5 results about "Local function" patented technology

The invention belongs to the technical field of software security, and particularly discloses a warehouse-level vulnerability detection method and device based on a large model function semantic abstract. The method comprises the following steps: generating a vulnerability detection abstract syntax tree according to a to-be-detected source code; generating an assembly prompt word according to the complete source code of the node function in the unprocessed state and the target semantic abstract, and analyzing the node function in the unprocessed state according to the assembly prompt word by calling the target large model; and determining a vulnerability detection result of the to-be-detected source code according to the initial function semantic abstract and the structured function semantic abstract. Through the above mode, the vulnerability detection abstract syntax tree is generated by using the program structure modeling strategy and the full function call graph is constructed, and then the semantic abstract of the structured function is determined by using the semantic understanding capability of the target large model, that is, deep security analysis and vulnerability mining are performed from the local function to the global context. Therefore, the accuracy and comprehensiveness of warehouse-level vulnerability detection can be effectively improved.

The application discloses a risk control modeling method and device based on a large model agent and equipment, comprising: receiving a natural language modeling instruction input by a user, and inputting the natural language modeling instruction into a fine-tuned intention recognition large model for analysis, and outputting a corresponding structured function call instruction sequence; inputting the structured function call instruction sequence into a risk control modeling agent to generate a corresponding task execution plan; selecting an execution path according to the task type of each function call instruction in the task execution plan through the risk control modeling agent; calling a corresponding remote tool service or a local function function to execute the current task according to the execution path, and returning an execution result; receiving and integrating the execution result of each function call instruction through the risk control modeling agent, and determining and executing subsequent operations according to the obtained integrated result, wherein the subsequent operations include continuing to execute the next function call instruction, initiating an interactive inquiry to the user or outputting a final risk control modeling result.

This invention discloses a method and system for detecting injection vulnerabilities in Java Web applications, relating to the field of computer network security. To improve the security of Java Web applications, it performs injection vulnerability detection, providing vulnerability detection services for security analysts and testers in the SDLC (Software as a Service) phase. This invention models the generation principle of injection vulnerabilities and constructs a prior knowledge rule base to mark class methods. A breadth-first taint analysis algorithm is used to analyze the Source method, constructing a local function call graph and storing taint propagation information during function calls in this graph. Branch path pruning is performed based on the taint propagation information in the graph, and finally, the injection vulnerability call chain is output by depth-first traversal of the local function call graph. This method significantly improves the efficiency of vulnerability analysis and the vulnerability detection rate.

The embodiment discloses a local function calling system, method, device, medium and program product, wherein the local function calling system is applied to an Electron client, and the local function calling system comprises a main process layer and a rendering process layer; the rendering process layer comprises an MCP adapter; the MCP adapter is used for interacting with an AI application layer; wherein the rendering process layer is used for receiving a first request sent by the AI application layer through the MCP adapter, and sending the first request to the main process layer; the first request is a function list acquisition request or a function calling request; the function list acquisition request is used for acquiring a function list in the main process layer, and the function calling request is used for calling a function in the main process layer; and the main process layer is used for generating first response information based on the first request, and sending the first response information to the rendering process layer.

The invention relates to a vehicle sub-network segment network management method based on direct flag bit mapping, and the method comprises the following steps: responding to a local function demand event, generating a network management message through a corresponding function controller, the data field of the network management message comprising a group of standardized flag bits, the standardized flag bit comprises a basic network segment flag bit used for identifying that a target physical network segment needs to be awakened, a priority flag bit used for representing a function priority, a resource demand flag bit used for quantifying a function resource demand and a collaborative management flag bit used for identifying whether collaborative execution of multiple network segments is needed or not. By defining a four-layer standardized flag bit structure comprising basic network segments, priorities, resource requirements and collaborative management, the hardware cost and upgrading threshold of the system are remarkably reduced, excellent backward compatibility is realized, a complex service-network segment mapping table maintained by the gateway is avoided, and the service performance of the system is improved. And the gateway complexity and the single-point fault risk are fundamentally reduced.