623 results about "Network segment" patented technology

A system and method for an AI-controlled sensor network for threat mapping and characterization. The system deploys a network of honeypots and sensors across various geographic locations and network segments, collecting and aggregating data on network traffic and potential threats. An AI orchestrator analyzes this data using advanced machine learning models, generating dynamic honeypot profiles and a comprehensive threat landscape. The system can adapt in real-time to emerging threats, optimize resource allocation, and provide actionable intelligence. By correlating data across multiple points, the system offers enhanced threat detection capabilities and proactive cybersecurity measures, surpassing traditional security information and event management (SIEM) tools.

The invention provides a fault rapid positioning method and device in an MGX system, and belongs to the field of server system management and fault diagnosis. The method comprises the following steps: determining an idle universal serial bus interface on a mainboard, and selecting a target USB interface and a fixed IP network segment configuration corresponding to the target USB interface from the idle USB interface; the BMC establishes a physical connection with a device where the HMC is located through the target USB interface, and constructs a virtual local area network channel; in the virtual local area network channel, performing out-of-band communication between the BMC and the HMC; the BMC obtains list information of each component in the MGX system from the HMC, and classifies the list information according to component types; the HMC pre-collects and stores the state information of each category according to the classification result; and the BMC periodically reads the state information based on the Redfish protocol, and identifies the fault in the MGX system according to the state information. According to the method and the device provided by the invention, the fault can be quickly and accurately positioned.

The present application describes a system and method for utilizing a tunnel in a networking routing protocol to provide a network segment access to additional servers when certain load balancing trigger events are detected.

The invention discloses an asset vulnerability detection method and device, electronic equipment and a storage medium, and relates to the technical field of network security, and the method comprises the steps: actively sending a multi-protocol detection packet to scan a target network segment, and obtaining a first asset set; passively monitoring network traffic to extract asset feature information, and obtaining a second asset set to generate an asset list; port scanning tasks of all assets are dispatched to a plurality of scanning nodes in a distributed and parallel mode, dynamic port scanning is carried out according to a descending order of a plurality of key elements in combination with a port scanning optimization model based on risk prediction, and a full-amount port risk map is constructed; the static layer is matched with known vulnerabilities; the dynamic layer identifies suspicious behaviors deviating from a normal behavior baseline through an anomaly detection algorithm, and obtains an asset vulnerability detection result in combination with a cross validation method; according to the invention, the detection requirements of asset full coverage and early threat discovery in a complex network environment are met.

A system for AI-supported cybersecurity and regulatory compliance in energy distribution networks, consisting of: a hardware-embedded data acquisition module configured to intercept, capture, and time-stamp operational data streams and to control data traffic from SCADA (Supervisory Control and Data Acquisition) systems, AMI (Advanced Metering Infrastructure) systems, and energy management systems (EMS) via multiple communication protocols without operational latency; an FPGA-based deep packet inspection unit coupled with the data acquisition module, wherein the FPGA firmware is configured to perform line rate filtering, protocol decomposition and metadata extraction of the acquired data and forwards preprocessed packet data to an AI processing unit; an AI processing unit consisting of a multi-core central processing unit (CPU), a dedicated AI accelerator selected from a graphics processing unit (GPU) or a tensor processing unit (TPU), and a volatile memory buffer; a response orchestration module that is communicatively coupled with network management devices and operations controllers, wherein the response orchestration module is configured to perform automated security and compliance remediation measures, including network isolation of compromised segments, enforcement of protocol encryption, and privilege revocation; and an immutable audit logging subsystem configured to record all detected events, compliance assessments, and corrective actions in a blockchain-based distributed ledger, with each log entry cryptographically anchored with a secure hash value and digitally signed with keys stored in a secure hardware enclave.

The invention provides an intelligent computing center computing power resource container network card configuration method and device, and relates to the technical field of intelligent computing centers, intelligent computing centers and computing power infrastructure, the method comprises the following steps: S1, creating a first virtual network card based on first information, the first information being used for indicating a first network segment and a first container, the first network segment is one of a plurality of network segments included in the container network, the container network is a network used when the container cluster distributes the network segments, the container cluster comprises a plurality of computing power resource containers, the first container is one of the computing power resource containers, and the first virtual network card is used for accessing the first network segment; s2, determining a first container in the plurality of computing power resource containers based on first information; and S3, migrating the first virtual network card into the first container, and executing network card configuration operation in the first container based on the first virtual network card. The network segment expansion efficiency of the container can be improved.

The present disclosure provides a method of traffic scheduling implementation, including: receiving a domain name resolution request sent by a first business application on a first terminal device, and performing domain name resolution on the domain name resolution request to determine a to-be-resolved domain name; if the to-be-resolved domain name is a target domain name, determining, from a preset network segment, a first virtual network address corresponding to the to-be-resolved domain name, and using the first virtual network address as a first traffic destination address corresponding to the to-be-resolved domain name, where the preset network segment includes a plurality of virtual network addresses; and sending the first traffic destination address to the first business application on the first terminal device, to cause the first business application to perform data transmission based on the first traffic destination address.

The invention discloses a segment scanning attack processing method and device and computer equipment. The method comprises the following steps: acquiring to-be-monitored traffic data and network segment information of the to-be-monitored traffic data, and respectively performing feature extraction on the to-be-monitored traffic data and the network segment information of the to-be-monitored traffic data to obtain a feature vector of the to-be-monitored traffic data and a feature vector of the network segment information; determining a semantic relation value of each network segment relative to the to-be-monitored traffic data based on the feature vector of the to-be-monitored traffic data and the feature vector of the network segment information; determining a suspected attacked network segment based on the semantic relationship value of each network segment, and clustering traffic data related to the suspected attacked network segment to obtain a clustering result; and determining an attacked network segment in the suspected attacked network segments based on a clustering result, and processing the network segment attacked by segment scanning. The method provided by the invention at least solves the technical problem of low detection accuracy of the segment scanning attack in related technologies.

A method for configuring a network address translation NAT gateway based on a public cloud service including: a cloud management platform obtains NAT gateway creation information that is input by a tenant; The cloud management platform creates the NAT gateway in the first VPC based on the NAT gateway creation information; The cloud management platform obtains configuration information that is input by the tenant and applied to the NAT gateway; The cloud management platform sets, based on the identifier of the second VPC, the NAT gateway to be connected to the second VPC, and sends the first NAT rule to the NAT gateway, where the first NAT rule is used to indicate the NAT gateway to: bind a first network segment in the first VPC to a first elastic IP address EIP; and bind the first network segment in the first VPC to a first transit private IP address.

The invention provides a resource deployment method and device of embedded equipment, equipment and a medium, and belongs to the technical field of embedding, and the method comprises the steps: determining to-be-deployed embedded equipment in a preset network segment corresponding to a local area network; reading a resource configuration file of the embedded device to be deployed; the resource configuration file is used for representing a resource package version of the to-be-deployed embedded device; when the resource package version of the to-be-deployed embedded device is different from the resource package version stored in a production server, obtaining an updated resource package from the production server; and issuing the updated resource packet to a resource deployment server, so that the resource deployment server performs resource deployment on the to-be-deployed embedded device based on the updated resource packet. According to the resource deployment method of the embedded device, full-process automatic resource deployment of the embedded device is realized.

The invention relates to a vehicle-mounted gateway and a vehicle-mounted gateway control method for CAN (Controller Area Network) message forwarding. The method comprises the following steps: setting an independent mask register in a message cache; counting the total number of CAN messages needing to be received and sent by each path of CAN network segment, judging whether the total number of the message caches is greater than or equal to the total number of the messages, and if so, configuring the filtering ID of the independent mask register corresponding to the message caches to be in a one-to-one mode; otherwise, configuring the filtering ID of the independent mask register corresponding to the partial message cache into a one-to-one mode and corresponding to the message with higher ID priority; and configuring the filtering ID of the independent mask register corresponding to the remaining message cache into a one-to-many mode, wherein the filtering ID corresponds to the message with lower priority. According to the invention, the forwarding efficiency of the CAN message is improved, and the forwarding delay time of the CAN message is reduced.

The invention discloses a segment scanning type DDoS attack detection method and device, electronic equipment and a storage medium. The detection method comprises the following steps: for each IP address in a plurality of IP addresses, acquiring a first traffic feature set comprising traffic features of N dimensions of a first traffic set taking the IP address as a destination IP address in a first time period; calculating weights respectively corresponding to the traffic characteristics of the N dimensions based on a historical traffic set; corresponding weights are given to the traffic features of the N dimensions of the IP address, and a second traffic feature set corresponding to the IP address is obtained; clustering the plurality of IP addresses based on a plurality of second traffic feature sets corresponding to the plurality of IP addresses to obtain a clustering result; and determining the IP address network segments subjected to the segment scanning type DDoS attack in the IP address network segments where the plurality of IP addresses are located based on the clustering result. According to the method and the device provided by the embodiment of the invention, the segment scanning type DDoS attack can be effectively detected, the false alarm and the missing alarm are reduced, and the network security is improved.

The invention provides a VPN networking system and method, electronic equipment and a computer program product. Relates to the technical field of communication. In view of the problems of traditional VPN link resource waste and difficult session hot backup, the invention provides a VPN networking system, which comprises a VPN site and a VPN gateway cluster, and the VPN gateway cluster comprises M device nodes based on mesh distribution; a VPN tunnel is established between each device node and the VPN site; the VPN subnet at the local area network side is divided into M subnet segments, and each equipment node bears one subnet segment; every two device nodes in the VPN gateway cluster are in communication connection based on a VPN link, each device node comprises routing information of M device nodes, the routing information is used for indicating a forwarding path of sub-network segment flow when a system breaks down, and the routing information comprises next hop information of a sub-network segment borne by each device node. According to the embodiment of the invention, the method does not depend on session hot backup, achieves the quick and smooth switching of the VPN tunnel, and improves the resource utilization rate.

The invention relates to the technical field of communication, and provides an information reporting method, device and system, and the method comprises the steps that a first communication device receives a first VPN route from a second communication device, and the first VPN route comprises a first IP address prefix and equipment information of the second communication device; and the first communication device sends a protocol message to the control management device, and the protocol message comprises the first IP address prefix or the first IP address in the network segment to which the first IP address prefix belongs, the equipment information of the first communication device and the equipment information of the second communication device. Therefore, the control management device can successfully and efficiently obtain the information of the data transmission path transmitted from the first communication device to the first IP address prefix; wherein the information comprises equipment information of a communication device, namely a first communication device, at a data input end in the data transmission path and equipment information of a communication device, namely a second communication device, at a data output end in the data transmission path.

The invention relates to the technical field of Internet of Things, and provides an equipment identification method and device, equipment and a medium, which can start a probe to asynchronously initiate an address resolution protocol broadcast request for a target authorized network segment in a sectional manner to generate an active equipment list, and can avoid congestion, thereby accurately detecting active equipment. Performing port detection on each device in the active device list, performing multi-protocol verification on an open port according to a port-protocol adaptive matching mechanism, and performing organization unique identifier analysis on a media access control address of each device in the active device list; the problem of missing detection caused by single protocol broadcasting and port change and the problem of false alarm caused by only organizing unique identifier analysis are solved; and calculating a confidence score of each device according to the fusion features to generate an identification result of each device, so that device identification can be accurately carried out step by step by integrating multi-dimensional factors, and the false alarm rate is effectively reduced.

The invention discloses a scene control method, device and system for a vehicle area controller and a vehicle, the method is applied to the area controller of the scene control system, and the system comprises a central control unit, the area controller, a main network segment and a plurality of subnets with network management functions, the plurality of subnets are connected with the area controller, the central control unit is in communication connection with the area controller through a main network segment, and the method comprises the following steps: if a wake-up signal is detected, waking up itself, and determining a function scene based on the wake-up signal; according to the function scene, supplying power to target equipment connected under the plurality of subnets, and identifying the function scene; and waking up the corresponding subnet according to the function scene. According to the method, directional power distribution and network communication can be carried out on the network segments and nodes participating in the function link according to the function scene, and the low-voltage energy consumption of the vehicle can be effectively reduced.

Techniques for suppressing the flooding of link-local multicast and broadcast traffic are provided. In certain embodiments, these techniques include receiving, by a network device, a link-local multicast or broadcast message from an endpoint, where the message pertains to a networking protocol that uses link-local multicast and / or broadcast transmissions; dropping, by a data plane of the network device, the message in hardware, such that the message is not flooded on the local network segment of the endpoint; copying, by the data plane, the message to the device's central processing unit (CPU); and processing, by software running on the CPU, the message in accordance with the message's networking protocol (and in a manner that eliminates the need to flood the message).

The invention discloses a neural network on-chip resource scheduling method and device, electronic equipment and a medium. The neural network on-chip resource scheduling method comprises the following steps: drawing a change trend chart based on an operator execution sequence and operator tensor memory usage of a current neural network, and segmenting the change trend chart to obtain network segments; calculating a target cache batch size of each network segment; and carrying out on-chip data splicing on the last cycle output data of the previous network segment in the current adjacent network segments and the residual input of the next network segment to obtain target input data of the operator corresponding to the next network segment, and carrying out data processing on the target input data based on the operator corresponding to the next network segment. According to the technical scheme provided by the embodiment of the invention, the on-chip cache space can be fully utilized, the repeated carrying of weight data and the fixed overhead of the system are reduced, and the optimized operation efficiency of on-chip cache is greatly improved.

A network device of a virtual switch, which includes a second network device and operates on a unified control plane, is provided. During operation, the network device maintains a link between its first port and a second port of the second network device. Here, the first link can be distinct from a second link used for exchanging data traffic of the virtual switch. The network device operates a spanning tree protocol to place the first and second ports in respective port states, which include a forwarding state and a blocked state. If the second link becomes unavailable, the network device determines that the virtual switch has split into a first segment comprising the network device and a second segment comprising the second network device. If the first port state is in the blocked state, the network device suspends communication via a respective port of the first segment.

Techniques for load balancing secure network traffic are disclosed. A system, process, and / or computer program product for load balancing secure network traffic includes monitoring network traffic for one branch of a plurality of branches for an enterprise network, and splitting the network traffic of the one branch into a plurality of network segments based on a determination that the network traffic exceeds traffic capacity of at least one security processing node (SPN) of a plurality of SPNs using a network load balancer (NLB) in communication with a plurality of Network Processing Nodes (NPNs), the plurality of monitored branches being distributed to the plurality of SPNs via a plurality of tunnels.

Some embodiments provide a method for configuring a network to bridge data messages between a hardware-implemented L2 overlay network segment and a software-implemented L2 overlay network segment. The method identifies a host computer on which a logical network endpoint connected to the software-implemented overlay executes. The hardware-implemented L2 overlay connects at least a first set of network endpoints located in a first physical network zone and connected to a first L2 network segment and a second set of network endpoints located in a second physical network zone and connected to a second L2 network segment. The identified host computer is located in the first physical network zone. The method configures a forwarding element executing on the host computer to bridge data messages between the logical network endpoint and (i) the first set of network endpoints and (ii) the second set of network endpoints.

In an example, systems and methods enable automatic implementation of intent-based security policies in a network system, such as a software-defined wide area network system, in which network segment prefixes for network segments at one or more sites are dynamically learned. A service orchestrator controller translates an intent-based security policy input by a user to a security policy for a first site. The security policy for the first site specifies a segment-specific queryable resource associated with a second site. To implement the security policy, a device associated with the first site queries the segment-specific queryable resource associated with the second site, and updates one or more forwarding tables of the device with the network segment prefixes associated with one or more network segments at the second site received in response to the query. The first site forwards network traffic to the second site based on the updated forwarding tables.

The invention provides a user cross-network security access method based on IP control, and the method comprises the steps: dividing a fixed IP network segment for an office network user using a service system in advance, selecting an account network attribute as a technical network or an office network for an office network account applied by the user, and distributing an IP to a user host from the fixed IP network segment; when a user logs in, a user client IP and a system configuration office network IP white list are obtained, if the account network attribute is a technical network, whether the office network IP list contains the client IP is judged, if yes, login fails, and the system refuses to access; if not, the login succeeds. And if the account network attribute is an office network, the system responds normally. According to the invention, the security of the business data in the non-research and non-development terminal is ensured, so that personnel of different organizations and different functional domains can smoothly carry out actual businesses depending on the business system, and a solid foundation is provided for enterprises to subsequently use digital technologies to optimize own processes and organizations.

The invention discloses a voice assistant interaction method and system, the system comprises an end side device layer, a cloud service layer and a communication interaction layer, the end side device layer comprises at least two terminal devices, and each terminal device is provided with a multi-mode sensor. According to the invention, single-mode noise interference is compensated through multi-mode data fusion, which is significantly superior to the existing voice assistant; a personalized strategy is generated based on a triple of intention, emotion and equipment, so that the interaction experience is improved; local priority synchronization is realized by adopting a double-layer MQTTBroker architecture, the state synchronization delay of cross-network segment equipment is reduced, multi-equipment collaboration is supported, and seamless switching among equipment is realized.

The invention discloses a real estate registration data synchronization method based on seatunnel, which comprises the following steps of: data source access: defining a real estate registration data source library as BDS (S1, S2, S3... Sn), defining a data target library as BDT (T1, T2, T3... Tn), setting database addresses of the BDS and the BDT, a complete link string, user information and driving information, and performing data source access by testing connectivity; the method is applied to data source management of real estate registration data synchronization. And task information configuration: setting a data synchronization task DST (D1, D2, D3... Dn), accessing a data source library S1 and a data target library T1 in a D1 configuration file, and appointing real estate registration data source tables (st1, st2, st3... stn) and result tables (rt1, rt2, rt3, rtn). According to the real estate registration data synchronization method based on the seatunnel, the problem of data real-time intercommunication of cross-platform, multi-network-segment and multi-source heterogeneous databases is solved through data source access plug-in development.

The invention relates to a parallel redundant network transmission method for three-layer network transmission, and belongs to the technical field of network transmission. The method for expanding the PRP protocol redundancy check tail fix is adopted, at the sending end of computer network data, the MAC address of the sending end is added to the redundancy check tail of the PRP frame, it is ensured that the frame cannot be stripped by a router during cross-network-segment transmission, and therefore transmission of the PRP frame in a three-layer network can be achieved.

The invention provides a diagnostic service processing method and device based on a gateway technology, and electronic equipment. The method comprises the following steps: carrying out service processing operation on a diagnostic service; determining a diagnostic protocol type corresponding to the diagnostic service; determining whether a diagnosis protocol used by the diagnosis service is consistent with an in-vehicle unified diagnosis protocol; if the diagnosis protocol used by the diagnosis service is consistent with the in-vehicle unified diagnosis protocol, directly sending the diagnosis service to a corresponding target network segment through the in-vehicle gateway; if the diagnosis protocol used by the diagnosis service is not consistent with the in-vehicle unified diagnosis protocol, the diagnosis service is converted into the in-vehicle unified diagnosis protocol format according to the data frame format corresponding to the diagnosis service, and the processed diagnosis request is sent to the corresponding target network segment through the in-vehicle gateway. Through inter-conversion of diagnosis protocols inside and outside a vehicle, the compatibility problem among different diagnosis protocols is solved.

The invention discloses a train communication address allocation method, electronic equipment and a storage medium, and the method comprises the steps: carrying out the detection interaction between train-level backbone network modules of each train to determine a subnet segment corresponding to each train, and receiving an address request of local target equipment based on an Ethernet train composition module of each train, the unique network address is allocated based on the subnet segment, so that the technical problems of low efficiency, easy conflict and incapability of adapting to flexible marshalling requirements caused by manual configuration of the communication address during marshalling adjustment of the existing train are solved, automatic allocation of the train communication address is realized, the marshalling adjustment time is greatly shortened, address conflict is avoided, and the marshalling adjustment efficiency is improved. And meanwhile, different marshalling switching is adapted to meet diversified operation requirements.

Techniques for load balancing secure network traffic are disclosed. A system, process, and / or computer program product for load balancing secure network traffic includes monitoring network traffic for one branch of a plurality of branches for an enterprise network, and splitting the network traffic of the one branch into a plurality of network segments based on a determination that the network traffic exceeds traffic capacity of at least one security processing node (SPN) of a plurality of SPNs using a network load balancer (NLB) in communication with a plurality of Network Processing Nodes (NPNs), the plurality of monitored branches being distributed to the plurality of SPNs via a plurality of tunnels.

The invention relates to the technical field of intelligent computing centers, intelligent computing centers and computing power infrastructures, and provides an intelligent computing center computing power resource container network segment dynamic switching method and device, and the method comprises the steps: creating at least one two-layer access point; creating at least one two-layer network bridge device; configuring at least one container, associating a two-layer network bridge device to a namespace of the container, determining a target container in the at least one container, and determining a target two-layer access point associated with the target container; modifying the tag value of the target two-layer access point; and configuring the gateway of the new subnet resource and the target IP address in the IP resource pool to the virtual network card of the target container so as to realize dynamic switching of network segments of the computing power resource container network. Therefore, the dynamic switching of the network segments of the computing power resource container network can be realized, the network flow topology of the computing power resource container cluster can be quickly adjusted, the elastic performance of the computing power resource container cluster can be integrally improved, and the scale expansion efficiency of the computing power resource container cluster can be improved.