange state information with a neighbor robot in a limited communication range; the state information comprises position information and speed information; s2, designing a distributed formation controller according to the formation control target; s3, constructing a distributed control obstacle function; s4, constructing a distributed safety controller for each robot according to the distributed control barrier function; s5, constructing an overall safety barrier function for verifying the overall safety of the robot; and S6, deploying the distributed security controller obtained in the step S4. According to the invention, basic topological obstacle avoidance can be realized, self-constraint of each agent is practically ensured, and internal and external consistent security is realized.

The invention relates to a fully-encrypted distributed security aggregation computing scheme in a distributed scene, which comprises a client, the client is connected with a trusted master node (TM) through data transmission, the trusted master node (TM) is connected with a plurality of slave nodes # 1 through data transmission, the trusted master node (TM) comprises an REE and a TEE, the TEE internally comprises a query engine and a global index, and the query engine is connected with the slave nodes # 1 through data transmission. The slave node # 1 is composed of a security local index, a TEE query engine and a data set, and the TEE query engine is connected with the security local index and the data set through data transmission. According to the overall system provided by the embodiment of the invention, the system can realize safe aggregation calculation of data in a distributed environment, and meanwhile, the privacy and integrity of a calculation request are guaranteed; and support of multiple aggregation operators: a safe data transmission mechanism and an encryption aggregation scheme are studied and provided, sensitive information is ensured not to be leaked in the calculation process of different aggregation operators, the calculation performance is optimized, and sub-nodes needing to participate in calculation are reduced.

The invention provides a time mark event triggering reinforcement learning multi-agent consistency control method and system, and relates to the technical field of multi-agent cooperative control. Establishing a multi-agent system dynamics model comprising a leader and a plurality of followers on the time mark; based on the state information of the leader and the follower, constructing a tracking error and consistency error dynamic equation between the intelligent agents; a reinforcement learning controller based on a neural network is constructed, and an optimal control strategy and a performance index function are approached; an event triggering mechanism is designed, and the controller is triggered to update only when the local error of the intelligent agent exceeds a dynamic threshold value; by constructing a Lyapunov function on a time scale and solving a linear matrix inequality condition, bounded consistency of the system is ensured, and a Zeno phenomenon is eliminated. Unified modeling and distributed safety control of the time scale multi-agent system in the non-ideal environment are achieved, communication resources are saved, the convergence speed is increased, and the robustness and practicability of the system are enhanced.

The invention provides a distributed security camera network data secure transmission method, which relates to the technical field of data transmission, realizes dynamic security evaluation of nodes in a camera network by constructing a two-dimensional dynamic confusion matrix, and realizes the security of the nodes in the camera network by combining a key fragmentation strategy and a hop distance discontinuous path scheduling mechanism. And the anti-attack capability and the data confidentiality of the security and protection video data in the transmission process are greatly improved. The main key is split and asynchronously and dispersedly transmitted, so that the risk that the key is intercepted or tampered is effectively reduced; and the data path designed by using the maximum hop distance difference strategy effectively solves the problems of predictability and attack track traceability caused by traditional path continuity. Meanwhile, the integrity and source traceability of the data fragments are ensured through a path closed-loop judgment mechanism at a receiving end, and the safety verification and recombination accuracy of the data at the link level is fundamentally ensured.

The invention relates to the technical field of distributed detection, and discloses a distributed anomaly detection method for a security situation awareness AI large model, which comprises the following steps of: acquiring model architecture network information of the distributed security situation awareness AI large model, acquiring an association characteristic map of a specified expansion hierarchy, and constructing an anomaly detection framework of a stream processing framework. The method comprises the following steps: specifying an anomaly detection hierarchy to construct an anomaly detection framework to perform real-time security situation verification, generating anomaly detection feature distribution, and evaluating the anomaly of each node by using the anomaly detection feature distribution so as to discover potential security threats, and performing customized anomaly detection based on hierarchy and node characteristics so as to improve the security threat detection efficiency. According to the method, the detection accuracy and pertinence are improved, real-time data stream processing can be achieved through the stream processing framework, the security situation change can be quickly responded, and the problem that in the prior art, the reliability of a distributed AI large model can be lowered along with operation is solved.

The disclosure relates to systems, methods and computer readable media for enabling distributed secure remote access from a device via a wide area network (WAN), to a designated physical site covered by local area network (LAN). Specifically, the disclosure relates to a computerized systems, methods and computer-readable media using hardware-based, virtual private network pairs having preshared encryption / decryption keys, operable to transmit data over WAN from a physical computing device to an exclusively designated site in a physical area covered by a LAN.

The invention relates to the technical field of secret-related electronic file transmission and management, and discloses a secret-related electronic file secret transmission safety management system which comprises a safety management system. The security management system comprises a hardware security support layer, a distributed security storage layer, a file full life cycle security management layer, a user identity authentication and behavior auditing layer, a security auditing layer and an emergency response layer. The confidential electronic file secret transmission security management system integrates a trusted computing chip, security boot firmware, a physical unclonable function (PUF) and an optical isolation technology through a hardware security support layer, is different from a traditional system which only depends on software protection, constructs a trusted execution environment from a hardware bottom layer, guarantees the operation credibility by using the trusted computing chip, and improves the security of the confidential electronic file. The secure boot firmware blocks illegal program loading, the PUF endows the hardware with a unique uncounterfeited identity, and the optical isolation realizes physical level network isolation, so that threats such as hardware tampering and physical attacks are radically defended.

In one aspect, a distributed security-testing infrastructure is used for attack-tree modeling for penetration testing. An API framework, fully distributed and scalable, is used to access the attack-tree modeling based on attack trees, or decision trees, to emulate attacker behavior and decisions taken during an attack. The API framework allows developers to implement the security tools into existing software to perform actions based on desired conditions as defined by the nodes of the attack tree. For example, APIs can be used along with if / else-type statements to create advanced threat models that react based on given conditions to test multiple paths through the attack tree. Nodes of the attack tree are configured to perform actions based on the output of previous attacks in other nodes. This flexible design allows for the easy modification of the threat modeling system to test new scenarios.

The invention discloses a parallel computing and distributed network access risk management and control device and a management and control method, and relates to the technical field of risk management and control. The system comprises three layers, namely network element equipment, a network controller and a security management and control platform, the security management and control platform integrates a PKI-based password infrastructure, a tool engine and an AI engine and uniformly distributes security management and control related strategies, and the network controller is used as an edge execution component and is connected with various network element equipment of a managed network, so that the security management and control related strategies can be uniformly distributed. The risk management and control device is constructed on a full-switching parallel computing architecture which provides a virtual computing power pool. Under the support of high-performance computing power provided by full-switching parallel computing, a safety management and control platform based on a distributed safety management and control system is constructed, unified state monitoring, risk analysis and strategy issuing are carried out on network access risks, and the safety of network access is improved through distributed network event and performance management and control. And network access risk real-time management and control are carried out.

The present invention discloses a lightweight distributed security communication authentication method and system based on blockchain. The method completes the preliminary configuration and preprocessing through a security management center, generates the public parameters of the system and the information used in the signature authentication process by using the elliptic curve digital signature algorithm, and publishes the authentication information to the blockchain; the edge nodes perform the processing and operation of data locally to complete the authentication process of multiple subjects between the edge nodes and devices and between devices; after the multi-subject authentication process is completed, the negotiation of the shared key is realized through the transmission of three pieces of information. The present invention uses blockchain to realize the storage of key information, ensures the publicity and traceability of data, and reduces the centralization function of the security management center. In the multi-subject authentication process, the data is stored distributively, the distributed authentication between devices is realized, and the negotiation of the shared key is completed, providing security guarantee for the subsequent data transmission.

The invention discloses a distributed security positioning method, device and equipment for a wireless sensor network, and relates to the technical field of wireless sensor networks. For each non-anchor node, two groups of encrypted positioning information of sensors in a triangular neighbor set are received, and the two groups of encrypted positioning information are encrypted through two groups of different keys, so that the non-anchor node can decrypt and compare; determining whether angle measurement information and position estimation values sent by sensors in each triangular neighbor set and received by the non-anchor node are safe or not, so as to establish credibility evaluation for the sensors in each triangular neighbor set, and then determining dynamic barycentric coordinates of the non-anchor node after weighted fusion of each triangular neighbor set based on a trusted triangular neighbor set; and the position estimation value of the non-anchor node is determined by combining the decrypted position estimation value corresponding to the sensor in the trusted triangular neighbor set, so that the safety and the reliability of distributed positioning of the wireless sensor network are improved.

The invention discloses a computing power network resource credible scheduling method based on cloud network security fusion, and relates to the technical field of cloud computing and network security. Aiming at the problems of low resource utilization rate, insufficient security isolation, lack of credibility evaluation and the like in the existing computing power scheduling, a computing power network architecture containing a distributed security resource pool is constructed, and various security services are deployed through security nodes and serve as trust agents to provide security resource support and credibility evaluation basis for computing power task scheduling. According to the method, node state information is collected through state monitoring modules deployed at all nodes; the node credibility is calculated through a credibility evaluation module on the dispatching center and the security node; and the task scheduling module is used for realizing target node optimization and security service link optimization by utilizing a hierarchical deep Q network (Hierarchical Deep Q-Network) model on the basis of the node state information and the credibility result. According to the method, efficient task scheduling can be guaranteed, meanwhile, a user-defined security policy is supported, malicious nodes are effectively identified, and the security of a computing power network is improved.

The invention relates to the technical field of network equipment security management, and discloses a network equipment policy distribution security management method and system, and the method comprises the steps: obtaining a transmission distance value between network equipment nodes, and setting a security policy distribution path according to the transmission distance value between the network equipment nodes, performing security policy distribution according to the security policy distribution path; acquiring attribute parameters of the network equipment nodes after the security policy is distributed, and determining a policy level coefficient according to the attribute parameters of the network equipment nodes after the security policy is distributed; and according to the policy level coefficient, screening out a to-be-optimized network device node, and merging the security rules of the security policy corresponding to the to-be-optimized network device node to obtain a merged security policy. The distributed security policies can be optimized according to the attribute parameters of the network devices, the processing efficiency of the security policies is improved, and the optimal balance between the security of the network devices and the network performance is ensured.

The present application relates to the field of data processing, more particularly, the present application relates to a kind of based on distributed financial data storage method and system, method includes: obtaining the financial transaction data stream to be stored and is divided to obtain multiple data blocks;For single data block, the distribution variation degree of the data block is calculated, based on distribution variation degree, respectively determine the weighted probability for constructing compression encoding table, encryption round of encryption algorithm and replication factor in distributed storage system, and based on the three key parameters determined in sequence, data block is compressed, encrypted and stored;Compression, encryption and storage are carried out to all data blocks, thus complete the distributed security storage of the financial transaction data stream.The present application controls compression, encryption and storage link by unified index linkage, while improving the anti-statistical analysis ability of encrypted data, realizes the adaptive balance of storage security and resource cost.

The invention relates to the technical field of financial data privacy protection, and discloses a financial data privacy protection method based on a reversible desensitization technology. The method comprises the following steps of: acquiring a multi-source financial data stream, wherein the multi-source financial data stream comprises a transaction data stream and a user data stream; performing feature extraction and privacy risk estimation on the multi-source financial data stream to determine a financial sensitive position and desensitization intensity estimation; setting a reversible desensitization processing mechanism, and generating desensitization financial data based on the desensitization intensity estimation; constructing a distributed secure transmission architecture, and adaptively selecting a data transmission strategy according to a real-time security condition; and transmitting the desensitized financial data through the distributed secure transmission architecture, and realizing reversible desensitization recovery. According to the method, while the privacy of the financial data is effectively protected, the availability and transmission security of the data are guaranteed, and the method is suitable for financial data processing and sharing in multiple scenes.

Techniques for federated distributed security analytics using a swarm node framework to provide a scalable way to improve efficiency and accuracy of determining and remediating security threats, while reducing computational complexity and resource usage of a system. A system may comprise node(s) executing a first engine and a second engine. The first engine may operate in a data plane and receive event data associated with security events, perform a specialized type of function, and generate two classes of output(s): (1) transformed event data output to other first engine(s) of other node(s) and (2) security signal(s) output to the second engine. The second engine may be configured to operate in a control plane. The second engine may receive input(s), including the security signal(s) and determine action(s) to perform with regard to security event(s). The second engine may output instruction(s) to other node(s) and / or derived security signal(s) to other second engine(s).

The application discloses a kind of water conservancy video monitoring safety protection method, system and equipment, and wherein method includes: the smart contract management equipment authentication of alliance block chain architecture, the distributed security access control of decentralization;According to the space-time feature and information entropy analysis of video content Selection adaptive compression algorithm, real-time adjustment compression parameter;Based on the dynamic key derivation algorithm of block chain consensus mechanism and high-precision timestamp, construct double-layer encrypted video transmission mechanism;Based on the distributed hierarchical storage strategy of block chain, execute the hybrid mechanism of local cache and block chain distributed storage;Build timeliness cloud edge collaborative control mechanism.The application realizes the safe access, efficient processing, encrypted transmission, anomaly detection and reliable storage of video monitoring data through the deep integration of edge computing and block chain technology, significantly improves the data credibility, tamper resistance and overall system security of reservoir safety monitoring.

The present invention discloses a distributed safety state estimation method, device and storage medium for an information-physical system, belonging to the technical field of information-physical systems. The distributed safety state estimation method for an information-physical system includes: performing observable decomposition on a system dynamic model to obtain a local observable matrix pair; obtaining a gain matrix of a distributed observer according to the local observable matrix pair and the local unobservable matrix; communicating based on a local system state vector to obtain a local system state vector after communication; obtaining an output system state vector of a distributed observer based on the gain matrix and the local system state vector after communication; and controlling an adaptive attack compensation function in the distributed observer to compensate for a deception attack signal, so as to achieve consistency between the output system state vector and the system state vector in the system dynamic model. The present invention can solve the problem of state estimation of information-physical systems deployed on a large scale under the interference of deception attacks.

The application provides a distributed security outsourcing computing processing method based on sparse matrix transformation, and relates to the technical field of computers, and the method comprises the following steps: acquiring a first matrix and a second matrix; randomly generating a key set comprising a binary permutation matrix, a sparse triangular matrix and a random vector; performing primary encryption on the first matrix and the second matrix based on the binary permutation matrix; performing secondary encryption on the primary encrypted matrix based on the sparse triangular matrix; distributing the secondary encrypted first secondary encrypted matrix to each edge end in an integrated manner, distributing the second secondary encrypted matrix to each edge end in an even manner after dividing the second secondary encrypted matrix into column vectors according to columns, and enabling the edge end to perform a subtask calculation operation by using the received matrix and return the result to the user end; receiving the calculation results of the edge ends, and aggregating the results; verifying the reliability of the aggregated results by using the random vector, and decrypting the final calculation result. The scheme can improve the security and timeliness of outsourcing computing.

The present invention discloses a security control method, device, and medium for wind farm tampering attacks. The method includes: establishing a wind turbine dynamics model and a wind farm system dynamic equation based on the wind turbine structure; establishing a data tampering attack model for the unit output power transmitted on the unit's internal communication link and the unit-SCADA system communication link based on the data tampering attack characteristics; designing an estimator for the attacked unit, estimating the erroneous information injected by the attacker through a dynamic signal compensation mechanism; designing a distributed security controller for all units, making corresponding control adjustments for different units, and ensuring that each unit and the entire wind farm can operate normally and achieve the expected power output performance under data tampering attacks. The present invention effectively solves the attack and defense problems in wind farms with nonlinear characteristics, ensures the normal operation of each wind turbine in the wind farm, improves the power output performance of the wind farm, and ensures the power generation balance of the wind farm.