811 results about "Network segment" patented technology

A system and method for an AI-controlled sensor network for threat mapping and characterization. The system deploys a network of honeypots and sensors across various geographic locations and network segments, collecting and aggregating data on network traffic and potential threats. An AI orchestrator analyzes this data using advanced machine learning models, generating dynamic honeypot profiles and a comprehensive threat landscape. The system can adapt in real-time to emerging threats, optimize resource allocation, and provide actionable intelligence. By correlating data across multiple points, the system offers enhanced threat detection capabilities and proactive cybersecurity measures, surpassing traditional security information and event management (SIEM) tools.

The invention provides a fault rapid positioning method and device in an MGX system, and belongs to the field of server system management and fault diagnosis. The method comprises the following steps: determining an idle universal serial bus interface on a mainboard, and selecting a target USB interface and a fixed IP network segment configuration corresponding to the target USB interface from the idle USB interface; the BMC establishes a physical connection with a device where the HMC is located through the target USB interface, and constructs a virtual local area network channel; in the virtual local area network channel, performing out-of-band communication between the BMC and the HMC; the BMC obtains list information of each component in the MGX system from the HMC, and classifies the list information according to component types; the HMC pre-collects and stores the state information of each category according to the classification result; and the BMC periodically reads the state information based on the Redfish protocol, and identifies the fault in the MGX system according to the state information. According to the method and the device provided by the invention, the fault can be quickly and accurately positioned.

The invention discloses a segmented energy storage direct-hanging convergence method based on photovoltaic direct-current networking, and relates to the technical field of segmented energy storage of photovoltaic direct-current networking, and the method comprises the steps: constructing a direct-current networking system, collecting the operation data of the direct-current networking, and constructing a data set; based on the data set, dynamically adjusting the output power of a plurality of energy storage modules in real time through an adaptive power distribution algorithm, and balancing each energy storage module according to the use frequency and depth; and constructing a long-term optimization strategy of the direct-current networking system based on real-time adjustment and control of the direct-current networking system, and continuously optimizing system configuration and algorithm performance. By combining direct current networking, segmented energy storage and an artificial intelligence algorithm, the electric energy conversion efficiency is remarkably improved, the equipment loss is reduced, load variable frequency driving is realized, the system structure is simplified, and the fault rate and the equipment cost are reduced. And meanwhile, energy storage utilization is optimized, the response speed and stability of the system are improved, and access of renewable energy sources is better adapted.

The invention provides a cross-network-segment data forwarding method and device, a storage medium and electronic equipment, and is applied to the technical field of industrial control. The method is applied to a forwarding service node, the forwarding service node multicasts a first data packet containing a service identifier to a first network segment, sends a second data packet containing an application identifier, and an IP address and a port number of a device end in a second network segment after an application service registered in the first network segment receives the first data packet, and sends the second data packet to the second network segment after authority authentication succeeds. A binding relationship between an application identifier and a port number is established, then an exclusive UDP channel is established, a second data packet is forwarded to a specified address and a port through the channel, a protocol message is replied after processing by equipment, and a forwarding service node forwards the message to an application service through the binding relationship, so that cross-network-segment data communication is realized, the communication process is simplified, and the communication efficiency is improved. And the cross-network-segment data transmission efficiency is improved.

A fiber sensing control device (FSCD) is provided for protecting a network infrastructure in an optical fiber network against intrusive fiber sensing. The FSCD resides on an optical fiber cable at a boundary between the first network segment containing the network infrastructure that is to be protected and a neighboring network segment. The FSCD comprises at least one blocking element that can block sensing of backscattered light on at least one optical fiber of the optical fiber cable.

The present application describes a system and method for utilizing a tunnel in a networking routing protocol to provide a network segment access to additional servers when certain load balancing trigger events are detected.

The invention discloses a vehicle sleep wake-up automatic testing method, device and equipment and a storage medium, and relates to the technical field of vehicle-mounted testing, and the method comprises the steps: monitoring the communication state of a vehicle, judging whether a backbone network, a plurality of sub CAN network segments and a plurality of sub LIN network segments enter a sleep mode or not, and when the backbone network, the plurality of sub CAN network segments and the plurality of sub LIN network segments enter the sleep mode, starting the sleep mode; and sending a wake-up message, controlling a vehicle power supply to be powered on and starting the vehicle when the vehicle is waken up and preset operation time passes, obtaining wake-up data, and analyzing the wake-up data to obtain a test report. Through monitoring vehicle communication, each network segment is awakened and data is analyzed after entering a dormancy state, automatic testing of multi-subnet collaborative management under an SOA architecture is realized, and the testing efficiency and accuracy are improved.

The invention discloses an asset vulnerability detection method and device, electronic equipment and a storage medium, and relates to the technical field of network security, and the method comprises the steps: actively sending a multi-protocol detection packet to scan a target network segment, and obtaining a first asset set; passively monitoring network traffic to extract asset feature information, and obtaining a second asset set to generate an asset list; port scanning tasks of all assets are dispatched to a plurality of scanning nodes in a distributed and parallel mode, dynamic port scanning is carried out according to a descending order of a plurality of key elements in combination with a port scanning optimization model based on risk prediction, and a full-amount port risk map is constructed; the static layer is matched with known vulnerabilities; the dynamic layer identifies suspicious behaviors deviating from a normal behavior baseline through an anomaly detection algorithm, and obtains an asset vulnerability detection result in combination with a cross validation method; according to the invention, the detection requirements of asset full coverage and early threat discovery in a complex network environment are met.

The invention discloses a communication method and device based on a container cluster, equipment and a storage medium. The method is applied to a working node in a container cluster, and comprises the following steps: creating and starting a first endpoint device for VXLAN communication based on user datagram protocol port information, a network identifier of a virtual extensible local area network (VXLAN) and a node address of the working node; creating a network resource of the working node in the main node of the container cluster based on the container group unit adaptive network segment of the working node, the device address of the first endpoint device, the physical address of the first endpoint device and the node address of the working node; detecting a network resource creation event of a cluster external node in combination with the main node, and determining a network resource of the cluster external node; and according to the network resource of the cluster external node, establishing a VXLAN tunnel for communication between the first endpoint device and a second endpoint device in the cluster external node, so that the cluster external node accesses the container group unit through the VXLAN tunnel. And the cost of accessing the cluster inner container group unit by the cluster outer node is reduced.

The invention discloses a service-oriented high-voltage regulation electricity supplementing method and device and a storage medium. Comprising the steps that the SOC and the voltage of a low-voltage battery pack are continuously monitored, when the SOC of the low-voltage battery pack is smaller than a charging SOC threshold value and an enabling position is actively awakened, a back-domain controller, a vehicle control unit and a front-domain controller are awakened, and information of the low-voltage battery pack is sent to the back-domain controller; the back-domain controller judges that conditions are met, sends a charging request to the vehicle control unit, charges the low-voltage battery pack through the vehicle control unit and the high-voltage battery pack, customized services are made on the basis of an SOA framework and high-voltage power-on, during charging, high-voltage power-on can be achieved at an OFF gear, only the target controller is awakened on the basis of sub-network segment management, simultaneous awakening of the whole vehicle is avoided, power consumption is reduced, and power consumption is reduced. And meanwhile, the back-domain controller can be awakened only when the back-domain controller is at the active awakening enabling position, so that the problems of frequent network awakening, electric energy loss and battery safety are solved, and the requirements of accurate awakening, power saving, safety and high efficiency of power compensation are met.

The invention provides a method and system for generating a network topological graph, and the method comprises the steps: building a model of equipment based on data provided by a supplier, and enabling the model to comprise node attributes and connection edge attributes related to the node attributes; scanning all devices in the same network segment to obtain information data of each device; for each device in all the devices, the node attributes and the connection edge attributes in the corresponding model are filled with the information data, so that a corresponding model instance is obtained; based on node attribute data and connection edge attribute data in the model instance, determining all second devices connected with the first device, connection types between the second devices and the first device and connection edge styles; and based on the first device, generating a network topological graph according to the determined second device connected with the first device, the connection type and the connection edge style.

The invention discloses a parallel upgrading method, device and system, equipment, a medium and a program product. Belongs to the technical field of software updating. Determining the total upgrading duration of each network segment address based on the network segment address and the first upgrading duration; determining a first upgrading sequence of the plurality of controllers according to the total upgrading duration and the first upgrading duration, wherein the first upgrading sequence is used for representing a sequence of sending the upgrading file packages to the gateway; and sending the upgrading file package to the gateway according to the first upgrading sequence, so that the gateway sends the upgrading file package to the controller, and then the controller is upgraded according to the upgrading file package. According to the embodiment of the invention, different controller updating scenes can be coped with, and the updating efficiency is improved.

A system for AI-supported cybersecurity and regulatory compliance in energy distribution networks, consisting of: a hardware-embedded data acquisition module configured to intercept, capture, and time-stamp operational data streams and to control data traffic from SCADA (Supervisory Control and Data Acquisition) systems, AMI (Advanced Metering Infrastructure) systems, and energy management systems (EMS) via multiple communication protocols without operational latency; an FPGA-based deep packet inspection unit coupled with the data acquisition module, wherein the FPGA firmware is configured to perform line rate filtering, protocol decomposition and metadata extraction of the acquired data and forwards preprocessed packet data to an AI processing unit; an AI processing unit consisting of a multi-core central processing unit (CPU), a dedicated AI accelerator selected from a graphics processing unit (GPU) or a tensor processing unit (TPU), and a volatile memory buffer; a response orchestration module that is communicatively coupled with network management devices and operations controllers, wherein the response orchestration module is configured to perform automated security and compliance remediation measures, including network isolation of compromised segments, enforcement of protocol encryption, and privilege revocation; and an immutable audit logging subsystem configured to record all detected events, compliance assessments, and corrective actions in a blockchain-based distributed ledger, with each log entry cryptographically anchored with a secure hash value and digitally signed with keys stored in a secure hardware enclave.

The invention provides an intelligent computing center computing power resource container network card configuration method and device, and relates to the technical field of intelligent computing centers, intelligent computing centers and computing power infrastructure, the method comprises the following steps: S1, creating a first virtual network card based on first information, the first information being used for indicating a first network segment and a first container, the first network segment is one of a plurality of network segments included in the container network, the container network is a network used when the container cluster distributes the network segments, the container cluster comprises a plurality of computing power resource containers, the first container is one of the computing power resource containers, and the first virtual network card is used for accessing the first network segment; s2, determining a first container in the plurality of computing power resource containers based on first information; and S3, migrating the first virtual network card into the first container, and executing network card configuration operation in the first container based on the first virtual network card. The network segment expansion efficiency of the container can be improved.

The present disclosure provides a method of traffic scheduling implementation, including: receiving a domain name resolution request sent by a first business application on a first terminal device, and performing domain name resolution on the domain name resolution request to determine a to-be-resolved domain name; if the to-be-resolved domain name is a target domain name, determining, from a preset network segment, a first virtual network address corresponding to the to-be-resolved domain name, and using the first virtual network address as a first traffic destination address corresponding to the to-be-resolved domain name, where the preset network segment includes a plurality of virtual network addresses; and sending the first traffic destination address to the first business application on the first terminal device, to cause the first business application to perform data transmission based on the first traffic destination address.

The invention discloses an information processing method applied to a controller. Comprising the following steps: determining a first SR policy, wherein the first SR policy comprises a first SID (Service Identifier) of a first network node serving as a head node; the first SID belongs to a network segment corresponding to the first locator of the first network node. And sending the attribute information of the first locator to the first network node to trigger the first network node to allocate the BSID for the first SR policy from the network segment corresponding to the first locator. In the scheme, the controller appoints the head node to allocate the locator of the BSID for the first SR policy, so that the controller determines that the locator of the first network node used by the first SR policy is consistent with the locator used by the first network node to allocate the BSID for the first SR policy, and the maintenance of the network is facilitated.

The invention discloses a segment scanning attack processing method and device and computer equipment. The method comprises the following steps: acquiring to-be-monitored traffic data and network segment information of the to-be-monitored traffic data, and respectively performing feature extraction on the to-be-monitored traffic data and the network segment information of the to-be-monitored traffic data to obtain a feature vector of the to-be-monitored traffic data and a feature vector of the network segment information; determining a semantic relation value of each network segment relative to the to-be-monitored traffic data based on the feature vector of the to-be-monitored traffic data and the feature vector of the network segment information; determining a suspected attacked network segment based on the semantic relationship value of each network segment, and clustering traffic data related to the suspected attacked network segment to obtain a clustering result; and determining an attacked network segment in the suspected attacked network segments based on a clustering result, and processing the network segment attacked by segment scanning. The method provided by the invention at least solves the technical problem of low detection accuracy of the segment scanning attack in related technologies.

Aspects of the subject disclosure may include, for example, a plurality of accounting nodes, each accounting node being associated with a service node of a communication network, each accounting node being configured to collect data usage information for a network segment of the communication network including an associated service node, and an accounting server in data communication with accounting nodes of the plurality of accounting nodes, the accounting server configured to receive from the accounting nodes the data usage information for each service node and determine billing for data usage of each network segment. Other embodiments are disclosed.

The invention discloses a cross-network-segment data transmission method and device, a program product and electronic equipment, and relates to the technical field of network security, and the method comprises the steps: transmitting target request information of a first network segment to a target queue, the target queue being a message queue deployed in the first network segment, and then transmitting the target request information of the first network segment to the target queue; and determining return data corresponding to the target request information in the target queue through the second network segment, the return data being data stored in the second network segment and needing to be transmitted to the first network segment, and then transmitting the return data to a target database, the target database being a memory database deployed in the first network segment. According to the method and the device, the technical problem of low data transmission security caused by the fact that data needs to be manually exported and copied from network segments in the prior art when data transmission is carried out between different network segments with network isolation is solved.

The invention relates to the technical field of intelligent calculation centers, in particular to a tenant isolation method and device and related equipment. The method comprises the following steps: determining a target computing server allocated to a target tenant, and determining a tenant network segment allocated to the target tenant; based on the number n of parameter network cards of the target computing servers, splitting the tenant network segment into m server network segments, and allocating a server network segment for each parameter network card of each target computing server accessed to the same Leaf device, m and n being positive integers, and m being greater than or equal to n; for each Leaf device, according to each physical downlink interface used for accessing each target computing server, respectively creating a logic virtual interface corresponding to the target tenant on each Leaf device; and on each logic virtual interface, configuring an access strategy for isolating the target tenant from other tenants based on the tenant network segment.

The invention discloses a real vehicle data acquisition method and device based on diagnosis CAN, equipment and a storage medium, and relates to the technical field of vehicle diagnos.The method comprises the steps that when test equipment is connected into a real vehicle OBD diagnosis CAN network segment, a first diagnosis instruction is sent to a gateway controller, the gateway controller is made to enter an expansion session mode, the session state is monitored, and when the test equipment is connected into the real vehicle OBD diagnosis CAN network segment, the first diagnosis instruction is sent to the gateway controller; obtaining a session monitoring result; when the session monitoring result is a target session state, a second diagnosis instruction is sent to the gateway controller, so that the gateway controller safely accesses and unlocks, and an unlocking state is monitored to obtain a safe access unlocking result; when the security access unlocking result is that unlocking succeeds, a third diagnosis instruction is sent to the gateway controller, so that the gateway controller obtains a diagnosis parameter according to the third diagnosis instruction, and a routing function of a network segment corresponding to the diagnosis parameter is started; when the routing function of the network segment corresponding to the diagnosis parameter is started, the real vehicle data is acquired, the real vehicle data acquisition is realized only through simple operation, and the problem analysis efficiency is improved.

The invention relates to a network fault solution generation method and device, computer equipment, a storage medium and a computer program product. The method comprises the following steps: acquiring alarm information of a network system, inputting the alarm information into a first large language model, and determining a fault network segment in network segments through the first large language model; performing fault analysis on the alarm information by adopting each fault analysis model corresponding to the fault network segment to obtain network fault analysis information output by each fault analysis model; inputting the network fault analysis information output by each fault analysis model into a second large language model, and generating a network fault analysis result through the second large language model; and under the condition that the network fault analysis result represents that the alarm information is real alarm information, generating a network fault solution based on the network fault analysis result through a second large language model. By adopting the method, the fault processing efficiency of the network system can be improved.

The invention discloses a distributed cross-network segment file transmission method. The method comprises the following steps of S1, deploying a file transmission service in a local area network; s2, carrying out transmission node registration among the local area networks through a file transmission service; s3, determining a transmission path according to whether a target node is contained in the local area network; s4, after a transmission path is obtained, encrypting the file fragments according to path information, and sending the encrypted file fragments to a next transmission node; s5, the receiving node decrypts the data packet according to the source node information and continues to transmit the data packet according to the routing information until the data packet arrives at the destination; s6, after receiving all the fragmented data, the receiver returns confirmation information of successful receiving to the sender; and S7, if the sender does not receive the receiving confirmation for a long time, re-sending the unconfirmed fragmented data packet. According to the invention, the file transmission efficiency and security are improved, and the reliability and stability of the system are enhanced.

The invention discloses a dumb terminal detection method and system, a storage medium and electronic equipment, and belongs to the field of communication, and the method comprises the following steps: S1, an AP starts an ARP pickup, and obtains a network segment address of a current network when a normal terminal is accessed; after it is confirmed that the dummy terminal accesses the AP, the step S2 is executed; s2, the AP assembles a free ARP message by combining an IP address in a network segment address of the current network with an MAC address of a dumb terminal association frame one by one, and sends the free ARP message to the dumb terminal for detection; s3, when the IP address in the free ARP message received by the dumb terminal is the same as the IP address of the dumb terminal, replying an ARP response message for the free ARP message; and S4, the AP obtains the IP address of the dumb terminal according to the ARP response message replied by the dumb terminal. According to the invention, normal communication between the wireless dumb terminal and other equipment can be ensured on the premise that the ARP pickup function is started.

The present invention relates to a network asset processing method, system, device and medium based on traffic analysis, the method comprising: collecting network traffic to be analyzed, filtering the collected network traffic; performing stream session management on the filtered network traffic to obtain a network stream session; identifying the application layer protocol from the network stream session through built-in protocol rules or custom protocol rules, and parsing the corresponding field features according to the identified application layer protocol type; when the corresponding application layer protocol cannot be identified from the network stream session based on the built-in protocol rules or custom protocol rules, identifying the application layer protocol through a pre-trained supervised machine learning algorithm model; based on the identified application layer protocol and field features, performing asset identification processing of a specified network segment, and generating a corresponding asset log, so as to perform corresponding network asset management for the asset log. The present invention can effectively collect and safely manage network assets of an electric energy system.

A method for configuring a network address translation NAT gateway based on a public cloud service including: a cloud management platform obtains NAT gateway creation information that is input by a tenant; The cloud management platform creates the NAT gateway in the first VPC based on the NAT gateway creation information; The cloud management platform obtains configuration information that is input by the tenant and applied to the NAT gateway; The cloud management platform sets, based on the identifier of the second VPC, the NAT gateway to be connected to the second VPC, and sends the first NAT rule to the NAT gateway, where the first NAT rule is used to indicate the NAT gateway to: bind a first network segment in the first VPC to a first elastic IP address EIP; and bind the first network segment in the first VPC to a first transit private IP address.

The invention provides a resource deployment method and device of embedded equipment, equipment and a medium, and belongs to the technical field of embedding, and the method comprises the steps: determining to-be-deployed embedded equipment in a preset network segment corresponding to a local area network; reading a resource configuration file of the embedded device to be deployed; the resource configuration file is used for representing a resource package version of the to-be-deployed embedded device; when the resource package version of the to-be-deployed embedded device is different from the resource package version stored in a production server, obtaining an updated resource package from the production server; and issuing the updated resource packet to a resource deployment server, so that the resource deployment server performs resource deployment on the to-be-deployed embedded device based on the updated resource packet. According to the resource deployment method of the embedded device, full-process automatic resource deployment of the embedded device is realized.

The invention relates to a vehicle-mounted gateway and a vehicle-mounted gateway control method for CAN (Controller Area Network) message forwarding. The method comprises the following steps: setting an independent mask register in a message cache; counting the total number of CAN messages needing to be received and sent by each path of CAN network segment, judging whether the total number of the message caches is greater than or equal to the total number of the messages, and if so, configuring the filtering ID of the independent mask register corresponding to the message caches to be in a one-to-one mode; otherwise, configuring the filtering ID of the independent mask register corresponding to the partial message cache into a one-to-one mode and corresponding to the message with higher ID priority; and configuring the filtering ID of the independent mask register corresponding to the remaining message cache into a one-to-many mode, wherein the filtering ID corresponds to the message with lower priority. According to the invention, the forwarding efficiency of the CAN message is improved, and the forwarding delay time of the CAN message is reduced.

The invention discloses a segment scanning type DDoS attack detection method and device, electronic equipment and a storage medium. The detection method comprises the following steps: for each IP address in a plurality of IP addresses, acquiring a first traffic feature set comprising traffic features of N dimensions of a first traffic set taking the IP address as a destination IP address in a first time period; calculating weights respectively corresponding to the traffic characteristics of the N dimensions based on a historical traffic set; corresponding weights are given to the traffic features of the N dimensions of the IP address, and a second traffic feature set corresponding to the IP address is obtained; clustering the plurality of IP addresses based on a plurality of second traffic feature sets corresponding to the plurality of IP addresses to obtain a clustering result; and determining the IP address network segments subjected to the segment scanning type DDoS attack in the IP address network segments where the plurality of IP addresses are located based on the clustering result. According to the method and the device provided by the embodiment of the invention, the segment scanning type DDoS attack can be effectively detected, the false alarm and the missing alarm are reduced, and the network security is improved.

Techniques for load balancing secure network traffic are disclosed. A system, process, and / or computer program product for load balancing secure network traffic includes monitoring network traffic for one branch of a plurality of branches for an enterprise network, and splitting the network traffic of the one branch into a plurality of network segments based on a determination that the network traffic exceeds traffic capacity of at least one security processing node (SPN) of a plurality of SPNs using a network load balancer (NLB) in communication with a plurality of Network Processing Nodes (NPNs), the plurality of monitored branches being distributed to the plurality of SPNs via a plurality of tunnels.