42 results about "Network administrator" patented technology

Techniques and mechanisms for fine-tuning a language model to be optimized for a network device to which the language model is deployed. A controller for a network may maintain an inventory of network devices in a network, and obtain device information for the network devices. The controller may analyze the device information to determine a device type or role for the network devices. The controller may then select a pre-trained model that is optimal or well-suited for a device type of a particular network device, and perform a distillation function of the language model. Once the language model has been distilled, the controller may augment the language model with locally relevant information such that the language model is contextually relevant for the network device. After fine-tuning the language model, the controller pre-positions the language model on the device so network administrators and other users can access it when necessary.

The invention provides an equipment identification method and system based on packet traffic semantic feature enhancement, and electronic equipment, and the method comprises the steps: converting the original Internet of Things traffic into a general packet-level traffic semantic feature which can be understood by a large language model, and then carrying out the fine adjustment of the large language model through the packet-level traffic semantic feature, and the large language model can automatically learn potential Internet of Things equipment traffic characteristics and execute equipment classification identification decisions. According to the technical scheme, accurate identification of the Internet of Things equipment is realized, a network administrator can grasp the type and state information of the access equipment in real time, access or abnormal behaviors of unauthorized equipment are effectively identified, safety protection measures are taken in time, and the overall safety of an intelligent environment system is guaranteed.

The system (108) in the present disclosure for service barring workflow is designed to automate and streamline the process of managing service barring actions in a telecommunications network It provides centralized control, efficient processing. and granular control over service restrictions by implementing a method (400) involving various nodes. Tracking Area Code (TAC) and Network administrators. The system (108) offers advantages such as enhanced operational efficiency. accurate enforcement of service barring rules. real-time monitoring. and reporting capabilities. It integrates with network elements and ensures compliance with regulatory requirements. With its flexible and scalable architecture, the system (108) enables administrators and users to efficiently handle service barring requests while maintaining a positive customer experience. Overall, the system (108) for service barring workflow optimizes the service management process. enhances security, and contributes to effective network control and customer satisfaction.

The invention relates to the technical field of digital twinning technology and network communication optimization, in particular to a method and a system of a digital twinning network simulation driven NAT (Network Address Translation) optimization engine, comprising the following steps: constructing a virtualization mapping model of a physical network; simulating an NAT (Network Address Translation) process in a digital twin environment through a real-time simulation engine; dynamically adjusting an NAT (Network Address Translation) rule and a load balancing strategy of a physical network based on a simulation result; executing safety protection operation in combination with a machine learning algorithm; the method has the beneficial effects that a digital twinning technology and NAT optimization are deeply fused, and a visual and visual management platform is provided for network management personnel. Management personnel can monitor the network state and the NAT performance in real time through the platform and deeply analyze the network problem root by means of a simulation result, and complex field troubleshooting and manual strategy adjustment do not need to be carried out. Therefore, the difficulty and the cost of network management are reduced, the accuracy and the timeliness of management are improved, and the network management is promoted to develop towards the intelligentization and automation directions.

Techniques are described for providing a natural language network security policy assistant for allowing a network administrator to implement network security policies using natural language security policy requests. A natural language request can be received by a user and can be translated using Artificial Intelligence into one or more security policy clauses. If the natural language security policy request leads to ambiguities with regard to intended security policies, one or more clarifying questions can be generated as natural language questions and sent to the user for clarification. One or more security policies can be implemented based on the one or more security policy clauses generated in response to the natural language security policy request and / or the natural language response to the clarifying questions.

To allow for paying attention of a manager of a network to timing at which a terminal requested authentication.SOLUTION: A control device 1 comprises: receiving means 12 which receives a signal including a MAC address of an arbitrary terminal 2 from the terminal; reception means 13 which, if the MAC address included in the signal is not included in registered terminal information, outputs a reception time of the signal and the MAC address and accepts an input indicating whether or not the MAC address can be registered; and assignment means 14 which, if the MAC address included in the signal is included in the registered terminal information, executes processing of assigning an IP address to the terminal. In response to an input indicating that the MAC address can be registered, the receiving means adds the MAC address to the registered terminal information and further outputs a warning on the basis of the time.SELECTED DRAWING: Figure 1

The invention discloses an intelligent ship network security defense system integrating active defense and path backtracking, and relates to the technical field of network security. In a ship network system, a network firewall is connected behind a ship wireless communication channel, and meanwhile, a route backtracking module for actively analyzing an abnormal route is connected to a core switch of a ship network; the module records and analyzes all routes on the core switch and gives an alarm for abnormal routes, meanwhile, a virtual network terminal is installed on the network server and used for simulating functional terminal equipment in a ship network to serve as bait of network viruses, and when the viruses invade the virtual terminal, the virtual terminal can send out the network viruses. And the virtual terminal sends a virus intrusion alarm to a network administrator, starts a route backtracking system to carry out route backtracking, and automatically sends a backtracked source to a virus library of the firewall. According to the invention, a passive and active combined method is adopted to carry out network security defense, and the network security can be obviously enhanced compared with a single firewall mode.

The system includes a sensor mounted on a passive element of the network, defined by optical boxes or optical fibers, to detect operational parameters of the passive element and periodically produce data packets that represent reference operating conditions and, in real time, data packages that represent anomalous operating conditions detected by the sensor; an input portal maintained in communication with a group of sensors; a server that receives data packets from the input portals, decoding and authenticating them; and a platform receiving, from the server, the data packets of reference operating conditions and of the anomalous operating conditions, storing them and making them available to a network administrator, to be selectively or automatically sent to a field technician, via a mobile computing device.

The application provides a lightweight satellite network security management system and method. The system realizes unified management of the satellite network security control plane through a centralized network controller. The system has functions such as security authentication of satellite nodes, dynamic security policy generation and distribution, real-time network monitoring, and rapid security event response. The network controller includes multiple modules such as authentication, policy generation, monitoring, and event response, and can customize security policies according to satellite characteristics and adjust them in real time to respond to security threats. The application also includes lightweight design, especially suitable for resource-constrained satellite environments, and a method for continuously optimizing security policies based on monitoring data and event records. In addition, the provided user interface allows satellite network administrators to easily configure policies and handle events. Through centralized management and dynamic adjustment, the system significantly improves the security and efficiency of satellite networks, has advantages such as lightweight, flexibility, and real-time, and meets the security management needs of modern satellite networks.

This invention discloses a method for automatic dual-path planning and transmission implementation of time-sensitive network devices, comprising the following steps: (1) determining the identity information of the redundant path transmission devices of the current TSN device, wherein the identity information includes the sender, receiver, and relay transmission end; (2) assigning a unique ID identifier to all TSN devices in the network; (3) planning two independent data paths 1 and 2, and determining the input and output ports of the two paths; (4) automatically planning the VLAN information on the current path 1 and Path 2. This invention only requires the network administrator to determine the identity information of the sender, relay, and receiver devices and plan the path of critical packets, thereby automatically constructing the device configuration under each path in the TSN ring network; the redundant path of critical transmission is automatically generated by the TSN device itself according to the transmission node and path, without the need for network administrator configuration, reducing the configuration workload, thereby reducing the possibility of network crashes caused by configuration.

A system and method is provided for creating and administering a guest user's document processing operations, such as printing, on a host company network sharing the same cloud print service as the guest's company network. The host network administrator generates a list of companies that are pre-approved for users from a guest company. The guest user logs into the host network and views a list of pre-approved companies. The user selects one or more approved companies for which they are already approved. The user selects a PIN which is then associated with their information, approved companies and guest company. The user then submits their job to the cloud print service for release by a host company MFP. The user logs into a selected host company MFP with their PIN and a listing of any related, pending job is displayed. The user may select one or more jobs for release and printing. The PIN may be revoked by the host administrator, timeout or expire when a selected number of printouts has been made.

This invention relates to the field of network security, and more particularly to an attack scenario detection method based on graph convolutional neural networks. With the increasing complexity and diversity of network attacks, the detection of network attack scenarios has become extremely challenging. Typically, administrators deploy monitoring devices, such as intrusion detection systems (IDS), in network nodes. IDS generate a large number of alert messages to reflect potential attack behaviors in the underlying network. Analyzing these intrusion alert messages can reveal corresponding attack scenarios. A common approach is to group similar network security alert messages together using alert message association, thereby discovering similar attack scenarios. This alert message association provides network administrators with an abstract, higher-level view of the network. This patent proposes an attack scenario detection method based on graph convolutional neural networks to discover attack scenarios in network alert messages. By utilizing graph convolutional neural networks, the detection of attack scenarios is transformed into a multi-classification problem of nodes on the alert message graph, achieving relatively accurate detection results.

The invention provides a network cutover control method and device, electronic equipment and a medium, and relates to the technical field of network security. The network cutover control method comprises the following steps: in response to a cutover command issued by a network administrator, verifying the cutover command according to a historical cutover command to obtain a first cutover command; based on the context of the first cutover command and a preset command template, generating a target command set through a large language model; and predicting target execution time of the target cutover command in the target command set, and controlling the target cutover command to run at the target execution time. Through the technical scheme provided by the invention, the problems of high security risk, low flexibility and low efficiency of network cutover in related technologies are solved, and the security, flexibility and efficiency of network cutover are improved.

Systems, devices and methods are provided for providing access to secure wireless networks to a user based on the user's physical location. In some embodiments, access to such a network is based on user location information, as determined by a control system. A secure network may be provided based on an inference that the user may be trusted to receive access to the network based on their location. Access to the network may be provided based on the user's physical location and an administrative user of the network providing authorization for the user to join the network, e.g., via a user interface. The user may be recognized at a later time, and provided with access again. The control system may provide access to the network to additional user(s) associated with said user, based on a physical interaction or other behavior indicating a trusted relationship with the additional user(s).

Techniques and mechanisms for fine-timing a language model to be optimized for a network device to which the language model is deployed. A controller for a network may maintain an inventory of network devices in a network, and obtain device information for the network devices. The controller may analyze the device information to determine a device type or role for the network devices. The controller may then select a pre-trained model that is optimal or well- suited for a device type of a particular network device, and perform a distillation function of the language model. Once the language model has been distilled, the controller may augment the language model with locally relevant information such that the language model is contextually relevant for the network device. After fine-tuning the language model, the controller pre-positions the language model on the device so network administrators and other users can access it when necessary.

The present invention belongs to the technical field of network management, and relates to a non-stress measurement method for the availability of network agent service (s), and system thereof. By adopting advanced data sampling, time series prediction and machine learning technology, the present invention can evaluate the availability of proxy services in real time and accurately, which is helpful for network administrators to better monitor, maintain and optimize proxy services and improve the overall security and stability of the network.

This invention discloses a routing optimization method for distributed training cluster communication. The method comprises two parts: a traffic analysis component and a routing optimization component, both implemented in the centralized control plane of a software-defined network. The traffic analysis component needs to perceive the specific communication mode adopted by the application layer and the node allocation configured by the network administrator to obtain relevant traffic information, including the origin, destination, and amount of data transmitted for each flow, as well as the dependencies between flows. The routing optimization component then performs non-blocking route allocation based on the obtained task traffic information and network topology. This invention, targeting distributed machine learning data center training clusters, achieves overall non-blocking traffic communication by perceiving task cluster communication traffic and optimizing routes, reducing training communication overhead and further improving task completion time. It has application value in current mainstream large-scale model training scenarios.

The invention relates to an intelligent electric energy meter verification method and system based on federated parallel computing acceleration, and belongs to the field of intelligent electric energy meter verification. According to the method, a network administrator identifies and establishes equipment with computing and networking capabilities, node roles are distributed by using an MPI protocol, and a stable associate system private computing group is formed; the task distribution and scheduling module decomposes a complex verification task into sub-tasks, intelligently distributes the sub-tasks to each node based on a real-time resource monitoring and load balancing algorithm, and dynamically adjusts the sub-tasks to cope with changes; the central coordinator monitors the task progress and the system health of each node in real time, records execution data, quickly responds to faults and optimizes resource allocation; the system adopts a distributed computing mode to execute a complex algorithm, such as a deep learning model, and ensures computing efficiency and result accuracy through parallel processing and result integration. According to the invention, the computing power of edge equipment is fully utilized, and a supervision and coordination mechanism is combined, so that an efficient and stable electric energy meter verification solution is provided.

Techniques for providing a language model to understand and recommend product configuration changes, corresponding to specific requirements are described. A language model is deployed to a network controller and is configured to respond to inputs from network administrators. The language model receives an input from the netw ork administrator indicating a description of a requirement for a configuration change. The language model determines a series of actions to execute to implement the configuration change. Finally, the language model outputs the series of actions to execute to the network administrator.

The application relates to the field of network traffic optimization, and particularly relates to a cross-environment generalization network traffic optimization method based on a large model agent. The technical scheme comprises the following steps: data collection, collecting a historical traffic matrix, network topology and capacity information and a natural language instruction from a network administrator; the collected historical traffic matrix, network topology and capacity information are sent to a feature decoupling module for cross-environment feature decoupling, and the natural language instruction is sent to a large model agent for strategy understanding and embedding; then, a pre-trained network traffic engineering head decoding is used to generate network routing allocation; finally, the routing allocation is issued through a network model context protocol of the large model, and network feedback and performance indexes are monitored, which are used as inputs of the next round of optimization to form a closed loop control. The application is suitable for network traffic optimization.

A network monitoring, reporting and risk mitigation system collects events at a computing device within the local network to provide improved network security. The events are aggregated into alerts, which may be processed according to triggering definitions in order to create ARO (action, recommendations and observations) reports providing required or recommended actions to take or observations to a network administrator. The ARO reports may be processed by a remote server in order to generate contextual feedback for updating the triggering definitions.

The invention provides an alarm processing method and device, electronic equipment and a storage medium, and relates to the technical field of security. According to the method, multiple pieces of alarm information generated by one attack activity in the same time can be aggregated through the feature codes and the generation time, so that alarm redundancy can be removed, the number of alarms is effectively reduced, the processing speed of a network administrator is improved, and the network administrator can process network threat events more conveniently and effectively.

A secured network switch is configured to enforce security between devices on a home network to ensure vulnerable devices do not compromise assets on privileged devices. The secured switch operates at the data link layer and is configured to enforce security based on device management and enforcement. The switch is configured to only allow devices that have been classified to allow communication with each other to forward packets to each other. The switch is configured to use broadcast, multicast, and network neighbor management to control the device discovery through the switch. The secured switch will also gather device information by snooping various sources of device ‘broadcast’ information and present this information via a user interface to aid network administrators in classifying devices and creating device to device relationships.

The present disclosure relates to a method, system, and computer program product for address translation. The method includes receiving an access request from the outside of a cluster service to the inside by an ingress control service. The method further includes generating a callback for the access request in response to receiving the access request. The method further includes translating a source address of the callback to a network address of the ingress control service by an egress container group, wherein the network address of the ingress control service is a destination address of the access request. According to embodiments of the present disclosure, by this method of translating the source address of the callback to the destination address of the access request, it is possible to enhance the security of network communication and improve the convenience of network management, which enhances the management experience of a network administrator.

A secured network switch is configured to enforce security between devices on a home network to ensure vulnerable devices do not compromise assets on privileged devices. The secured switch operates at the data link layer and is configured to enforce security based on device management and enforcement. The switch is configured to only allow devices that have been classified to allow communication with each other to forward packets to each other. The switch is configured to use broadcast, multicast, and network neighbor management to control the device discovery through the switch. The secured switch will also gather device information by snooping various sources of device ‘broadcast’ information and present this information via a user interface to aid network administrators in classifying devices and creating device to device relationships.

The application relates to an IPv6 address management system management method in the technical field of network management methods, and can realize real-time monitoring and maintenance of the use of stateless IPv6 addresses by a router, can automatically manage and monitor the allocation and use of the stateless IPv6 addresses, simplifies IPv6 address management, reduces the complexity and resource consumption of network management, solves the problem of stateless IPv6 address management difficulty in the current technology, network administrators can master the use of addresses in the network in real time, can also discover and solve potential address conflicts or abuse problems in time, ensure the reliability and safety of the network, generate a report of the use of the stateless IPv6 addresses automatically, greatly reduce the work burden of the network administrators, and improve the transparency of address management.

The present application embeds high-sensitivity quantum gravimeter in large equipment which needs to verify identity, measures the gravity characteristics of the environment where the equipment is located in real time, and compiles the gravity characteristics into a complex gravity characteristic signal; when the identity authentication of the equipment in other places is initiated, the gravity characteristic signal needs to be uploaded in addition to the input password, and the network administrator or identity authentication verifier needs to compare and verify the uploaded gravity characteristic signal by referring to the existing gravity field database in addition to verifying the password, so as to approve the real location of the equipment in other places which initiates the identity authentication, and prevent the equipment which steals the password and is in an unexpected location from impersonating identity to access a network with high security requirements or obtain information with high security level. The physical means provided by the present application is an important supplement to the existing information science means and biological means, and provides a new method with stronger reliability for identity authentication in other places, and greatly improves the management and control ability of the communication network to the access equipment.

The application discloses a kind of mapping method of WiFi signal burst and MAC layer protocol data unit, including obtaining input WiFi signal stream;The signal stream obtained is detected to burst signal;According to the detection result, a stream label is created for burst position;According to stream label, output data is updated and bound stream label;According to stream label, symbol mapping in WiFi signal processing process is completed by MAC layer protocol data unit decoding algorithm, and the mapping relationship of WiFi signal burst and MAC layer protocol data unit is established.The application detects and marks signal burst, so as to form the corresponding relationship between signal burst and MAC address after final protocol analysis;The application method can assist network administrator to lock the source equipment MAC address of illegal signal according to mapping table, and can also provide signal sample with label to construct data set;Moreover, the application has high reliability, good accuracy and stability.

The utility model relates to a network connection interrupter. The network connection interrupter is mainly composed of a data line, a key piece, a male plug, a female plug, a locking piece and other key assemblies. Wherein the data line is used for transmitting network signals, and the key piece is used for unlocking and removing the network connection interrupter. The male plug is designed to be inserted and locked on a network interface of network equipment to ensure stable connection; and the female head plug adopts a non-standard line sequence design and is not matched with a standard network cable line sequence, so that the network security is enhanced, and the access of unauthorized equipment is prevented. The arrangement of the locking piece further improves the safety of the equipment, and ensures that the male plug is not easy to pull out after being inserted. According to the invention, unauthorized equipment is effectively prevented from accessing the network, and the network security protection level is improved; the locking piece and the key piece are matched for use, so that the flexibility and controllability of network management are enhanced, and a network administrator can conveniently control equipment access.