13 results about "Evolving networks" patented technology

The invention relates to the technical field of computers, in particular to a network security operation method, device and equipment and a storage medium, and is used for providing a network security operation scheme which can give consideration to efficiency and precision and is adaptive to a current dynamically evolved network threat environment. The method comprises the steps of obtaining to-be-processed operation data, wherein the operation data is obtained by preprocessing network flow data and log data; processing the operation data by using a lightweight model to generate initial alarm data; based on the initial alarm data, carrying out alarm authenticity discrimination and threat level determination through a heavy model, and outputting confirmed threat event information; the threat event information indicates alarm data and threat levels corresponding to threat events confirmed by the heavy model; based on the threat event information, risk disposal is executed, affected asset information is obtained, a traceability evidence obtaining tool is matched, and a standardized evidence obtaining report is generated; and based on the standardized evidence obtaining report, executing vulnerability repair.

The invention discloses an encrypted traffic detection method based on small sample self-supervised learning, and relates to the field of network security. The method innovatively constructs a double-branch self-supervised pre-training architecture, deeply mines the time sequence dynamic characteristics of encrypted traffic through a comparison predictive coding module, and improves the detection accuracy of the encrypted traffic. Capturing structural features of head bytes by using a sub-graph multi-level mask auto-encoder module, so as to learn robust feature representation with strong discrimination from mass label-free data; on the basis, the method designs a dynamic confidence false label mechanism, realizes intelligent self-adaptive adjustment of a false label threshold value through a dual adjustment strategy of fusing a time decay function and a category balance factor, effectively screens high-quality false labels and remarkably relieves negative effects caused by category imbalance. According to the method, the dependence on the annotated data can be obviously reduced, the method can more quickly adapt to a continuously evolved network threat environment, and a key technical support is provided for constructing a next-generation adaptive network security defense system.

Disclosed are computerized systems and methods for a decision intelligence (DI)-based framework that automatically and / or dynamically provides mechanisms for managing, optimizing and configuring a WiFi network at a location. The framework provides network management utilizing edge processing capabilities to bridge local WiFi and cloud systems. The framework implements comprehensive device typing through multi-layered analysis combining passive monitoring, deep packet inspection and hybrid deterministic-probabilistic classification methods. State synchronization between local and cloud networks can be achieved through hierarchical data modeling and differential synchronization algorithms. The framework can implement advanced features that include automated channel optimization, QoS management, and security monitoring. The framework incorporates self-healing capabilities using reinforcement learning techniques and maintains operational efficiency through intelligent resource management and workload distribution. The framework can operate autonomously while requiring minimal cloud connectivity, featuring extensible architecture through a plugin system that enables adaptation to evolving network requirements while maintaining stable operation of existing capabilities.

Disclosed are computerized systems and methods for a decision intelligence (DI)-based framework that automatically and / or dynamically provides mechanisms for managing, optimizing and configuring a WiFi network at a location. The framework provides network management utilizing edge processing capabilities to bridge local WiFi and cloud systems. The framework implements comprehensive device typing through multi-layered analysis combining passive monitoring, deep packet inspection and hybrid deterministic-probabilistic classification methods. State synchronization between local and cloud networks can be achieved through hierarchical data modeling and differential synchronization algorithms. The framework can implement advanced features that include automated channel optimization, QoS management, and security monitoring. The framework incorporates self-healing capabilities using reinforcement learning techniques and maintains operational efficiency through intelligent resource management and workload distribution. The framework can operate autonomously while requiring minimal cloud connectivity, featuring extensible architecture through a plugin system that enables adaptation to evolving network requirements while maintaining stable operation of existing capabilities.

The invention relates to a self-evolution network flow data security protection method and system, and the method comprises the steps: obtaining network flow data with a label, carrying out the preprocessing, and extracting a flow-level feature; calculating contribution degrees between the flow-level features and the labels and contribution degrees among the flow-level features, and selecting the flow-level features according to the contribution degrees to obtain a feature index set; updating the old intrusion detection model according to the feature index set and the new data set to obtain a new intrusion detection model; inputting to-be-detected network flow data into the flow length prediction model to obtain a prediction length; and selecting a corresponding new intrusion detection model according to the prediction length, inputting the network flow data to be detected into the selected new intrusion detection model, obtaining and outputting a corresponding label, and triggering a real-time defense measure according to the label. According to the method, the calculation and storage cost is effectively reduced while the detection performance is ensured, and the method is suitable for safety protection requirements in various complex network environments.

The present invention discloses an adaptive cyber threat detection system and method implemented through a computing device configured to perform multi-layer behavioral analysis of network and system activities. The system receives network traffic data and system activity data, conditions the received data into structured behavioral event records, and generates multi-dimensional behavioral profiles associated with identities, devices, and temporal sequences. The behavioral profiles are compared against adaptive behavioral baseline profiles across multiple analytical layers to identify deviations indicative of anomalous behavior. Identified deviations are subjected to staged validation by correlating behavioral evidence across independent dimensions to confirm malicious activity. Upon confirmation, the system initiates appropriate security response actions based on determined threat severity and records detection outcomes in a secure event log. The adaptive behavioral baselines are continuously updated using validated non-malicious behavioral outcomes, enabling the system to dynamically adjust to evolving network conditions while maintaining accurate and reliable cyber threat detection.

Disclosed are computerized systems and methods for a decision intelligence (Dl)-based framework that automatically and / or dynamically provides mechanisms for managing, optimizing and configuring a WiFi network at a location. The framework provides network management utilizing edge processing capabilities to bridge local WiFi and cloud systems. The framework implements comprehensive device typing through multi-layered analysis combining passive monitoring, deep packet inspection and hybrid deterministic-probabilistic classification methods. State synchronization between local and cloud networks can be achieved through hierarchical data modeling and differential synchronization algorithms. The framework can implement advanced features that include automated channel optimization, QoS management, and security monitoring. The framework incorporates self-healing capabilities using reinforcement learning techniques and maintains operational efficiency through intelligent resource management and workload distribution. The framework can operate autonomously while requiring minimal cloud connectivity, featuring extensible architecture through a plugin system that enables adaptation to evolving network requirements while maintaining stable operation of existing capabilities.

Disclosed are computerized systems and methods for a decision intelligence (DI)-based framework that automatically and / or dynamically provides mechanisms for managing, optimizing and configuring a WiFi network at a location. The framework provides network management utilizing edge processing capabilities to bridge local WiFi and cloud systems. The framework implements comprehensive device typing through multi-layered analysis combining passive monitoring, deep packet inspection and hybrid deterministic-probabilistic classification methods. State synchronization between local and cloud networks can be achieved through hierarchical data modeling and differential synchronization algorithms. The framework can implement advanced features that include automated channel optimization, QoS management, and security monitoring. The framework incorporates self-healing capabilities using reinforcement learning techniques and maintains operational efficiency through intelligent resource management and workload distribution. The framework can operate autonomously while requiring minimal cloud connectivity, featuring extensible architecture through a plugin system that enables adaptation to evolving network requirements while maintaining stable operation of existing capabilities.

The application provides an environmental protection planning dynamic generation method and system based on human-computer interaction and iterative feedback, first collects an initial environmental protection planning element set of a target area and constructs an initial correlation network, calculates edge correlation strength; receives interactive operation data through a human-computer interaction interface, updates the correlation network to obtain an updated network; collects a feedback data set within a preset interaction period and performs semantic labeling; inputs the feedback data with semantic labels into an element evolution model, drives correlation network node expansion and edge correlation relationship reconstruction, generates an evolved network and identifies element conflicts; according to the evolved network and a conflict analysis report, calls a planning scheme generation model to perform multi-objective constraint optimization, generates a dynamic environmental protection planning scheme and feeds back to the human-computer interaction interface, and simultaneously outputs a scheme evolution trajectory diagram. The application realizes dynamic generation and optimization of environmental protection planning, and improves the scientificity and feasibility of the planning.

The present disclosure relates to the technical field of computer, and particularly relates to a network security operation method and device, equipment and storage medium, to provide a network security operation scheme which can balance efficiency and accuracy and adapt to the current dynamic evolving network threat environment. The method comprises the following steps: obtaining running data to be processed, wherein the running data is obtained by preprocessing network flow data and log data; processing the running data by using a lightweight model to generate initial alarm data; based on the initial alarm data, performing alarm authenticity discrimination and threat level determination by using a heavy model to output confirmed threat event information; the threat event information indicates alarm data and threat level corresponding to the threat event confirmed by the heavy model; based on the threat event information, performing risk disposal, obtaining affected asset information and matching a trace evidence tool to generate a standardized evidence report; and based on the standardized evidence report, performing vulnerability repair.

Disclosed are computerized systems and methods for a decision intelligence (DI)-based framework that automatically and / or dynamically provides mechanisms for managing, optimizing and configuring a WiFi network at a location. The framework provides network management utilizing edge processing capabilities to bridge local WiFi and cloud systems. The framework implements comprehensive device typing through multi-layered analysis combining passive monitoring, deep packet inspection and hybrid deterministic-probabilistic classification methods. State synchronization between local and cloud networks can be achieved through hierarchical data modeling and differential synchronization algorithms. The framework can implement advanced features that include automated channel optimization, QoS management, and security monitoring. The framework incorporates self-healing capabilities using reinforcement learning techniques and maintains operational efficiency through intelligent resource management and workload distribution. The framework can operate autonomously while requiring minimal cloud connectivity, featuring extensible architecture through a plugin system that enables adaptation to evolving network requirements while maintaining stable operation of existing capabilities.

Disclosed are computerized systems and methods for a decision intelligence (DI)-based framework that automatically and / or dynamically provides mechanisms for managing, optimizing and configuring a WiFi network at a location. The framework provides network management utilizing edge processing capabilities to bridge local WiFi and cloud systems. The framework implements comprehensive device typing through multi-layered analysis combining passive monitoring, deep packet inspection and hybrid deterministic-probabilistic classification methods. State synchronization between local and cloud networks can be achieved through hierarchical data modeling and differential synchronization algorithms. The framework can implement advanced features that include automated channel optimization, QoS management, and security monitoring. The framework incorporates self-healing capabilities using reinforcement learning techniques and maintains operational efficiency through intelligent resource management and workload distribution. The framework can operate autonomously while requiring minimal cloud connectivity, featuring extensible architecture through a plugin system that enables adaptation to evolving network requirements while maintaining stable operation of existing capabilities.

The invention discloses an Ethereum phishing detection method and system based on dynamic feature fusion, and aims to accurately evaluate phishing risks in Ethereum transactions in real time. According to the system, a graph structure analysis technology, a graph embedding method and a Transform model are combined, a unified and flexible transaction data graph is constructed, multi-source features are dynamically extracted and fused, and a multi-head attention mechanism is utilized to realize adaptive adjustment of feature weights. The system can process transaction data of different scales, has a dynamic updating mechanism, and can timely adapt to and identify continuously evolved phishing attack modes. The method has high detection accuracy and robustness, and an effective technical scheme is provided for guaranteeing the security of the Ethereum block chain network.