845 results about "Intranet" patented technology

The invention relates to the technical field of automobile network security, in particular to an intelligent networked automobile penetration test path generation method and system based on a knowledge graph, and the method comprises the steps: constructing an intelligent networked automobile intranet penetration test security knowledge graph through fusing multi-source heterogeneous data based on an intranet E / E architecture; generating a potential attack path based on the knowledge graph by using a depth-first search algorithm of dynamic pruning optimization; a multi-dimensional space-time risk assessment framework is utilized to quantify path threat intensity and execution feasibility, and quantitative assessment on the generated attack path is realized; and according to an evaluation result, selecting a high-risk and feasible attack path to carry out an actual penetration test, and discovering security vulnerabilities and weaknesses in the system. According to the method, the attack surface is fully covered, the high-value attack path is efficiently generated, the threat intensity and the execution feasibility are accurately and quantitatively evaluated, and the safety test efficiency and accuracy of the intelligent network connection automobile intranet are remarkably improved.

The invention discloses a data exchange system for performing real-time secure communication with an intranet system, and relates to the technical field of network data security. The system comprises a network environment identification module, a challenge authentication module, a hardware key binding module, a data communication module, an abnormal response module, a strategy updating module and a visual monitoring and log module. According to the invention, by introducing the trust map evaluation module, map modeling is carried out on the characteristics of the equipment in the historical operation process, the rationality of the current operation environment of the system is judged based on the map coincidence evaluation result, the communication module is allowed to operate only when the evaluation result meets the condition, and a judgment mechanism based on the historical trusted behavior is formed; and the prevention and control capability of the system on gradual-change attacks and behavior counterfeit is enhanced.

The invention provides a four-honey threat exploration method for an enterprise intranet. The four-honey threat exploration method comprises the following steps: constructing a honey court, a honey point, a honey hole and a honey array in the enterprise intranet; the honey court is used for monitoring network traffic and carrying out black, white and grey traffic identification on the network traffic; the honey point is used for carrying out trapping detection on the network flow passing through the honey point; the honey hole is used for collecting attacker information and performing traceability countering according to the attacker information; the honey array is in communication connection with the honey court, the honey point and the honey hole, obtains the safety condition of the enterprise intranet and the deployment information of the honey court, the honey point and the honey hole, and carries out deployment scheduling according to the safety condition of the enterprise intranet. The four-honey system constructed by applying the method fits the enterprise intranet environment and has dynamic adaptive capacity. A real system can be effectively isolated, and attacks are prevented from reaching an actual network. Global linkage disposal can be realized for security threats, security intelligence and attack information can be comprehensively shared, deployment points can be coordinated and adjusted, source tracing and countering can be quickly carried out, and a secure enterprise-level network environment can be constructed.

The invention relates to the technical field of medical information, in particular to a method and a system for processing medical record documents by utilizing artificial intelligence, and particularly relates to a method and a system which can receive and process multi-modal input information including images, videos and voices, can work cooperatively through a multi-agent system and can process the medical record documents. The invention discloses a system for automatically generating, controlling quality and safely inputting medical records in combination with a medical knowledge base and an implementation method thereof. The invention relates to an automatic medical record writing system based on multi-modal input and multi-agent driving. The automatic medical record writing system comprises a multi-modal input module, a multi-agent processing platform and a safety intranet input module. According to the method, establishment of the data channel between the medical intranet and the external AI system is proposed for the first time, the problem of medical intranet isolation is solved, industrial pain points are solved in a breakthrough mode, and a new medical AI landing path is developed.

The invention relates to the technical field of computers, and provides a distributed AI large model warehouse downloading acceleration method, which comprises the following steps that: a newly added node completes synchronization of networking and a file mapping relation table between the newly added node and nodes of the whole network based on a gossip protocol; each node constructs a Hash ring through a consistent Hash algorithm based on the node identifier, determines a target Key according to the deployment identifier, and clockwise selects a next node of the target Key as a main node in the Hash ring; when a local intranet node receives a downloading request, firstly searching a target file in a local file list; if the target file is not found locally, initiating an intranet back-to-source request to a target node recorded in the file mapping relation table to obtain the target file; and if the intranet is not hit, a public network back-to-source request is initiated to the main node to obtain the target file, a decentralized networking mechanism based on the gossip protocol and a file mapping relation sharing mechanism are adopted, so that repeated downloading among the nodes is effectively avoided, bandwidth waste is reduced, and public network bandwidth occupation is remarkably reduced.

The invention provides an efficient multi-dimensional network penetration testing method based on RAG, which comprises the following steps: firstly, identifying sub-domain names possibly existing in a target website, and sequentially expanding attack surfaces of penetration testing to obtain vulnerability information pairs; secondly, a design model generated based on retrieval enhancement is adopted, vulnerability information pairs are extracted from the queue to be utilized, knowledge items related to local knowledge base retrieval and network intelligent search retrieval are utilized, and finally, a large model generates vulnerability utilization information according to the knowledge items; acquiring target machine permission for the previously acquired vulnerability information pair construction command injector, and further scanning other hosts of the intranet accessed by the target skipping machine; finally, combining vulnerability information obtained by penetration testing, utilizing a large model to sort vulnerabilities existing in different assets, and outputting penetration testing reports for different assets. According to the method and the system, comprehensive penetration testing of cross-network and cross-system is realized, security experts are helped to quickly identify, verify and repair vulnerabilities in a complex and changeable network environment, and high-efficiency and low-cost network security maintenance is realized.

The invention discloses a big language model training method based on a knowledge graph, which comprises the following steps: collecting professional text data in a specific field, extracting entities and relationships from the professional text data, constructing a field knowledge graph, and constructing the knowledge graph based on data of different data sources on the basis of an external network; and introducing the domain knowledge graph into an intranet, storing the domain knowledge graph into a knowledge base in the intranet, extracting terminologies from the domain knowledge graph, analyzing word frequencies of the terminologies in the professional text data, and selecting the terminologies with the word frequencies higher than a set threshold value as newly added high-frequency terminologies. According to the method, the professional knowledge graph of the target field is constructed, the big language model is finely adjusted based on the professional knowledge graph, and the professional knowledge big language model is generated.

The invention discloses an interactive connection establishment method and system based on an ICE protocol and electronic equipment. The method comprises the steps that a client configures STUN and SFU server addresses to support ICE connection; the client initiates a request to the STUN server and obtains a local candidate, and initiates a request to the SFU server and obtains a relay candidate, and the relay candidate is used as an opposite terminal candidate; the local candidates are packaged into an ICE candidate list, the client and the opposite end exchange the ICE candidate list through a signaling server, and the relay candidates are added into PeerConsection; initiating bidirectional connectivity check based on the candidate list; the low-delay P2P direct connection is preferentially established through a preset overtime verification mechanism, and the low-delay P2P direct connection is degraded to an SFU relay channel according to levels when the low-delay P2P direct connection fails. Seamless connection from intranet penetration to cloud relay is realized, and high-reliability and low-delay end-to-end connection support is provided for network communication.

Disclosed in the present application are an aircraft final assembly and integration testing platform and testing method. On the basis of a rational platform architecture, structured process data preparation, model-based operation guideline document preparation, and dispatch assistance decision-making are realized by means of an application layer, such that uniform data sources in the field of final assembly can be achieved. Data uploading and issuing between an industrial control network and an internal network, and data interaction control between layers are implemented by means of the mutually collaborative operation of the application layer, a storage layer, an edge layer and an execution layer, thereby improving the information acquisition efficiency and the operating efficiency. The edge layer and the execution layer collaboratively operate, so as to realize the interactive collaboration between the assembly guidance work for operators and automatic testing, thereby improving the efficiency of data information acquisition, operation instruction and fault handling during a final assembly and testing process of an aircraft.

The invention provides an external equipment security sharing system between internal and external network equipment. The external equipment security sharing system comprises a control signal processor used for securely transmitting a control instruction of external HID equipment between the equipment; the control signal processor is respectively connected with an external computer host connected to an external network and an internal computer host connected to an internal network and isolated from the external network, and a control instruction of external HID equipment received by the external computer host is safely transmitted to the internal computer host through the control signal processor; and hardware isolation, protocol conversion, data encryption and watermark addition are adopted, so that the data security of an internal computer host is ensured. The data security of the internal computer host can be effectively ensured while the internal computer host and the external computer host share the external equipment.

The invention relates to the technical field of electronic equipment detection, in particular to a multi-dimensional anti-candid photographing detector and a detection method thereof. The system comprises a processing unit, a thermal imaging module, an electromagnetic radiation detection module and a wireless security module, wherein the wireless security module comprises at least two wireless network interface cards, and a first wireless network card is used for connecting a specified internal network and scanning and analyzing internal network equipment; the second wireless network card works in a monitoring mode and is used for sniffing all surrounding Wi-Fi signals, Bluetooth signals and associated equipment thereof and performing data packet analysis; the user interaction module, the positioning auxiliary module, the storage unit and the power supply module are used for providing electric energy for the detector. According to the invention, four technical dimensions of thermal imaging, wireless safety detection, infrared light detection and electromagnetic radiation detection are fused, and an intelligent analysis and positioning algorithm is combined, so that the comprehensiveness, the accuracy and the efficiency of detecting candid equipment are improved, and clear positioning guidance and comprehensive safety evaluation are provided for a user.

The invention discloses an automatic auditing and checking system and method for substation operation safety. The system comprises an automatic data acquisition module, a data semantic fusion analysis module, a dynamic auditing rule generation module, a risk collaborative prediction module, an automatic information pushing module and a visual interaction configuration module. All the modules are connected through an intranet data interface and a system internal communication protocol, aiming at the prominent problems that the auditing process depends on manpower, the information system is split, the system semantics is difficult to understand, the risk identification is not comprehensive, the rule adaptability is poor, the response and push chain is broken and the like commonly existing in the existing substation operation auditing work. The invention provides an automatic auditing and checking system and method for substation operation safety, and aims to construct a full-process closed-loop intelligent auditing platform with semantic comprehension capability, multi-source data fusion capability, risk collaborative prediction capability and dynamic rule evolution capability.

The invention provides a highway pavement intelligent maintenance scientific decision-making system and a decision-making method thereof. A data collection and preprocessing module collects multi-source data in a public network and a highway management intranet, and performs cleaning, integration and dimensionality reduction by using a specific algorithm. And building an automatic road detection system based on a Python Django framework, determining an index weight by using a rough set theory, calculating PQI and MQI values, and generating a road technical condition evaluation report. And the pavement performance prediction module integrates multi-source data and predicts pavement performance by adopting a composite kernel function and a Gaussian process regression model. And the maintenance decision module determines the maintenance priority through ANP, generates a maintenance demand list in combination with a hidden Markov model, and generates a fund distribution scheme by using a cuckoo search algorithm. And the maintenance benefit evaluation module evaluates the maintenance benefit by adopting a gray ideal solution and a super-efficiency DEA model. And finally, utilizing a WebGL-based 3D visualization technology and an Echarts-based interactive query analysis function to realize road condition information display and auxiliary decision making.

The invention provides a resource access method and device, a zero-trust platform and a storage medium, and the method comprises the steps: receiving an internal resource access request of a zero-trust client, the access request carrying an access address of a target resource, user information of the zero-trust client, and temporary authentication information; the access address comprises a zero-trust platform domain name and a target resource identifier, the zero-trust platform domain name points to a public network address of the zero-trust platform, and the target resource identifier is used for uniquely identifying a target resource; the temporary authentication information is used for authenticating that the zero-trust client has the qualification of initiating the access request; based on the user information and the temporary authentication information, verifying the user identity and the access authority of the zero-trust client; after the verification is successful, determining a real address of the target intranet server based on a pre-configured mapping relationship between the real address of the intranet server and the internal resource identifier; and forwarding the access request to the target intranet server according to the real address of the target intranet server.

The invention provides a multifunctional network protocol converter, which comprises a main control module, a switch chip, a communication module and a storage module, and is characterized in that the switch chip comprises a plurality of network ports, each network port belongs to the same intranet, and each network port can be independently provided with a communication mode, supports various different protocols and data forwarding configurations, can realize various forwarding modes, and is provided with a plurality of communication interfaces; the data exchange module provides a physical layer data exchange function; the main control module identifies, analyzes, stores, converts and encapsulates the data of different protocol types received by the network port and the communication module through the data storage protocol stack, forwards the encapsulated data of different protocols through the network port and the communication module, and integrates a switch, a protocol converter and a data processing function into one device; the system architecture is simplified, the problems of high network protocol conversion cost and complexity caused by the prior art are effectively solved, and the network protocol conversion cost and complexity are effectively reduced.

The invention discloses a fusion quantum secure communication method of an NAT gateway, and relates to the technical field of communication network information security and quantum information. Comprising the steps of 1, creating a fusion quantum security communication system of an NAT gateway, 2, adopting a quantum hybrid encryption architecture through a quantum security module, and internally arranging a quantum key distribution unit and an anti-quantum computing acceleration chipset, 3, expanding a quintuple mapping structure of NAT through a dynamic address mapping and quantum encryption module, newly adding a quantum security dimension field QSV, and carrying out quantum encryption on the quantum key distribution unit and the anti-quantum computing acceleration chipset. And 4, developing a protocol non-inductive conversion engine through a hybrid protocol stack cooperation module, supporting an IPv4 / IPv6 dual-stack quantum tunnel and a quantum key inheritance protocol to realize cross-protocol family encryption parameter migration, dynamically adjusting a quantum encapsulation mode in an address conversion process, and dynamically associating an internal network address port with a quantum key parameter and a channel fingerprint feature. And 5, constructing a quantum perception type session state machine through an anti-quantum attack session management module, and performing a joint decision-making mechanism through quantum entanglement state monitoring and classical traffic feature analysis.

The invention provides a full-dimension intelligent perception type firewall system, and the system comprises a two-factor authentication module which is used for generating a digital identity certificate through living body detection, micro-expression analysis and dynamic token verification; the AI strategy management module is used for verifying the authority level of the digital identity credential and generating an access control rule with a digital signature according to the authority level; the traffic perception and analysis module is used for configuring traffic acquisition parameters according to the access control rule and generating an abnormal traffic report of the traffic acquisition parameters; the attack intention recognition module is used for generating a forbidding instruction containing a source IP, a target IP and a forbidding level based on the abnormal traffic report and in combination with service context information; and the infinite address governance module is used for performing duplicate checking comparison on the IP address in the forbidding instruction and the IP address in the intranet address library, and marking the compared risk address, so that the network attack can be accurately and effectively intercepted.

The invention provides a safe short message link invoice generation system and method based on a bank intranet, and belongs to the technical field of data processing, and the method specifically comprises the steps: determining an available invoicing amount interval based on the change condition of a centralized verification risk time period in an effective time interval of an invoicing short message link at a current time period under different invoicing amounts, and when the matching invoice amount is not in the available invoice amount interval, according to the change condition of the matching invoice in different concentrated verification risk time periods and the invoice amount influence condition of the different concentrated verification risk time periods on the future time period, the matching invoice amount is calculated according to the change condition of the matching invoice in the different concentrated verification risk time periods. According to the generation processing method for determining the effective time interval of the short message link invoice of the server of the bank intranet in the current time period, the congestion condition of the server for checking and downloading the invoice is avoided.

The invention relates to the technical field of computer information security, and discloses a communication anomaly detection method, which comprises the following steps: acquiring historical session data of a target application; constructing a traffic fingerprint model according to the historical session data; monitoring the target application in real time, and obtaining target session data of the target application; performing analysis processing on the target session data, and extracting a target feature vector of the target session data; judging whether the target session data is an abnormal communication behavior or not according to the target feature vector, a traffic fingerprint model and an abnormal threshold; and when the target session data is an abnormal communication behavior, triggering an alarm mechanism. According to the method, the traffic fingerprint model is constructed by acquiring the historical session data of the target application, the session data of the target application is monitored and analyzed in real time, and whether the communication is abnormal or not is judged by combining the model and the abnormal threshold value. The encryption traffic and application behavior diversity are effectively handled, the false alarm rate is reduced, and the intranet application security and monitoring efficiency are improved.

The invention discloses a medical network collaborative penetration test system and method based on artificial intelligence, and belongs to the technical field of medical information security, and the method comprises the steps: integrating a hospital intranet, medical equipment, cloud data center data and historical network delay data to construct a medical network data center; analyzing association between network vulnerabilities and delay data through a graph neural network, constructing an attack path analysis model containing delay weights, and quantifying risk scores to generate a test target priority list; defining a protocol vulnerability and a delay threshold, designing a test scene and generating an attack vector, matching an attack tool to perform a simulation test, calculating a vulnerability triggering success rate and evaluating a risk; generating a penetration test case according to the test target priority list and the risk level, executing multiple rounds of attack tests and generating a report; and monitoring the change of the vulnerability triggering success rate by dynamically adjusting the delay parameter, setting an early warning threshold value, and monitoring and sending a risk early warning notification in real time.

The embodiment of the invention discloses a light application interaction architecture method and device based on data ferry and a medium, and the method comprises the steps: deploying an extranet light application in an extranet server, deploying an ERP system in an intranet server, and physically isolating the extranet server from the intranet server; deploying the cache database in an extranet server, and storing data of the extranet light application in the cache database; and deploying the data ferry machine in an intranet server, querying the newly added data in the cache database through the data ferry machine, and sending the newly added data to the ERP system to complete the light application interaction architecture. According to the embodiment of the invention, intranet applications and services of clients are not directly exposed in an extranet environment, external users cannot directly penetrate through the intranet services no matter what modes the external users pass through, IT security risks are effectively reduced through the light application of the ferry machine, and the extranet applications and the intranet applications have emphasis, perform their own functions and do not influence each other.

The invention provides a self-adaptive transformation and migration method and system for an internal website, and relates to the technical field of website migration. Comprising the following steps: constructing a hierarchical credential adaptation architecture, establishing a dynamic authority-data mapping mechanism, realizing knowledge base-data migration linkage and deploying an adaptive security protection chain. The method is used for realizing collaborative improvement of compatibility, security and knowledge service efficiency of an internal website in a credential environment through hierarchical credential adaptation, dynamic permission and data association, knowledge base linkage and self-adaptive security protection; besides, through cooperative work of the hardware driving adaptation module and the software interface conversion module, automatic identification of hardware features and interface features, precise analysis of adaptation requirements and dynamic generation of configuration files are realized. The compatibility of an internal website to different models of servers, autonomous controllable components and software interfaces in a credential environment is remarkably improved, the adaptation period is shortened, and stable operation of the system is guaranteed.

The invention discloses a full-link analysis display method and device based on routing configuration, a medium and equipment. The method comprises the following steps: collecting and extracting equipment routing data; confirming the type of equipment routing data, and executing data cleaning processing according to the type of the equipment routing data; path acquisition is carried out based on the routing configuration information of the target assets, and three groups of network incoming link diagrams are respectively obtained; and sequentially splicing the Internet network inbound link diagram, the internal network inbound link diagram and the cluster network inbound link diagram to generate a hierarchical whole network link topological diagram, and performing front-end link display on the whole network link topological diagram. Visualization of various assets and internet access links in a virtualized network is realized, and in an actual application scene, problems can be quickly found based on the topological graph of the whole network links according to association of the collected equipment routing data and the security events, the influence range is positioned, and the security response efficiency is improved.

The invention discloses a server-level computing power identification gateway, which relates to the technical field of Internet, and comprises an Agent agent program, a trusted springboard link, a data acquisition module, a computing power identification generation module and a data reporting module, the Agent agent program is deployed on a computing power enterprise intranet server and is responsible for establishing trusted connection with the gateway; and the trusted springboard link is used as a secure channel for data transmission and is responsible for ensuring that the data is not stolen or tampered in a transmission process. The server-level computing power identification gateway is realized through a lightweight Agent agent program deployed by an internal network server of a computing power enterprise, a trusted springboard link is established through SSH key authentication, and other servers authorized by the enterprise are skipped and logged in, so that the security of the gateway is enhanced through the mechanism, and bottom-layer resource data acquisition is realized in combination with an automatic script; and performing data summarization and resource coding on the acquired resource information, converting the resource information into a computing power identifier, and synchronously reporting the computing power identifier to a regional computing power identifier gateway.

The invention discloses a management software security maintenance method based on an internet information technology, which belongs to the technical field of data security and comprises the steps of block chain patch management, zero-trust architecture identity verification and access control, vulnerability response and repair and machine learning and dynamic behavior analysis. The technical problems of opaque patch management, low vulnerability response efficiency and insufficient unknown threat protection in traditional network security management are solved, patch tampering and malicious software invasion are effectively prevented, the security of intranet resources is improved, the vulnerability response speed is increased, the requirement for manual intervention is reduced, and the security of the intranet resources is improved. The protection capability of the system to novel attacks is enhanced, the complexity in the identity verification process is greatly reduced, the user experience is improved, the expansion range of potential attacks is reduced, and the flexibility and expandability of the system are enhanced.

The invention discloses an offline consumption method under a network interruption condition, and belongs to the technical field of electronic payment. In order to solve the problems of payment failure and low efficiency caused by network congestion or interruption in people-intensive scenes such as canteens and the like, the scheme realizes offline consumption through a local transaction verification and asynchronous order reporting mechanism: firstly, TCP connection is established between a consumption machine and an offline server through an intranet, a user swipes a card / scans a code to trigger a transaction after a worker inputs an amount, and the payment efficiency is improved; the offline server verifies the account balance and the transaction limitation in real time, if the verification is passed, an order is generated and stored in a local database, payment success is returned, and external network communication is not needed in the transaction process; the problem of transaction paralysis during network interruption is effectively solved, the stability and efficiency of a high-frequency payment scene are improved, and the method is suitable for canteens, convenience stores and other scenes needing offline payment support.

The embodiment of the invention provides a communication method and a related device, and the method comprises the steps that terminal equipment transmits a first message, the first message requests to create a first session, the first message comprises first identification information, and the first identification information indicates that the first session is used for collecting first information; the first information is used for performing data analysis, model reasoning or model training processing on a network element (such as a network data analysis function) of a core network; and the terminal equipment sends first information to the first network element through the first session, wherein the first information comprises measurement information of the terminal equipment. The terminal equipment can send the first information to the first network element without acquiring the address information of the first network element, so that the first network element (such as a data analysis network element or a model training network element) can perform data analysis processing, model training or model reasoning and the like according to the first information. The security privacy of the core network equipment is effectively guaranteed, the internal network element topology of the core network is conveniently hidden, and the network security is improved.

The invention belongs to the technical field of network security defense, and particularly discloses a multi-stage network security threat defense method and system based on adaptive feedback. A defense strategy is dynamically generated and optimized by performing multi-dimensional analysis on feature differences of historical security events and events to be processed and combining an adaptive feedback mechanism and an attack detection model for iterative training; when deviation or novel threats are detected, rollback and incremental training can be automatically triggered, and multi-round iterative closed-loop defense is formed. The method effectively deals with advanced persistent threats, zero-day vulnerabilities and multi-stage attacks, significantly improves threat detection accuracy and strategy response efficiency, reduces redundant feature interference, enhances expandability and adaptivity of the system, can be widely applied to environments such as the Internet of Things, cloud computing and enterprise intranets, and has wide application prospects. And the intelligence and flexibility of network protection are obviously improved.

The invention discloses a Windows domain penetration test system and method based on deep reinforcement learning. The system comprises an information collection module, a vulnerability detection module, an agent generation module and an agent training module. A host in an intranet domain is used as a springboard machine, an information collection module is deployed, and all network nodes in the domain are subjected to comprehensive information collection; generating a configuration file for constructing an intelligent agent according to the information in the domain, and constructing the deep reinforcement learning intelligent agent through the configuration file; and the intelligent agent automatically verifies all possible potential safety hazards in the domain environment by using a vulnerability detection module, learns in detection, and finally generates all possible safety problems in the domain. According to the method, the automatic penetration testing technology is utilized, full-automatic penetration testing and risk assessment of the domain environment are achieved, deep reinforcement learning is combined, various safety problems in the Windows domain are found more accurately, resources are allocated efficiently, high-risk path areas are defended in a centralized mode, and therefore the overall network safety is enhanced.

The present invention discloses a network security processing method and system based on a dynamic network, and relates to the field of network security technology. The method includes: executing configuration management of network terminals in an intranet; establishing a monitoring data set; establishing a drive network, inputting the monitoring data set and time information into the drive network to execute drive evaluation, calling a virtual address, and executing dynamic IP updates of network terminals; performing node security impact score calculations for each monitoring point, and generating node security impact score calculation results; performing abnormal event correlation evaluation on the monitoring point, performing impact calculations on the node security impact score calculation results, and generating a comprehensive security impact score; performing network security processing according to the comprehensive security impact score and dynamic IP update results. The method solves the technical problem of inaccurate network risk identification under traditional static IP address management, resulting in untimely protection, and achieves the technical effect of improving network security protection capabilities through dynamic and real-time network security processing.