1208 results about "Intranet" patented technology

The invention provides an intranet service quality optimization method and system based on deep reinforcement learning, and relates to the technical field of artificial intelligence, and the method comprises the steps: collecting multi-dimensional performance index data, carrying out the preprocessing, constructing an analytic hierarchy model, outputting the performance score of each layer, integrating the performance score of each layer, and outputting an intranet service quality score. Constructing a simulation environment, adjusting hyper-parameters of the adaptive deep reinforcement learning model, continuously learning in an actual intranet environment, determining multi-dimensional rewards, performing multi-target optimization, and generating a multi-target optimization result; and setting a hierarchical performance index threshold, if a hierarchical optimization strategy is triggered, adjusting a network topology structure, adjusting resource allocation and service configuration, adjusting weights of different indexes in the service quality evaluation model, updating a reward function, solving an optimal service decision, generating an optimal service decision sequence, and executing the optimal service decision sequence.

The invention discloses an industrial internet security monitoring system and method, and relates to the field of industrial monitoring management, and the system comprises a management module which is used for connecting a production intranet, carrying out the identity verification, and carrying out the safety monitoring according to the current production period and the operation state of specific production equipment, acquiring the control authority of each image acquisition component and the operation acquisition component, and editing and issuing a control instruction for each functional module; the acquisition unit is used for dividing acquisition targets of operation areas of production equipment according to production targets, setting a moving path scheme of an image acquisition component and an acquisition frequency of the operation acquisition component, and extracting images and operation data acquired in each area according to a preset time period; through accurate data analysis, the accuracy of anomaly detection is greatly improved, more complex state data can be processed, anomaly can be identified, dynamic analysis can be carried out according to historical data, and the monitoring frequency of a target area and the moving path of image acquisition equipment can be dynamically adjusted.

The invention relates to the technical field of automobile network security, in particular to an intelligent networked automobile penetration test path generation method and system based on a knowledge graph, and the method comprises the steps: constructing an intelligent networked automobile intranet penetration test security knowledge graph through fusing multi-source heterogeneous data based on an intranet E / E architecture; generating a potential attack path based on the knowledge graph by using a depth-first search algorithm of dynamic pruning optimization; a multi-dimensional space-time risk assessment framework is utilized to quantify path threat intensity and execution feasibility, and quantitative assessment on the generated attack path is realized; and according to an evaluation result, selecting a high-risk and feasible attack path to carry out an actual penetration test, and discovering security vulnerabilities and weaknesses in the system. According to the method, the attack surface is fully covered, the high-value attack path is efficiently generated, the threat intensity and the execution feasibility are accurately and quantitatively evaluated, and the safety test efficiency and accuracy of the intelligent network connection automobile intranet are remarkably improved.

The invention provides a zero-trust access control method based on cloud side-end collaboration, which comprises the following steps of: deploying zero-trust agents on application servers of cloud, side and end layers, and collecting multi-source trust measurement index data of each layer in real time; the method comprises the following steps: encrypting data, packaging the encrypted data into a standardized data packet, transmitting the standardized data packet to a security evaluation server through a security communication protocol, after the security evaluation server receives the encrypted data packet, carrying out refined multi-dimensional security evaluation in combination with an equipment identifier and network attributes, comprehensively considering various indexes through a weighting algorithm, and carrying out other operations. According to the invention, data transmission and control among the application server, the security evaluation server, the token generation server and the gateway are realized, the security of the application server deployed on the cloud when accessing the intranet data is improved, and the problem of failure of a traditional boundary protection mode caused by network boundary fuzziness in a traditional network is solved; and a stable, safe and reliable network environment is provided for the application server to access the intranet data.

The invention provides an internal network threat intelligent analysis and prediction method and system based on a large language model, and relates to the technical field of network technology and security. According to the method, the long-range dependency processing capacity of the LLMs is utilized, global and long-range dependency analysis of the user behavior sequence is achieved, and the limitation of a traditional fixed session unit is broken through. Rich semantic features and context information are extracted from original log data through the deep semantic analysis ability of LLMs, and the feature expression ability is greatly improved. In combination with the reasoning capability of LLMs and a traditional anomaly detection algorithm, context-based deep semantic analysis is realized, and the recognition capability of complex threats is improved. In the aspects of real-time monitoring and response, the LLMs are introduced to assist in complex event processing and dynamic rule generation, and the intelligent level and efficiency are improved. Aiming at challenges of data management and analysis, an LLMs is utilized to enhance a data management strategy, a storage structure is optimized, and an intelligent data life cycle management and query interface is provided.

The invention discloses a data exchange system for performing real-time secure communication with an intranet system, and relates to the technical field of network data security. The system comprises a network environment identification module, a challenge authentication module, a hardware key binding module, a data communication module, an abnormal response module, a strategy updating module and a visual monitoring and log module. According to the invention, by introducing the trust map evaluation module, map modeling is carried out on the characteristics of the equipment in the historical operation process, the rationality of the current operation environment of the system is judged based on the map coincidence evaluation result, the communication module is allowed to operate only when the evaluation result meets the condition, and a judgment mechanism based on the historical trusted behavior is formed; and the prevention and control capability of the system on gradual-change attacks and behavior counterfeit is enhanced.

The invention relates to the technical field of network security, in particular to a method and device for detecting illegal external connection of a terminal and a storage medium, and the method comprises the steps: obtaining all terminal equipment connected with a local area network, distinguishing authorized terminal equipment and unauthorized terminal equipment through authorization detection, and carrying out the risk grading of the authorized terminal equipment; the method comprises the following steps: generating an external connection behavior data set by combining client monitoring data, network layer monitoring data and intranet detection data, extracting key information such as an external connection target, access time, a protocol type and a port number, and dividing into pure intranet connection equipment, normal external connection equipment and unknown external connection equipment according to external connection permissions; inputting the log data of the unknown external connection equipment into the log anomaly detection model based on the Transform architecture, identifying an abnormal event, and calculating a log risk score; and if the log risk score exceeds a preset threshold, determining that the device is an illegal external connection device. According to the method, accurate detection of illegal external connection behaviors is realized, and the safety performance of a monitoring system is remarkably improved.

The invention discloses an enterprise network weak password evaluation method based on a logic attack graph and password evaluation, which comprises the following steps: firstly, collecting a network topology structure, a security policy and system configuration of an enterprise intranet, and combining ATTamp; according to the inference rule mapped by the CK knowledge base, logical inference is carried out by using a MulVAL tool to obtain a logical attack graph; then acquiring system account password information of each host, calculating password entropy and simulating password blasting time evaluation to obtain a password risk value; then, the password risk value is associated and combined with the logic attack graph, and a new weighted attack graph containing the password risk value is generated; identifying an attack starting point and an attack target point in the attack graph with the weight at the same time; traversing all attack paths in the weighted attack graph by using a depth-first search algorithm, and calculating a weak password risk value on each attack path; and finally, taking the attack path with the highest weak password risk value as an optimal attack path, generating and visualizing, and improving the network security defense level of an enterprise.

The invention provides a DPU-based K8S cluster multi-network card service discovery method and device and a storage medium, and the method comprises the steps: obtaining a service call request and the multi-network card information of a pod, the multi-network card comprises a first network card used for connecting a K8S cluster internal network and a second network card used for connecting an external network, the multi-network card information comprises network card IP address information; virtual IP address information corresponding to the second network card is determined, and a forwarding rule is generated based on a preset service strategy, the network card IP address information corresponding to the second network card and the virtual IP address information; and determining a target network card of the target pod based on the forwarding rule and a request address contained in the service calling request, and carrying out request forwarding based on the determined target network card. According to the method, the network performance and efficiency of service discovery in a multi-network-card scene are improved.

The invention discloses a large model intrusion detection method and device based on user behavior data. The method comprises the following steps: collecting daily behavior data of a user from a plurality of data sources; performing feature extraction and normalization preprocessing on the daily behavior data of the user; according to the preprocessed data, carrying out serialized modeling by adopting a Transform model to obtain an intrusion detection model; generating a behavior portrait of each user through the intrusion detection model; and when the to-be-detected behavior of the user does not conform to the behavior portrait of the corresponding user and the deviation value exceeds an intrusion detection threshold value, performing intrusion detection alarm. According to the method, potential security threats such as abnormal access, high-risk website connection, large-scale data transmission and intranet scanning can be quickly identified, so that malicious activities and data leakage risks are effectively detected.

A communication network includes first switches interconnected with second switches. Each first switch includes a first integrated circuit (IC) switch chip, downlink ports, and uplink ports. Each second switch includes ports coupled to at least one uplink port of each of the first switches, and a second IC switch chip in an IC package. To permit each second IC switch chip to forward packets amongst a large number of first switches and to reduce a number of external interconnects of the IC package, each second IC switch chip includes sets of multiplexer / demultiplexer circuitry, each multiplexer / demultiplexer circuitry being coupled between an external interconnect, and a set of multiple internal network interfaces of the second IC switch chip. The multiplexer / demultiplexer circuitry demultiplexes a data stream from the external interconnect to multiple internal network interfaces, and multiplexes multiple data streams from the multiple internal network interfaces to the external interconnect.

The invention provides a four-honey threat exploration method for an enterprise intranet. The four-honey threat exploration method comprises the following steps: constructing a honey court, a honey point, a honey hole and a honey array in the enterprise intranet; the honey court is used for monitoring network traffic and carrying out black, white and grey traffic identification on the network traffic; the honey point is used for carrying out trapping detection on the network flow passing through the honey point; the honey hole is used for collecting attacker information and performing traceability countering according to the attacker information; the honey array is in communication connection with the honey court, the honey point and the honey hole, obtains the safety condition of the enterprise intranet and the deployment information of the honey court, the honey point and the honey hole, and carries out deployment scheduling according to the safety condition of the enterprise intranet. The four-honey system constructed by applying the method fits the enterprise intranet environment and has dynamic adaptive capacity. A real system can be effectively isolated, and attacks are prevented from reaching an actual network. Global linkage disposal can be realized for security threats, security intelligence and attack information can be comprehensively shared, deployment points can be coordinated and adjusted, source tracing and countering can be quickly carried out, and a secure enterprise-level network environment can be constructed.

The invention relates to the technical field of medical information, in particular to a method and a system for processing medical record documents by utilizing artificial intelligence, and particularly relates to a method and a system which can receive and process multi-modal input information including images, videos and voices, can work cooperatively through a multi-agent system and can process the medical record documents. The invention discloses a system for automatically generating, controlling quality and safely inputting medical records in combination with a medical knowledge base and an implementation method thereof. The invention relates to an automatic medical record writing system based on multi-modal input and multi-agent driving. The automatic medical record writing system comprises a multi-modal input module, a multi-agent processing platform and a safety intranet input module. According to the method, establishment of the data channel between the medical intranet and the external AI system is proposed for the first time, the problem of medical intranet isolation is solved, industrial pain points are solved in a breakthrough mode, and a new medical AI landing path is developed.

The invention discloses a webpage content security processing method based on a knowledge graph, and relates to the technical field of webpage content security. The webpage content security processing method based on the knowledge graph comprises the following specific steps: data collection: collecting webpage related internet content data covering texts, images and videos from an internal network of a network service provider, an enterprise or an organization and a website server. According to the method, comprehensive monitoring and analysis of webpage content security are realized, potential security threats, abnormal modes or association relationships in webpage content can be deeply mined by utilizing the reasoning capability of the knowledge graph, including representation learning, association analysis, event tracing, behavior prediction and the like, so that the security threat identification accuracy is improved, and the security threat identification efficiency is improved. And a visual and easy-to-understand visual interface is provided for safety personnel, so that the safety personnel can respond quickly and take corresponding safety measures.

The invention relates to the technical field of computers, and provides a distributed AI large model warehouse downloading acceleration method, which comprises the following steps that: a newly added node completes synchronization of networking and a file mapping relation table between the newly added node and nodes of the whole network based on a gossip protocol; each node constructs a Hash ring through a consistent Hash algorithm based on the node identifier, determines a target Key according to the deployment identifier, and clockwise selects a next node of the target Key as a main node in the Hash ring; when a local intranet node receives a downloading request, firstly searching a target file in a local file list; if the target file is not found locally, initiating an intranet back-to-source request to a target node recorded in the file mapping relation table to obtain the target file; and if the intranet is not hit, a public network back-to-source request is initiated to the main node to obtain the target file, a decentralized networking mechanism based on the gossip protocol and a file mapping relation sharing mechanism are adopted, so that repeated downloading among the nodes is effectively avoided, bandwidth waste is reduced, and public network bandwidth occupation is remarkably reduced.

The invention provides an efficient multi-dimensional network penetration testing method based on RAG, which comprises the following steps: firstly, identifying sub-domain names possibly existing in a target website, and sequentially expanding attack surfaces of penetration testing to obtain vulnerability information pairs; secondly, a design model generated based on retrieval enhancement is adopted, vulnerability information pairs are extracted from the queue to be utilized, knowledge items related to local knowledge base retrieval and network intelligent search retrieval are utilized, and finally, a large model generates vulnerability utilization information according to the knowledge items; acquiring target machine permission for the previously acquired vulnerability information pair construction command injector, and further scanning other hosts of the intranet accessed by the target skipping machine; finally, combining vulnerability information obtained by penetration testing, utilizing a large model to sort vulnerabilities existing in different assets, and outputting penetration testing reports for different assets. According to the method and the system, comprehensive penetration testing of cross-network and cross-system is realized, security experts are helped to quickly identify, verify and repair vulnerabilities in a complex and changeable network environment, and high-efficiency and low-cost network security maintenance is realized.

The invention is suitable for the technical field of software development, and provides a bidirectional interaction method and system based on a low-code front-end rendering engine, and the method comprises the steps: a product side adds a dynamic component in a component library, uses the dynamic component and a plurality of low-code components to package the rendering engine, and issues the rendering engine through an intranet warehouse, the business side selects a low-code integration scheme by using a low-code system based on business requirements so as to complete low-code page development, takes a page code pageId or DSL of the low-code page and all customized development business components as input parameters and injects the input parameters into a rendering engine; the business component developed in a customized mode controls low-code content by obtaining a context when a rendering engine runs; and the rendering engine binds the service component which is developed in a customized manner by analyzing the JS code injected by the low-code component configuration item and controlling the context during operation of the low-code component configuration item. Therefore, two-way communication and mutual control between the low-code rendering engine and the customized development content are achieved, and the flexibility and practicability of a low-code platform are remarkably improved.

The invention discloses a big language model training method based on a knowledge graph, which comprises the following steps: collecting professional text data in a specific field, extracting entities and relationships from the professional text data, constructing a field knowledge graph, and constructing the knowledge graph based on data of different data sources on the basis of an external network; and introducing the domain knowledge graph into an intranet, storing the domain knowledge graph into a knowledge base in the intranet, extracting terminologies from the domain knowledge graph, analyzing word frequencies of the terminologies in the professional text data, and selecting the terminologies with the word frequencies higher than a set threshold value as newly added high-frequency terminologies. According to the method, the professional knowledge graph of the target field is constructed, the big language model is finely adjusted based on the professional knowledge graph, and the professional knowledge big language model is generated.

The invention discloses an interactive connection establishment method and system based on an ICE protocol and electronic equipment. The method comprises the steps that a client configures STUN and SFU server addresses to support ICE connection; the client initiates a request to the STUN server and obtains a local candidate, and initiates a request to the SFU server and obtains a relay candidate, and the relay candidate is used as an opposite terminal candidate; the local candidates are packaged into an ICE candidate list, the client and the opposite end exchange the ICE candidate list through a signaling server, and the relay candidates are added into PeerConsection; initiating bidirectional connectivity check based on the candidate list; the low-delay P2P direct connection is preferentially established through a preset overtime verification mechanism, and the low-delay P2P direct connection is degraded to an SFU relay channel according to levels when the low-delay P2P direct connection fails. Seamless connection from intranet penetration to cloud relay is realized, and high-reliability and low-delay end-to-end connection support is provided for network communication.

Disclosed in the present application are an aircraft final assembly and integration testing platform and testing method. On the basis of a rational platform architecture, structured process data preparation, model-based operation guideline document preparation, and dispatch assistance decision-making are realized by means of an application layer, such that uniform data sources in the field of final assembly can be achieved. Data uploading and issuing between an industrial control network and an internal network, and data interaction control between layers are implemented by means of the mutually collaborative operation of the application layer, a storage layer, an edge layer and an execution layer, thereby improving the information acquisition efficiency and the operating efficiency. The edge layer and the execution layer collaboratively operate, so as to realize the interactive collaboration between the assembly guidance work for operators and automatic testing, thereby improving the efficiency of data information acquisition, operation instruction and fault handling during a final assembly and testing process of an aircraft.

A security protection method and device based on industrial Internet is provided. The disclosure relates to the technical field of network security and realize the isolation between the Internet and the industrial Internet platform intranet by deploying the exit firewall, and there is no restriction from the industrial Internet platform intranet to the Internet, and only necessary ports are opened from the Internet to the industrial Internet platform intranet. By deploying a regional firewall, isolation between the intranet core server and each of the secondary nodes is realized. The regional firewall is deployed on the wide area network router, and the second access policy of secondary nodes and intranet core servers is preset. After the second access policy is formulated, only the IP and service ports of specific hosts are opened, and all other accesses are prohibited.

The invention provides an external equipment security sharing system between internal and external network equipment. The external equipment security sharing system comprises a control signal processor used for securely transmitting a control instruction of external HID equipment between the equipment; the control signal processor is respectively connected with an external computer host connected to an external network and an internal computer host connected to an internal network and isolated from the external network, and a control instruction of external HID equipment received by the external computer host is safely transmitted to the internal computer host through the control signal processor; and hardware isolation, protocol conversion, data encryption and watermark addition are adopted, so that the data security of an internal computer host is ensured. The data security of the internal computer host can be effectively ensured while the internal computer host and the external computer host share the external equipment.

The invention relates to the technical field of electronic equipment detection, in particular to a multi-dimensional anti-candid photographing detector and a detection method thereof. The system comprises a processing unit, a thermal imaging module, an electromagnetic radiation detection module and a wireless security module, wherein the wireless security module comprises at least two wireless network interface cards, and a first wireless network card is used for connecting a specified internal network and scanning and analyzing internal network equipment; the second wireless network card works in a monitoring mode and is used for sniffing all surrounding Wi-Fi signals, Bluetooth signals and associated equipment thereof and performing data packet analysis; the user interaction module, the positioning auxiliary module, the storage unit and the power supply module are used for providing electric energy for the detector. According to the invention, four technical dimensions of thermal imaging, wireless safety detection, infrared light detection and electromagnetic radiation detection are fused, and an intelligent analysis and positioning algorithm is combined, so that the comprehensiveness, the accuracy and the efficiency of detecting candid equipment are improved, and clear positioning guidance and comprehensive safety evaluation are provided for a user.

The invention discloses an automatic auditing and checking system and method for substation operation safety. The system comprises an automatic data acquisition module, a data semantic fusion analysis module, a dynamic auditing rule generation module, a risk collaborative prediction module, an automatic information pushing module and a visual interaction configuration module. All the modules are connected through an intranet data interface and a system internal communication protocol, aiming at the prominent problems that the auditing process depends on manpower, the information system is split, the system semantics is difficult to understand, the risk identification is not comprehensive, the rule adaptability is poor, the response and push chain is broken and the like commonly existing in the existing substation operation auditing work. The invention provides an automatic auditing and checking system and method for substation operation safety, and aims to construct a full-process closed-loop intelligent auditing platform with semantic comprehension capability, multi-source data fusion capability, risk collaborative prediction capability and dynamic rule evolution capability.

The invention provides a highway pavement intelligent maintenance scientific decision-making system and a decision-making method thereof. A data collection and preprocessing module collects multi-source data in a public network and a highway management intranet, and performs cleaning, integration and dimensionality reduction by using a specific algorithm. And building an automatic road detection system based on a Python Django framework, determining an index weight by using a rough set theory, calculating PQI and MQI values, and generating a road technical condition evaluation report. And the pavement performance prediction module integrates multi-source data and predicts pavement performance by adopting a composite kernel function and a Gaussian process regression model. And the maintenance decision module determines the maintenance priority through ANP, generates a maintenance demand list in combination with a hidden Markov model, and generates a fund distribution scheme by using a cuckoo search algorithm. And the maintenance benefit evaluation module evaluates the maintenance benefit by adopting a gray ideal solution and a super-efficiency DEA model. And finally, utilizing a WebGL-based 3D visualization technology and an Echarts-based interactive query analysis function to realize road condition information display and auxiliary decision making.

The invention discloses a data interaction system and method based on cross-network interconnection, the system comprises an extranet service system, an internetwork switching device and an intranet service system, the extranet service system transmits to-be-transmitted data to the intranet service system through the internetwork switching device, the internetwork switching device is used for managing a cross-network control strategy, and the intranet service system transmits the to-be-transmitted data to the intranet service system through the internetwork switching device. Detecting the state of inter-network interaction agent equipment, and actively establishing a cross-network data transmission encryption channel; the internetwork switching equipment comprises an extranet processing unit, a switching processing unit and an intranet processing unit; the extranet processing unit is used for processing data transmitted by the extranet service system; the exchange processing unit is used for transmitting the data processed by the external network processing unit to the internal network processing unit; and the intranet processing unit is used for processing the received data and transmitting the processed data to an intranet service system. According to the invention, the data transmission bandwidth and link security can be improved, and the integrity of cross-network transmission data is ensured.

The invention relates to the technical field of online communication, in particular to a multi-network-type intercommunication online communication system which comprises a management information large area, when the system is used, resources in an intranet are mapped to an extranet through an Nginx proxy server, so that remote access of the resources is achieved, and the management information large area is expanded. Data forwarding and load balancing are carried out among different servers by using the Nginx proxy server, the efficiency and stability of data transmission are improved, data can be simultaneously sent and received between two network nodes by using an mqtt protocol, the efficiency and reliability of data interaction are improved, and the data transmission efficiency and reliability are improved. The method is beneficial to providing real-time message transmission and multi-terminal data sharing synchronization of applications such as communication exchange and file storage across two network types, is beneficial to solving the problem that a user cannot perform direct communication exchange and file transmission due to network boundary limitation, crosses regional limitation and time limitation, is beneficial to realizing flexible office, and is convenient to use. The production efficiency is improved.

The invention provides a resource access method and device, a zero-trust platform and a storage medium, and the method comprises the steps: receiving an internal resource access request of a zero-trust client, the access request carrying an access address of a target resource, user information of the zero-trust client, and temporary authentication information; the access address comprises a zero-trust platform domain name and a target resource identifier, the zero-trust platform domain name points to a public network address of the zero-trust platform, and the target resource identifier is used for uniquely identifying a target resource; the temporary authentication information is used for authenticating that the zero-trust client has the qualification of initiating the access request; based on the user information and the temporary authentication information, verifying the user identity and the access authority of the zero-trust client; after the verification is successful, determining a real address of the target intranet server based on a pre-configured mapping relationship between the real address of the intranet server and the internal resource identifier; and forwarding the access request to the target intranet server according to the real address of the target intranet server.

The invention relates to a transmission method and device based on network environment self-adaption and a storage medium, and the method comprises the steps: trying to establish direct connection with a cloud PC server if a user terminal is in an intranet and is in the same-level network with the cloud PC server; if the user terminal is in the intranet but is not in the same-level network with the cloud PC server, trying to establish connection with the cloud PC server through P2P, and if the user terminal does not successfully establish connection with the cloud PC server through the media Trans; if the user terminal is in the external network and the VPN connected with the user terminal and the cloud PC server are in the same level of network, connecting the VPN through dialing and directly connecting the IP address of the cloud PC server to realize direct connection of media streams; and if the user terminal is in an external network, but the VPN connected with the user terminal and the cloud PC server are not in the same level of network, the user terminal is connected with the VPN through dialing, the VPN tries to establish connection with the cloud PC server through P2P, and if the connection is not successful, the VPN tries to establish connection with the cloud PC server through Trans.

The invention discloses a lightweight vehicle intranet identity authentication and key negotiation method based on a PUF (Physical Unclonable Function). The method comprises a system initialization stage, a PUF registration stage, an identity authentication and key negotiation stage and a block chain synchronization stage. The method is oriented to an automobile domain architecture, direct low-cost identity authentication is carried out on the electronic control unit by utilizing the PUF (namely a physical unclonable function), the necessity of installing safety hardware on the electronic control unit can be eliminated, and secret key leakage is prevented; meanwhile, symmetric cryptography is adopted, a hash function, a pseudo-random function and a Lagrange interpolation formula are combined to balance the speed and safety of the key negotiation process of the electronic control unit, and compared with an existing vehicle intranet identity authentication and key negotiation method, the method has remarkable performance advantages.