43 results about "Is security" patented technology

Techniques for providing a language model to detect and remedy a security incident are described. A language model is deployed to respond to prompts from network operators. The language model receives a prompt from the network operator indicating actions to take based on trigger events. When a trigger event occurs, the language model receives a description of a potential security incident and identifies indicators of compromise in the description. The language model calls one or more other models to analyze the indicators and receives from the one or more other models, information indicating that the potential security incident is a real security incident, and outputs a prompt to the network operator to approve confirmation of the security incident.

Certain aspects of the disclosure concern a computer-implemented method for improved data security in large language models. The method includes receiving a prompt query entered through a user interface, extracting a plurality of named entities from the prompt query and classifying the plurality of named entities into respective entity classes, tagging the plurality of named entities to be security compliant or security noncompliant based on the respective entity classes, and responsive to finding that one or more named entities are tagged to be security noncompliant, generating an alert on the user interface.

Provided are security encryption algorithm identification method and system, including: an electronic device having a software app, a downloadable storage unit for storing a dynamic-link library (DLL), and a scanning module for scanning the DLL to obtain DLL filename information; a cryptography DLL list, with the scanning module comparing the DLL filename information according to the cryptography DLL list to generate security encryption algorithm library (SEAL) filename information and being linked to a SEAL corresponding to the SEAL filename information to retrieve SEAL version information from a metadata of the SEAL; a specified SEAL storage unit having a plugin-equipped SEAL downloadable by the scanning module from the specified SEAL storage unit according to the SEAL filename information and version information and dedicated to replacing the SEAL; and a specified storage unit disposed in the electronic device to store log files created when the software app calls the plugin-equipped SEAL.

A communication method includes: obtaining security information of a first tag and one or more operation command security policies of the first tag, where the security information is security information that has been executed, and includes a first authentication policy and / or a first security policy; receiving a first operation command from an application function (AF) entity; determining a second authentication policy and / or a second security policy of the first tag based on the security information and a first operation command security policy included in the one or more operation command security policies, where the first operation command security policy corresponds to the first operation command; and sending a first command to a second device, where the first command includes the second authentication policy and / or the second security policy, and a tag identifier of the first tag.

The application discloses a kind of based on device code's risk scanning method, system and computing device, comprising: obtaining a device code, the device code is obtained from first device, and the device code is sent from first device to second device;Wherein, the device code includes at least one software code;Generate an update record;Wherein, the update record includes the relationship record between the device code and the first device and / or the second device;When detecting that there is security risk in the device code, according to the update record, scanning result is sent to the first device and / or the second device.The application can automatically send scanning result to user by the update record generated automatically, improve the efficiency and accuracy of risk scanning.

The application discloses a 5G core network element device with a security control function, characterized in that the device comprises a data acquisition and processing module, a global security analysis module and a unified decision control module; the data acquisition and processing module collects security monitoring data of a base station, a core network and a terminal and stores the data into a database; the global security analysis module performs correlation analysis on the data in the database and transmits analysis results to a unified configuration and display system; the correlation analysis method is as follows: if all the collected security monitoring data are security events, the security events are subjected to multivariate security event correlation analysis to form global security events; otherwise, a plurality of alarm data clusters are formed by performing multivariate alarm data correlation on the monitoring alarm information, and then a deep clustering event recognition method is used to convert the correlation analysis results into global security events; and the unified decision control module generates corresponding security disposal decisions based on the warning levels corresponding to the global security events and delivers the decisions to a PCF network element.

The invention relates to a security verification method, device and equipment, a readable storage medium and a program product. The method is applied to gateway equipment. The method comprises the following steps: firstly, receiving a control request which is sent by a control terminal and is used for controlling target equipment by the control terminal, then, acquiring physical layer feature information of the control request, and finally, performing security verification on the control terminal according to the physical layer feature information and historical physical layer feature information of the control terminal, determining a security verification result, and sending the security verification result to the control terminal. The safety verification result is used for indicating whether the control terminal is a safety terminal. By adopting the method, identity authentication can be performed on the control terminal, and potential safety hazards caused by counterfeiting of attackers are avoided.

An information processing apparatus includes a collection unit for inputting instruction information used to collect information related to a security incident, into a model that generates and outputs an answer based on an input instruction and causing the model to collect answer information related to the security incident and an extraction unit for extracting information indicating the security incident and information indicating an organization to be a subject of the security incident, based on the answer information.

Methods, systems, and computer storage media for providing security incident management using a security graph layering engine in a security management system. Security incident management is provided using the security graph layering engine that include multi-layer security graph that supports querying a security graph using a multi-layer representation of data associated with security graph. In operation, a security graph associated with a plurality of security resources in a cloud environment is accessed. Based on accessing the security graph, a multi-layer security graph is generated. The multi-layer security graph is a multi-layer representation of the security. The multi-layer security graph is deployed. A security query associated with the multi-layer security graph is accessed. The security query is executed based on the multi-layer security graph, executing the security query generates a query result. The query result is communicated to a security incident management client to cause display of the security query results.

An integrated circuit device includes a hardware processor. The integrated circuit device is safety certified. The hardware processor is capable of executing a hypervisor and a real-time operating system (RTOS). The hypervisor is a level 1 hypervisor and is safety certified. The RTOS is safety certified and operates as a first guest machine of the hypervisor. The RTOS is capable of performing a safe operation for a functional safety feature.

This disclosure relates to a device control method, apparatus, electronic device, storage medium, and program product. The method includes: in response to a first device receiving a target operation instruction, determining a target control instruction, wherein the target control instruction is used to instruct a second device to perform a target operation, the second device being at least one device in a device domain where the first device resides, and the first device being a core device in the device domain; and sending the target control instruction to the second device. In this disclosure, the first device and the second device are located in the same device domain. Control between two devices in the same device domain is secure. Therefore, when the first device controls the second device in its device domain to perform a target operation, no additional authentication is required, thus improving the convenience of cross-device control while ensuring its security.

Methods, systems, and computer storage media for providing security event management using a security map tiering engine in a security management system. Security event management is provided using a security map hierarchy engine that includes a multi-layer security map that supports querying the security map using a multi-layer representation of data associated with the security map. In operation, a security map associated with a plurality of security resources in a cloud environment is accessed. A multi-layer security map is generated based on the access security map. The multilayer security map is a multilayer representation of security. And deploying the multi-layer security map. A security query associated with the multi-layer security map is accessed. And executing the security query based on the multi-layer security map, and executing the security query to generate a query result. The query results are transmitted to a security event management client to cause a secure query result display.

The invention is in the field of computer technology. The invention describes an architecture of a safety automation system and a method for safely autonomously operating a technical device. The architecture solves the problem that every possible Byzantine error, whether caused by an accidental malfunction of hardware, a design error in software or an intrusion, must be identified and contained, so that no safety-relevant event occurs. The architecture consists of four largely independent subsystems, which are arranged hierarchically and each form an encapsulated fault containment unit. At the top of the hierarchy is the safety subsystem, i.e. the fault-tolerant decision subsystem, which executes simple software on fault-tolerant hardware. The other three subsystems are unsafe because they contain complex software. It is empirically difficult to find all design errors in a complex software system and to prevent intrusions. Due to redundancy and diversity, every error of the unsafe subsystems is masked so that no safety-critical malfunction occurs.

The invention discloses a software and hardware compatibility method based on an Internet of Things information security chip, and relates to the technical field of software and hardware compatibility, and the method comprises the steps: generating an optimal temporary security communication protocol through a dynamic protocol generation algorithm according to an available security capability intersection list and a composite environment identification code, a special security communication channel is established between an information security chip and a software layer by using an optimal temporary security communication protocol, after the security communication channel is established, the running states of the information security chip and a main processor are monitored in real time, a running state snapshot data block is obtained, and when a security task to be processed exists, the information security chip and the main processor are subjected to the snapshot data block. And according to the running state snapshot data blocks of the information security chip and the main processor, splitting the security task into an information security chip sub-task and a main processor sub-task, and executing scheduling allocation. According to the software and hardware cooperation method based on dynamic environment perception, a software and hardware cooperation security guarantee with stability, security and high efficiency is provided for complex and changeable application scenes of the Internet of Things.

An automated driving system includes a security companion subsystem to access data generated at a compute subsystem of the automated driving system, which indicates a determination by the compute subsystem associated with an automated driving task. The security companion subsystem determines whether the determination is safe based on the data. The security companion subsystem is configured to realize a higher safety integrity level than the compute subsystem.

The present application relates to a kind of target trajectory generation method based on multi-path security video, belong to technical field.The present application is oriented to the target trajectory generation problem in security video, in view of the current situation that target loss caused by single target detection and re-identification, matching degree is not high, provide a kind of target trajectory generation method based on multi-path security video.For multi-path security video, there are four important features:one is that there is security area overlap and target appears repeatedly in multiple places in multi-path video;Second, there is a connection or adjacent relationship in the security area of multi-path video;Third, video is stream data, not video clip, and the matching range is wider;Fourth, the application feasibility of target space-time association is stronger.Therefore, the present application makes full use of the four features of security video and auxiliary information, based on multi-path video, multi-method fusion, multi-target correlation, to improve the accuracy of target tracking and trajectory generation, improve the re-identification precision.

The invention discloses an intelligent fault diagnosis and processing method and system for a refrigerating system. The method comprises the steps that operating parameters of an internal auxiliary system and an external auxiliary system of the refrigerating system are collected; acquiring a current working condition reference parameter, and identifying as abnormal when the internal parameter deviates from the reference overlimit; causal analysis is carried out by combining external parameters, and fault roots and types are judged; if the monitoring data are invalid, calculating a virtual substitution value by using thermodynamic coupling parameters to maintain operation; if the security risk performance declines, actively adjusting the control parameters to compensate the performance loss; and if the fault is a safety risk fault, shutdown is executed. According to the method, false alarms are reduced through the working condition self-adaptive benchmark, fault sources are accurately distinguished through cross-system cooperation, a fault-tolerant mechanism is established to avoid unnecessary shutdown, and conversion from passive maintenance to active operation and maintenance is achieved.

A method, computer program product, and system in which a secure interface control configures a hardware security module for exclusive use by a secure guest. A secure interface control ("SC") obtains a configuration request for configuring a hardware security module (HSM) from a given guest (via a hypervisor) of guests managed by the hypervisor. The SC determines whether the HSM has already been configured to a particular guest of one or more guests, but based on determining that the HSM is not configured to the particular guest and is a secure guest, the SC cancels the establishment of the configuration of the HSM by exclusively limiting access of the guest to the HSM to the given guest. The SC logs in the given guest to the HSM by utilizing a secret of the given guest. The SC obtains a session code from the HSM and maintains the session code.

1. The name of the design product: the front panel of security system keyboard. 2. The use of the design product: the overall use of the design product is the keyboard for building, home security system or access control system; the partial use is the front panel of security system keyboard. 3. The design points of the design product: the shape of the claimed partial design. 4. The picture or photo that best shows the design points: perspective view. 5. Other circumstances that need to be explained: the design claimed in the present design patent is a partial design, wherein the solid line part represents the claimed part and the dashed line part represents the part not constituting the claimed part.

An API response field classification service obtains API documentation published by a vendor and defined security policies and matches the response fields represented in the security policies to their descriptions in the API documentation. The service generates labelled training data that comprise the identified response field descriptions with labels indicating that their corresponding response field is security related. Additional labelled training data for security unrelated response fields comprises descriptions of response fields that are known not to be represented with any security policies. The service trains a text classifier on the labelled training data. The trained text classifier accepts inputs comprising descriptions of unknown response fields and outputs predicted classes indicating whether the corresponding response fields are predicted to be security related. Subsequent creation of security policies can be focused on these response fields predicted to be security related.

The invention discloses a security decision-making method and device based on a multi-modal large language model. The method comprises the following steps: acquiring a target question which is input by a target object and is composed of information of multiple modes; the safety decision model is used for analyzing the target problem to obtain a logical reasoning link, and the reasoning result comprises a problem solution generated when the information of the multiple modes is respectively safe and is still safe after being combined, or risk prompt information generated when the information of the multiple modes is respectively safe and has a safety risk after being combined. The security decision model is obtained by performing optimization training on a multi-modal big language model by using a plurality of groups of multi-modal problems which are formed by a plurality of pieces of security single-modal information and have security risks as sample data; and outputting a target logical reasoning link or a reasoning result to the target object. According to the method and the device, the technical problem that the hidden reasoning risk possibly generated by information combination of multiple modes is easily ignored when a traditional model analyzes the multi-mode information is solved.

1. Name of the product in this design: Graphical User Interface for Log Easy Security Product Architecture Diagram for Electronic Devices. 2. Purpose of this design: An electronic device. 3. The key design feature of this product is its graphical user interface. 4. The image or photograph that best illustrates the design's key features: the front view. 5. Uses of the graphical user interface: It plays an important role in communication and collaboration, design guidance, system analysis, decision support, knowledge transfer, connecting business and technology, clarifying product boundaries, formulating development plans, improving security and supporting compliance. It is an indispensable tool in the development and management of security products. 6. Human-computer interaction method of graphical user interface: The main view is the initial interface; clicking the cube icon in the middle of the main view will take you to the interface change state diagram.

The application discloses a kind of based on station type identification auxiliary interlocking data design system and method, belong to the field of track traffic signal interlocking computer simulation, including input data processing step, station topological structure diagram generation step, general station type data editing storage step, special station type data editing storage step, and matching query output step, in project design liaison stage can efficiently identify that interlocking product does not support special station type, facilitate project data design personnel to carry out influence analysis, the station type that there is security risk and influence operation efficiency is discovered early and feedback optimization station type design, realize from source to eliminate hidden danger and influence, avoid in later interlocking data production stage discovery only through special design means to eliminate the influence brought by this special station type and additional increase data design auditing workload.

The present invention discloses a security simulation unit, an interaction method for the security simulation unit, and a system. The security simulation unit includes security simulation hardware and program components running on the security simulation hardware. The program components include a security service program, a security service support component, and a system support component. The security service program includes a simulation ESAM unit management module, a 698 ciphertext protocol parsing module, a log recording module, an ESAM business simulation module, an SM encryption and decryption module, and a multi-task concurrent processing module, which is used to provide data security services for external devices and process client API call functions in a TCP / IP manner. The security simulation hardware includes an MCU, an SSD hard disk, a RAM, a network card, a communication interface, and an encryption card. The client interface part is the external interface of the security simulation unit, which calls the security service function and realizes customized function configuration. The security simulation unit has strong scalability, a high degree of modularity, wide hardware support, and good security and reliability.

A computer-implemented method for improving security of a communication between a DLT network node and an external computer system, comprising steps of: receiving from a DLT network node a first communication message comprising a digitally signed message with a request for communication with the external computer system, a security hash for the digitally signed message, and an identifier assigned to a digital signature used for signing the digitally signed message; calculating a first verification hash from the signed message and the security hash; sending a second communication message comprising the digitally signed message, security hash, identifier and first verification hash to a verification node in the DLT network for verification; sending the message to the external system when the verification node confirms that the security hash is correct hash for the secure message, the signed message is signed by a private key assigned to the identifier, and the first verification hash matches a second verification hash calculated by the verification node based on the secure message and the security hash.

Provided are security encryption algorithm identification method and system, including: an electronic device having a software app, a downloadable storage unit for storing a dynamic-link library (DLL), and a scanning module for scanning the DLL to obtain DLL filename information; a cryptography DLL list, with the scanning module comparing the DLL filename information according to the cryptography DLL list to generate security encryption algorithm library (SEAL) filename information and being linked to a SEAL corresponding to the SEAL filename information to retrieve SEAL version information from a metadata of the SEAL; a specified SEAL storage unit having a plugin-equipped SEAL downloadable by the scanning module from the specified SEAL storage unit according to the SEAL filename information and version information and dedicated to replacing the SEAL; and a specified storage unit disposed in the electronic device to store log files created when the software app calls the plugin-equipped SEAL.

The invention relates to a route connection method and device, computer equipment, a storage medium and a product, and relates to the technical field of communication. The method comprises the steps that encrypted information reported by a target terminal is received, the encrypted information is obtained after the target terminal encrypts a service set identifier SSID and verification information of a target router through an encryption key in a target key pair, and the target key pair is dynamically issued to the target terminal by a security authentication platform; decrypting the encrypted information through a decryption key in the target key pair to obtain decrypted information; matching the SSID of the target router in the decryption information with the verification information to obtain a matching result; under the condition that the matching result indicates that the matching is successful, establishing routing connection between the target terminal and the target router through short-distance wireless communication; through the method, the data transmission security in the routing connection process can be improved.

Disclosed is a method managing the allocation and placement of a workload. The method starts with a variant selection agent of a workload placement service, receiving from a front-end device a request for an inferencing payload associated with an inferencing workload of a generative artificial intelligence (AI) model 240. The method then classifies the payload of the request to determine the variant selection for the workload 242. If it determined that the variant selection is a secure variant 244, the request is transmitted to the secured variant 250. The secured variant executes an instance of the workload on a secured environment. Finally the inferencing payload is obtained from the secured variant 252 and provided to the front-end device 254. If the variant selection is determined to be a public variant, the request is sent to the public variant 246. The public variant executes an instance of the inferencing workload in a public environment 248, the inferencing payload is obtained from the public variant and provided to the front-end device. The public instance of the workload may be used for future training of the AI.

A computing device (1200) for secure command execution is described, the computing device (1200) comprising one or more processors (1201) and a memory (1202) that stores, in a non-transitory form, data defining program code executable by the one or more processors (1201), where the program code is executable by the one or more processors (1201), and where the program code is not executable by the one or more processors (1201). Causing the computing device (1200) to: obtain an input command (831) from an operator (701); evaluating the input command (831) to determine whether the input command (831) is secure through a group-based knowledge tag (832); the input command (831) is executed in accordance with the input command (831) being secure. In this way, unsafe command execution may be prevented using knowledge of the expert reviewer (821).