Patents
Literature
Patsnap Eureka AI that helps you search prior art, draft patents, and assess FTO risks, powered by patent and scientific literature data.

50 results about "Firewall (construction)" patented technology

A firewall is a fire-resistant barrier used to prevent the spread of fire for a prescribed period of time. Firewalls are built between or through buildings, structures, electrical substation transformers, or within an aircraft or vehicle.

BIM-based hydropower station full-life-cycle design, construction, operation and maintenance integrated control system

The invention discloses a BIM-based hydropower station full life cycle design, construction, operation and maintenance integrated control system, and the system comprises an intelligent sensing layer which integrates 5G + Beidou positioning, a LoRa gateway and a sensor, collects multi-source heterogeneous data in real time, and transmits the multi-source heterogeneous data to a digital twinborn layer after the multi-source heterogeneous data is filtered by an edge node; a digital twinborn layer: constructing a parameterized model library through laser point cloud and BIM automatic registration, integrating a geological parameter dynamic correction algorithm, mapping a construction period stress field in real time, and updating model parameters based on sensing data self-evolution; the intelligent decision-making layer performs equipment fault prediction by using an LSTM neural network, optimizes multi-machine load distribution in combination with an improved PSO algorithm, and automatically adjusts a start-stop strategy when the load fluctuates; and the security execution layer is used for triggering equipment operation after virtual twinborn deduction verification through a block chain evidence storage instruction, realizing virtual-real dual verification in combination with an industrial firewall, and finally feeding back a running state to the sensing layer to calibrate and update a model, and supporting intelligent decision.
Owner:POWERCHINA HUADONG ENG CORP LTD

Method and system for dynamically optimizing firewall access control strategy based on cooperation of flow analysis and large language model

The invention relates to a firewall access control strategy dynamic optimization method and system based on cooperation of flow analysis and a large language model, and aims to solve the problems of rule expansion, low matching efficiency and operation and maintenance lag of a traditional static ACL strategy. The method comprises the following steps: collecting and analyzing network traffic and generating a rule hit log; standardizing the multi-manufacturer ACL strategy into structured data; performing semantic analysis by using a large language model, and constructing a strategy semantic knowledge graph; fusing the traffic behavior characteristics and semantic information, and generating an optimization strategy through a dual-drive model; the optimization feasibility is simulated, verified and evaluated; and deploying an optimization strategy and monitoring feedback to form closed-loop dynamic optimization. According to the method, rule combination, redundancy elimination and high-frequency rule preposition are realized through traffic behavior and large model semantics dual driving, the average matching frequency is reduced by more than 40%, and the forwarding delay is reduced by 30%-50%; and strategy dynamic reconstruction is supported to adapt to network changes, so that the operation and maintenance efficiency and the strategy effectiveness are remarkably improved.
Owner:CHINA ELECTRONICS CLOUD DIGITAL INTELLIGENCE TECH CO LTD

IPS escape attack defense capability test method and system

The invention relates to the technical field of firewalls, in particular to an IPS escape attack defense capability test method and system, and the method comprises the steps: collecting a service scene for a to-be-tested defense system, generating corresponding background traffic according to the service scene, and carrying out the screening to obtain an attack data set; obtaining a test demand, adjusting the attack data set according to the test demand to obtain test traffic, and mixing the background traffic and the test traffic to obtain mixed traffic; and testing the defense system to be tested based on the mixed flow. In order to solve the problem of poor IPS escape attack defense capability evaluation effect in the prior art, a process of collecting a service scene of a defense system to be tested is introduced before a test is started, and background traffic obtained by simulating a plurality of different data sources is formed by combining an actual service scene; and vulnerabilities easily occurring in the defense system to be tested are selected and an attack data set is constructed, and on this basis, construction and testing of the mixed traffic are performed, so that a test result is more in line with an actual situation.
Owner:THE THIRD RES INST OF MIN OF PUBLIC SECURITY

Long-term house renting monitoring management system and method

The invention relates to the technical field of house renting management, and discloses a long-term house renting monitoring management system and method.The method comprises the steps that monitoring units in the same physical space are divided into equipment groups, state jump timestamps of the equipment groups are recorded, behavior logic templates are automatically precipitated based on a historical timestamp sequence, and the equipment groups are stored; through logic self-consistency comparison of a real-time sequence and a template, risk early warning is generated, the system has the capability of understanding equipment collaborative behavior logic, the behavior template is constructed by multiplexing a basic switch signal, cognitive transition from physical quantity monitoring to behavior logic verification is realized, and the risk early warning effect is improved. And meanwhile, an anti-interference data quality firewall and system-level resource coordination capability is naturally formed under a centerless architecture by utilizing a state credibility evaluation and distributed priority arbitration mechanism, so that the economy and the reliability of intelligent reconstruction of the old house are remarkably improved.
Owner:华天慧创科技(西安)有限公司

Industrial firewall device based on time sequence graph detection

The invention discloses an industrial firewall device based on time sequence atlas detection, which relates to the technical field of industrial control network security and comprises the steps of protocol identification, feature extraction, time sequence atlas construction, baseline modeling, online detection and response protection. Extracting time sequence characteristics such as a request-response relationship, a time interval and an event sequence, and converting the time sequence characteristics into a time sequence graph on which nodes correspond to communication events and edges correspond to time sequences; and generating a baseline map based on normal data, comparing the deviation between the current map and the baseline map in real-time communication, and executing a protection action after judging abnormality. The device for realizing the method comprises a data acquisition module, a feature extraction module, an atlas modeling module, a detection analysis module, a protection response module, a man-machine interaction module and a wide-voltage power supply module which are electrically connected in sequence. According to the method and the device, hidden time sequence attacks can be accurately identified, multiple industrial protocols are supported, and the adaptive resource-limited industrial equipment is designed in a lightweight manner.
Owner:BEIJING CATHAY INTERNET INFORMATION TECH CO LTD

Satellite-borne router software security reconstruction method

The invention relates to a satellite-borne router software security reconstruction method, aims to solve the problems of transmission monitoring lag, high-delay verification and insufficient isolation, provides an integrity chain verification and firewall double-layer verification cooperation scheme, and is combined with a modular physical isolation design. When the routing module receives the data packet, a hardware write protection lock is activated, unauthorized modification is forbidden, and strategy lock-free update is supported; the platform management module downloads an accumulated verification value in real time, and pays attention to a reconstruction instruction after ground verification; and the program programming module adopts double Bank storage, supports atomization programming and credible verification, and automatically returns a safe version when an exception occurs. Attacks are defended through satellite-ground cooperative double-closed-loop verification (firewall filtering, token bucket current limiting and ground CRC verification), hardware isolation guarantees updating without interrupting routing operation, and intelligent backspacing improves the fault-tolerant capability. The method is suitable for a high-delay and strong-interference satellite-borne routing scene, ensures zero interruption of a reconstruction service during in-orbit maintenance of a transit / overseas satellite, and meets the security requirement of a modern satellite network.
Owner:BEIJING RES INST OF TELEMETRY

Web application firewall attack real-time traceability system based on real-time monitoring

The invention discloses a web application firewall attack real-time traceability system based on real-time monitoring, and relates to the technical field of monitoring analysis, and the system comprises the steps: carrying out the attack behavior fingerprint clustering analysis according to the attack technique difference data, obtaining the attack behavior fingerprint clustering data, carrying out the cross-session attack association evaluation based on the attack behavior fingerprint clustering data, and carrying out the cross-session attack association evaluation based on the cross-session attack association evaluation. Cross-session attack association data is obtained, and attacker group portrait estimation is carried out according to the cross-session attack association data to obtain attacker group portrait data; performing context influence factor identification on the attacker group portrait data to obtain a context influence factor, and performing portrait correction on the attacker group portrait data based on the context influence factor to obtain corrected attacker group portrait data; and carrying out attacker traceability model construction on the corrected attacker group portrait data to obtain an attacker traceability model so as to execute attack real-time traceability and alarm response. The method has the effect of improving the attack tracing efficiency.
Owner:CGN INTELLECTUAL TECH SHENZHEN CO LTD

Firewall dynamic policy adaptation method and system based on big data

The invention discloses a firewall dynamic policy adaptation method and system based on big data, and the method comprises the steps: collecting multi-source heterogeneous data in a network, and constructing a dynamic network entity map in real time; processing the time sequence of the atlas by using a preset time sequence diagram attention network model to obtain a behavior fingerprint vector representing the behavior state of the entity, and calculating the risk score of the entity; when the risk score exceeds a risk threshold value, automatically generating a temporary security policy for managing and controlling the access behavior of the entity; and managing the life cycle of the temporary security policy, and automatically updating, renewing or cancelling according to the entity risk state change. According to the method, the network entity behavior baseline is constructed and the risk prediction is carried out, so that the conversion from passive defense to active defense is realized, the security policy can be automatically and accurately generated and managed, advanced persistent threats and zero-day attacks can be effectively coped with, and the self-adaptability and the intelligent level of network defense are improved.
Owner:HANGZHOU TAICHENG NETWORK TECH CO LTD

A highly integrated edge computing security gateway with end-to-end encryption suitable for industrial environments

This invention discloses a highly integrated edge computing security gateway with end-to-end encryption suitable for industrial environments. It comprises a routing module with firewall functionality, a switching module, a storage module, an edge computing module, a high-performance security encryption / decryption module, a low-performance security encryption / decryption module, and an industrial field interface module. All modules are connected via an internal high-speed data bus. The routing module coordinates the operation of all modules within the security gateway. This invention can be applied to numerous fields with network security connectivity requirements, such as factories, construction sites, and transportation networks, significantly expanding the application scenarios of related equipment.
Owner:CHINA TRANSPORT INFORMATION TECH GRP CO LTD

Low-code informatization system, method and arm server

The disclosure provides a low-code informatization system and method and an ARM server, relates to the field of cloud services, and particularly relates to the field of ARM chips. A specific implementation scheme is as follows: the ARM server comprises at least one ARM board card, each ARM board card is deployed with a cloud platform, a technical component, a business middle station and an application front desk; a firewall is connected with the ARM server and is deployed with at least one security service product; and a user equipment accesses the ARM server through the firewall and is deployed with a low-code development tool. The implementation manner not only meets the demand of informatization construction for server computing power, but also greatly reduces the use cost and saves storage space compared with a server based on an X86 architecture under the condition of the same effect, and one-stop delivery of a traditional industry informatization system is realized.
Owner:BEIJING BAIDU NETCOM SCI & TECH CO LTD

Long-term rental house monitoring management system and method

The application relates to the technical field of house renting management, and discloses a long-term house renting monitoring management system and method, which comprises the following steps: dividing monitoring units in the same physical space into equipment groups, recording state jump time stamps, automatically depositing behavior logic templates based on historical time stamp sequences, and generating risk early warnings through logical self-consistency comparison between real-time sequences and templates. The application enables the system to understand the cooperative behavior logic of the equipment, realizes cognitive transition from physical quantity monitoring to behavior logic verification by constructing behavior templates through reuse of basic switch signals, and simultaneously utilizes state credibility evaluation and a distributed priority arbitration mechanism to naturally form an anti-interference data quality firewall and system-level resource coordination capability under a centerless architecture, thereby significantly improving the economy and reliability of intelligent reconstruction of old houses.
Owner:华天慧创科技(西安)有限公司

Firewall log security detection method and system

The application discloses a kind of firewall log security detection method and system, it is related to the technical field of network firewall, comprising: the original log record data obtained by collecting to the firewall to be detected;Original log record data is preprocessed to obtain triad structured data;Triad structured data is converted into numerical value and is spliced to obtain log feature vector;Once detection is carried out through deep support vector data description to obtain once detection result, generate preliminary abnormal log subset;Based on preliminary abnormal log subset, event trace construction obtains XES preliminary screening event log, and the workflow network to be detected is generated by inductive mining algorithm;Consistency check is calculated by edit distance algorithm to obtain secondary detection score, and secondary judgment obtains security detection result.The application can accurately identify hidden security threats, can capture complex abnormal behaviors of combination and serialization, balance high efficiency, high accuracy and interpretability, effectively reduce false alarm rate.
Owner:SHENZHEN BAOLONG DATA TECHNOLOGY CO LTD

Fabricated energy storage battery compartment firewall integrated foundation and construction process thereof

The invention relates to a fabricated energy storage battery compartment firewall integrated foundation and a construction process thereof. The fabricated energy storage battery compartment firewall integrated foundation comprises a prefabricated independent foundation and a prefabricated beam, and a prefabricated connecting piece is arranged at the top of the prefabricated independent foundation; a plurality of first sleeves which are horizontally distributed are arranged in the prefabricated connecting piece, first sleeve openings corresponding to the first sleeves in position are formed in the peripheral side of the prefabricated connecting piece, and overhanging steel bars of the prefabricated beam penetrate through the first sleeve openings to be connected with the first sleeves; a plurality of prefabricated independent foundations are connected with the prefabricated beams through prefabricated connecting pieces to form a battery compartment foundation, and a prefabricated firewall is arranged on the top of the battery compartment foundation. Functional integration of the firewall and the battery compartment foundation is achieved, the assembly type foundation system with the self-adaptive leveling and vibration isolation capacity is constructed, flexible deployment of a construction site is supported, and the core development requirements of the current power industry for elastic capacity expansion and low-carbon construction of an energy storage power station are met.
Owner:FUJIAN YONGFU POWER ENG

Two-stage unknown attack real-time detection method based on online learning

The invention relates to the technical field of firewalls, and discloses a two-stage unknown attack real-time detection method based on online learning, which comprises the following steps: firstly, filtering network traffic through a firewall in combination with a determined black list and white list; then, abnormal data filtered out from the firewall are trained through an A encoder, an abnormal data error is reconstructed through an A decoder, and a threshold value is set to screen an abnormal value similar to a known anomaly; judging whether the reconstruction error is smaller than a threshold value or not, and if yes, checking through an expert; the method comprises the following steps: judging whether a reconstruction error is smaller than a threshold value or not, if not, training by using normal data through a B encoder, checking whether the traffic is possible unknown attack traffic after classification through an expert, if so, judging the traffic as normal traffic, and if so, judging the traffic as unknown attack, and generating a dynamic update firewall. The method is directly applied to a network security application scene. The double-stage lightweight model is high in training speed and high in precision.
Owner:COMP NETWORK INFORMATION CENT CHINESE ACADEMY OF SCI

Rotary-wing aircraft with firewall construction

The present invention relates to a rotary-wing aircraft having a fuselage that forms an interior region of the aircraft, the fuselage including an upper main skin that separates the interior region of the aircraft from an upper cabin of the aircraft disposed above the fuselage, wherein the upper cabin of the aircraft includes an engine accommodation region having a firewall structure (10), the engine accommodation region accommodating at least one aircraft engine (11) within the firewall structure (10), wherein the firewall structure (100) includes at least one gasket (10g) for sealing a passage of a torque tube (15) that connects at least one aircraft engine (11) to a main gearbox (17) of the rotary-wing aircraft, and wherein the at least one gasket (10g) includes at least two fireproof casings (12b) and an annular flexible fireproof bellows (13).
Owner:AIRBUS HELICOPTERS DEUT GMBH

Rapid construction firewall

The utility model provides a quick construction firewall which comprises a firewall body, auxiliary fireproof assemblies are symmetrically arranged on the front end face and the rear end face of the firewall body, a splicing assembly is arranged on the side edge of the firewall body, in the process of assembling the firewall body, the firewall body is firstly placed on the upper end face of a supporting base, at the moment, a limiting baffle can limit the firewall body, and then the firewall body is assembled. According to the fireproof wall, the fireproof wall bodies are arranged in the splicing inserting grooves, the situation that the fireproof wall bodies deviate front and back is avoided, then the splicing inserting strips are vertically inserted into the splicing inserting grooves so that the connecting positions of the multiple fireproof wall bodies can be fixedly connected, finally, the mounting bolts are fixed into the mounting through holes and the fixing through holes in a penetrating and inserting mode, and the fireproof wall bodies and the splicing inserting strips can be fixed at the same time; and the fireproof layers can further improve the fireproof capability of the front end face and the rear end face of the fireproof wall body, so that the fireproof wall body is better in fireproof and flame-retardant capability.
Owner:HAOJIA POWER CONSTR GRP CO LTD

Firewall signature authentication method and firewall-based anti-network topology discovery system

The invention relates to a signature authentication method for a firewall and an anti-network topology discovery system based on a firewall, which belong to the field of computer network security technology. The invention aims to solve the problems of network layer data loss and disorder and high signature authentication overhead in the existing signature authentication method for firewalls. The method of the invention explains the implementation process of the firewall signature authentication scheme based on the message hash chain from two perspectives: the basic process of signature authentication and the hash chain construction and verification scheme. In this process, the three major problems faced by the firewall will be discussed respectively: the network layer data packet loss and disorder problem, the two-way authentication problem and the firewall hash chain signature authentication information organization problem. Based on the signature authentication method of the firewall, an anti-network topology discovery system is designed, which uses a trusted detection filtering module to design three trusted detection filtering schemes based on source IP address, token and hash chain signature authentication to improve the protection capability of the firewall in the anti-network topology discovery process.
Owner:HARBIN INST OF TECH

Satellite router software security reconstruction method

The present application relates to a kind of on-orbit router software security reconstruction method, for transmission monitoring lag, high delay verification and insufficient isolation problem, propose integrity chain check and firewall double-layer verification collaborative scheme, combined with modular physical isolation design.Routing module activates hardware write protection lock when receiving data packet, prohibits unauthorized modification and supports policy lock-free update;Platform management module real-time download cumulative check value, ground verification after upper reconstruction instruction;Program burn module uses double Bank storage, supports atomization burn and trusted verification, abnormal automatic rollback safety version.Through space-earth collaborative double-loop verification (firewall filtering, token bucket flow limiting, ground CRC check) to resist attack, hardware isolation ensures that updating does not interrupt routing operation, intelligent rollback improves fault tolerance.Ceiling for high delay, strong interference on-orbit routing scene, guarantee transit / overseas satellite on-orbit maintenance when reconstructing business zero interruption, meet modern satellite network security needs.
Owner:BEIJING RES INST OF TELEMETRY

Firewall Automatic Management System and Method Based on Work Order System

The present invention discloses a firewall automation management system and method based on a work order system, relating to the field of network security technology. The present invention includes step S1, data collection, preprocessing and model construction; step S2, work order submission and risk prediction; step S3, work order adjustment decision-making; step S4, work order approval and execution; step S5, execution result feedback and monitoring and auditing. The present invention uses a machine learning and risk prediction module to comprehensively analyze and learn a large amount of historical work order data, network traffic data, security threat intelligence, and firewall operation status data. When a new work order is submitted, this module can predict various risks that may be caused by the firewall configuration changes involved in this work order within a certain period in the future, preventing security vulnerabilities from occurring due to the failure to adjust the configuration of the firewall in a timely manner.
Owner:SHANGHAI YUANQING INFORMATION TECH CO LTD

Prefabricated batten assembly type firewall for transformer substation main transformer

The utility model relates to the technical field of firewalls of transformer substations, and discloses a prefabricated batten assembly type firewall for a main transformer of a transformer substation, which comprises a cast-in-place concrete foundation base, a first side column assembly is connected to the position, located at the cup-opening-shaped mounting groove, of the left side of the inner wall of the cast-in-place concrete foundation base through C35 micro-expansion fine aggregate concrete in a pouring mode, and a first middle column assembly is connected to the position, located on the right side of the first side column assembly, of the inner wall of the cast-in-place concrete foundation base through C35 micro-expansion fine aggregate concrete in a pouring mode. By adopting the prefabricated batten assembly type structure, the components of the firewall are modularly designed, so that the mounting and dismounting processes are simpler and more convenient, the construction efficiency is improved, and meanwhile, the use of the prefabricated parts can reduce on-site wet operation and reduce environmental pollution and labor cost.
Owner:GUANGDONG POWER TRANSMISSION & TRANSFORMATION ENG +2

Stepped arrangement structure of mountainous terrain megawatt-level energy storage power station

This invention relates to a stepped layout structure for a megawatt-class energy storage power station in mountainous terrain. Belonging to the field of energy storage power station engineering layout, it aims to solve the technical problems of traditional mountain energy storage power stations, such as the need for large-scale site leveling, large earthwork volume, high cost, severe ecological damage, and inconvenient operation and maintenance. The invention features a multi-level stepped platform along the mountainside, with adjacent platforms connected by slope transitions. Energy storage units are arranged on the platforms, and maintenance roads are provided on the slope surfaces. The platform consists of a three-level energy storage area and an independent booster area platform. The energy storage units are arranged in an array, with battery energy storage compartments and PCS booster units arranged centrally or staggered. The battery energy storage compartments are located on a foundation, which is fixedly connected to a firewall. The station area is equipped with a ring-shaped fire access road, cable trenches, ancillary facilities, and slope inspection steps. This invention significantly reduces earthwork excavation and filling, improves land utilization, offers structural stability, convenient operation and maintenance, and high safety and reliability, significantly reducing construction costs and making it suitable for the construction of megawatt-class large-capacity energy storage power stations in mountainous terrain.
Owner:SHANGHAI INVESTIGATION DESIGN & RES INST CO LTD

Firewall of extra-high voltage converter station and construction process of firewall

The invention discloses a firewall of an extra-high voltage converter station and a construction process thereof, the firewall comprises a reinforced concrete shear wall, and the construction process comprises construction section division, scaffold installation, template installation, concrete pouring, firewall maintenance and post-cast strip construction. On the basis of structural mechanics analysis and BIM simulation, the firewall is divided into construction sections, and the transportation capacity of the tower crane is matched; the combined steel frame-wood formwork, the keel and the split bolts are adopted to construct the form of the formwork, and the overall rigidity and the formwork mounting and dismounting efficiency are both improved; through full-chain innovation of the construction technology, collaborative optimization of efficiency, cost, environmental protection and safety is achieved on the premise that the safety of the firewall structure is guaranteed, and reliable technical support is provided for construction of the extra-high-voltage direct-current converter station.
Owner:HUBEI ELECTRIC POWER TRANSMISSION & DISTRIBUTION ENG

Intelligent firewall construction method based on online learning

The invention relates to the technical field of firewalls, and discloses an intelligent firewall construction method based on online learning, comprising a firewall for filtering network traffic through a firewall rule; an intelligent monitoring module for hidden attack detection and unknown attack detection is connected with the firewall; and the self-evolution module is used for learning and improving the abnormal traffic detected by the intelligent detection module, and updating firewall rules after self-learning and improving. The intelligent monitoring module and the self-evolution module specifically comprise network flow data collection, network flow data analysis, rule generation, rule verification and rule updating; wherein the firewall rule is used for checking and filtering network flow messages based on an access control list (ACL). The method can adapt to large-scale network data flow, the problem of insufficient memory caused by large-scale data is relieved, and unknown attacks are detected in real time.
Owner:COMP NETWORK INFORMATION CENT CHINESE ACADEMY OF SCI

High-altitude maintenance platform for firewall of main transformer of transformer substation

The invention relates to the technical field of power construction equipment, and particularly discloses a transformer substation main transformer firewall high-altitude maintenance platform which comprises a cross beam located on one side of a main transformer firewall, the two ends of the cross beam are fixed to the main transformer firewall through vertical frames, the cross beam can slide up and down along the vertical frames, and an operation basket capable of transversely moving is arranged on the cross beam. A hanging mechanism used for fixing a safety belt is arranged in the operation basket, the upper end and the lower end of the vertical frame are connected and fixed through a pull rod, and the cross beam and the pull rod are of a splicing structure. Through integrated innovation of'dynamic anti-falling, self-adaptive structure and space compression ', anti-falling safety guarantee (solving safety hard damage), site penetrability (breaking through space limitation), clearance reservation compatibility (eliminating secondary disassembly and assembly), industrial breakthroughs of low risk, efficiency multiplication and cost halving are realized in a main transformer firewall scene for the first time; and the technical blank in the field of electric power high-altitude operation equipment is filled.
Owner:STATE GRID SHANDONG ELECTRIC POWER CO CONSTR CO +1

Fabricated decorative firewall

The utility model discloses an assembly type decorative firewall, which belongs to the technical field of firewalls and comprises a firewall frame body, firewall bodies are symmetrically arranged on the surface of the firewall frame body, a side keel is arranged on one side of the firewall frame body, and a bottom keel is arranged at the upper end of the firewall frame body. A middle keel is arranged between the side edge keel and the bottom edge keel, an anti-skid assembly is arranged in the middle of the interior of the middle keel, and limiting mounting assemblies are arranged at the four ends of the middle keel; according to the fireproof wall, the limiting installation assemblies are arranged, the side edge keels and the bottom edge keels can be conveniently limited and fixed after the fireproof wall and the keels are matched, the convenience of fireproof wall assembly is improved, manpower resources are saved, the working efficiency is improved, and the construction period is effectively shortened; and the situation of slippage is prevented, the stability and accuracy of subsequent splicing are guaranteed, and the use quality of equipment is improved.
Owner:GUANGZHOU XINSWEI BUILDING MATERIALS CO LTD

Firewall log security detection method and system

The invention discloses a firewall log security detection method and system, and relates to the technical field of network firewalls, and the method comprises the steps: collecting a to-be-detected firewall to obtain original log record data; preprocessing the original log record data to obtain triple structured data; performing numerical conversion and vector splicing on the triple structured data to obtain a log feature vector; performing one-time detection through depth support vector data description to obtain a one-time detection result, and generating a preliminary abnormal log subset; performing event trace construction based on the preliminary abnormal log subset to obtain an XES preliminary screening event log, and generating a to-be-detected workflow net through an inductive mining algorithm; and performing consistency check calculation through an editing distance algorithm to obtain a secondary detection score, and performing secondary judgment to obtain a safety detection result. According to the method, hidden security threats can be accurately identified, combined and serialized complex abnormal behaviors can be captured, high efficiency, high accuracy and interpretability are considered, and the false alarm rate is effectively reduced.
Owner:SHENZHEN BAOLONG DATA TECHNOLOGY CO LTD

Virtual environment construction method and device for target range and nonvolatile storage medium

The invention discloses a virtual environment construction method and device for a target range and a nonvolatile storage medium. The method comprises the steps that a network topology structure of a target range is constructed, and the network topology structure comprises a firewall, an intrusion detection system and a router; deploying network security software of the target range based on the network topology structure; constructing a feature matching engine of the target range, the feature matching engine being used for identifying abnormal network traffic; and constructing a virtual network environment of the target range based on a network topology structure, network security software and a feature matching engine. The technical problem that a traditional virtual environment simulation method has limitations in the aspects of cost, flexibility and complex scene simulation is solved.
Owner:STATE GRID BEIJING ELECTRIC POWER CO +3

Traffic monitoring method, system, device, computer device, readable storage medium and program product

The application relates to a traffic monitoring method, system and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: for each target cloud native network application firewall (WAF) node, respectively acquiring traffic characteristic data of the target cloud native WAF node; gathering and storing the traffic characteristic data of each target cloud native WAF node; according to a preset time dimension, counting the traffic characteristic data of each target cloud native WAF node in each traffic characteristic data type dimension, and storing the counting result into a target database; according to the data stored in the target database, a pre-determined traffic monitoring dimension and a preset traffic monitoring view construction rule, constructing a traffic monitoring view; and the traffic monitoring view is used for monitoring a cloud native WAF system. The method can be used for monitoring the traffic of the cloud native WAF system.
Owner:CHINA TELECOM CLOUD TECH CO LTD

Firewall-crossing fire-fighting linkage device based on hospital project rail logistics system and working method of fire-fighting linkage device

The invention provides a fire-fighting linkage device passing through a firewall based on a hospital project rail logistics system and a working method of the fire-fighting linkage device. The linkage device comprises a casement window controlled by an electric push-pull device and a travel switch in a matched mode and further comprises an electric rail turning device used in combination with a magnetic switch and a proximity switch. The linkage control box receives a fire-fighting linkage signal and controls the casement window and the electric rail turnover device to act. According to the fire-fighting linkage device, fire-fighting linkage is achieved when the rail logistics system transmission trolley passes through the firewall through the fireproof casement window, the electric push-pull device, the electric rail turnover device, the magnetic attraction switch, the travel switch, the fire-fighting linkage control box and the like, the fire-fighting linkage device can be repeatedly used, and technical guarantee is provided for smoothly passing fire-fighting acceptance inspection; the problem that a fixed fireproof window is disassembled after being installed and accepted in an original project is solved, the construction efficiency is greatly improved, the construction cost is saved, and potential safety hazards are reduced.
Owner:THE THIRD CONSTR OF CHINA CONSTR EIGHTH ENG BUREAU