159 results about "On-Protocol" patented technology

The invention relates to the technical field of network communication, and discloses a vehicle-mounted edge computing data recording system and method based on protocol adaptive analysis, and the system comprises a multi-protocol network access controller which is used for capturing an original data frame and extracting a physical feature triple; the identification analysis engine is used for executing hash operation on the triple to generate a physical feature code and retrieving a physical logic address mapping table; the direct memory access controller is used for responding to a target memory address pointer hit by retrieval and directly writing a data load into an input buffer area of the functional operation module, and by constructing a direct addressing mechanism based on Hash mapping, thorough decoupling of vehicle-mounted heterogeneous network physical topology and edge computing logic is achieved.

The invention provides an automatic network protocol testing method and system based on a large language model. According to the method, through three core technologies of structured protocol specification extraction, hybrid test case generation and retrieval feedback enhanced code generation, full-process automation from a protocol specification document to an executable test code is realized. The method comprises the following steps: firstly, carrying out preprocessing and structured analysis on an RFC document, and extracting protocol field information and state machine description; a complete test case covering normal, abnormal and boundary conditions is automatically generated based on protocol elements; and finally, an initial test code is generated in combination with a test equipment API document retrieval result, and multi-round iterative optimization is performed through running log analysis and an experience knowledge base. Compared with the prior art, according to the scheme, an end-to-end automatic test work chain is achieved, new protocol testing can be adapted without manual protocol modeling, meanwhile, a large language model and expert experience are fused through a feedback mechanism, and the test efficiency and the code quality are remarkably improved.

The invention discloses a self-adaptive threat blocking method and system oriented to industrial control protocol deep analysis, and the method comprises the steps: constructing an industrial control protocol multi-dimensional analysis model, extracting an operation code semantic rule, a parameter structure constraint and session state hopping features based on protocol reverse engineering, generating a protocol syntax tree, and blocking a threat from the protocol syntax tree. Wherein the operation code semantic rule is matched with the service primitive mapping of an abstract communication service interface in the IEC 61850 standard; based on the protocol syntax tree, semantic-level analysis is carried out on real-time communication flow, dynamic indexes are extracted, the dynamic indexes comprise a process value mutation gradient, an instruction sequence logic conflict degree and a session state abnormal jump rate scale, and a three-dimensional threat feature vector is generated. According to the method, hidden attacks are accurately recognized through industrial control protocol semantic analysis and multi-dimensional dynamic blocking, so that the defense action and the production stability can be collaboratively optimized.

The invention relates to the technical field of research and development management, can be applied to business scenes of financial science and technology, medical health and the like, and discloses an anomaly analysis method, device, equipment and medium based on a variation test. Generating a test case through the semantic perception model; selecting a variation strategy by using a state-driven model according to the service state, and generating a variation test case based on the access control strategy; executing the variation test case in a distributed environment, and collecting system resource index data and request execution monitoring data; and inputting the collected data into the abnormal prediction model, and outputting an abnormal behavior prediction result. Through combination of semantic perception generation, state-driven selection and anomaly prediction, coverage of a test case on protocol dependence and a service state is improved, and the accuracy of anomaly detection of the object storage system is remarkably improved.

The invention discloses a network protocol integrated development environment system based on a model context protocol MCP, and relates to the technical field of computer networks. The system comprises an IDE plug-in structure, a protocol analysis engine interface, a context awareness editing module, a user interaction interface and a collaborative view module. According to the method, a development tool is embedded through an IDE plug-in structure, a protocol analysis interface is called to carry out protocol structure identification and semantic modeling, and intelligent suggestions and semantic verification are provided in combination with context information in the protocol editing process. A user can carry out protocol structure editing and visual control through the interactive interface, and different roles can collaboratively carry out protocol design and verification tasks through the collaboration view module. The whole process forms a closed-loop mechanism from protocol modeling and semantic editing to context awareness suggestion, and high-intelligence and high-integration protocol development experience is achieved. The system significantly improves the efficiency and accuracy of protocol development, and is especially suitable for rapid prototype design and standardized development of complex network protocols.

The invention relates to the technical field of file one-way import, and discloses a multi-protocol file one-way import method, which comprises the following steps: S1, protocol dynamic analysis: based on protocol fingerprint features and a machine learning model, identifying a protocol type of a source end input data stream, and generating a protocol adaptation rule; s2, intelligent fragmentation of the file: dynamically calculating a fragmentation strategy according to a protocol type and a network state, splitting the file into a plurality of fragments and distributing the fragments to different protocol transmission channels; s3, multi-protocol parallel transmission is carried out; s4, performing adaptive fault-tolerant recovery; and S5, recombining and checking the target end. According to the invention, through the protocol fingerprint feature extraction and the hybrid neural network model, and through capturing the message header flag bit, the encryption algorithm identifier and the time sequence interaction behavior in the protocol handshake stage, accurate identification of multiple protocol types and reverse analysis of the private protocol are realized, and the anti-interference capability and the dynamic adaptation efficiency of protocol identification are improved.

The invention discloses a white list application method based on a terminal security management system, which belongs to the technical field of terminal management, and comprises the following steps: acquiring memory instruction characteristics when an application program runs in a terminal, dynamically associating the memory instruction characteristics with a security handshake protocol certificate fingerprint, and generating a white list strategy library with a protocol verification rule; capturing an attack behavior by using an attack protection module, extracting DNS tunnel characteristics of the attack behavior in communication, generating a self-adaptive interception strategy, and synchronizing the self-adaptive interception strategy to a white list strategy library; analyzing a domain name analysis request initiated by the process, and executing white list matching and protocol compliance verification; network connection behaviors of processes in the terminal are monitored, an encrypted communication behavior graph is constructed, and an attack diffusion link formed by cross-process key transmission is identified; and when an attack diffusion link is identified, DNS tunnel encryption binding is triggered based on a protocol verification rule of a white list policy library, and a transmission behavior of an unauthorized encryption protocol is blocked.

The invention discloses a virtual electric energy meter implementation method supporting multiple protocols, and belongs to the technical field of power equipment testing. The method comprises the following steps: (1) a protocol plug-in engine packages protocols such as DL / T645, DL / T698, ModBus and the like into source code level plug-ins capable of being hot-plugged; 2) the virtual table manager dynamically creates / destroys a virtual table instance according to a collection command, and supports automatic table number generation and resource recovery; the intelligent configuration unit (3) is specially used for configuring abnormal response modes including negative acknowledgement, null data and communication timeout to realize dynamic fault simulation; according to the scheme, the problems that real faults are difficult to simulate, protocol switching efficiency is low, virtual table configuration is rigid and the like in a traditional test are solved, the protocol compatibility test coverage rate and automatic test efficiency of the electric power acquisition terminal can be remarkably improved, and the method is particularly suitable for full-scene verification of equipment such as an intelligent electric meter and a concentrator.

The embodiment of the invention provides an intelligent equipment integrated control method and system based on cloud-side cooperation, and relates to the field of equipment control. The method is applied to intelligent integrated equipment integrating at least one sub-control system of short-range communication, voice control and IOT control, and is associated with a client. The method comprises the following steps: receiving a first control instruction which is sent by an IoT PaaS platform and comprises a voice instruction or a physical instruction sent by a client; the voice instruction comprises an instruction determined by the voice cloud platform based on first voice data, and the first voice data comprises data sent by the intelligent integrated device or the client and obtained according to second voice data input by a user; determining a target device, protocol information thereof and a second control instruction according to the first control instruction; and sending a second control instruction to the target device through the sub-control system or the IoT SaaS platform based on the protocol information, so that the target device executes the second control instruction. The equipment control efficiency can be improved.

The invention discloses an attack detection method and system for gateway equipment. According to the heterogeneous cooperative defense system based on protocol context awareness provided by the invention, a'kernel mode instruction recombination-user mode adversarial learning 'double-engine architecture is innovatively constructed, and low-delay extraction of attack features and active evolution of a protection strategy are realized. Specifically, the invention provides a migration type adversarial evaluation model, which breaks through the dependence of a traditional detection scheme on protocol grammar, dynamically constructs a cross-protocol attack sample through a generative adversarial network, captures traffic time sequence anomaly in combination with a bidirectional LSTM, and constructs a dynamic graph containing threat propagation probability and resource occupation trend. Therefore, feature migration and generalization modeling can be carried out on unknown or variant attack behaviors, the recognition capability on zero-day attacks and cross-protocol attacks is enhanced, and finally the detection accuracy is improved.

The invention discloses a measuring point data collecting and processing method, device and system and a storage medium, and the method comprises the steps: obtaining a protocol configuration field and a measuring point configuration field based on a protocol template configuration operation for a target communication protocol; the protocol configuration field is used for indicating a communication parameter of a target communication protocol, and the measuring point configuration field is used for indicating a measuring point data acquisition processing parameter; generating a protocol template of the target communication protocol based on the protocol configuration field and the measuring point configuration field; obtaining a target protocol configuration file obtained based on the protocol template of the target communication protocol; the target protocol configuration file comprises field configuration content corresponding to a protocol configuration field and field configuration content corresponding to a measurement point configuration field; and performing measurement point data acquisition based on the target protocol configuration file, and performing data analysis processing on the acquired target measurement point data. According to the invention, the data generated by the ship measuring point equipment of different communication protocols can be efficiently and flexibly acquired.

The invention discloses a WAF defense capability test method and device based on protocol analysis difference, and relates to the technical field of network security. According to the method, a protocol variation verification test case is constructed to generate a variation test message containing a non-standard protocol feature and a verification load, and the variation test message is sent to a back end through a test link and a reference link; and accurately judging that the WAF is in a state of successful interception, bypassing or repairing to cause bypassing by comparing the response fingerprint with an expected result. According to the invention, comprehensive and automatic assessment of the defense capability of the WAF protocol layer can be realized.

The invention provides a water purifier Internet of Things gateway cooperative control system and method based on protocol dynamic analysis and adaptation, belongs to the field of intelligent control of water purifiers, and solves the problems of low intelligent degree, poor collaboration and the like of an existing water purifier Internet of Things system. Comprising a physical interface layer, a protocol dynamic analysis and adaptation layer, a unified data model layer, an intelligent cooperative control engine layer, a trusted data interaction layer and a management configuration layer. The cooperative control system adopts a containerized architecture; the physical interface layer is connected to the water purifier mainboard, the back-end cloud platform and an external system; the unified data model layer constructs a water purifier digital model covering static, dynamic, prediction and interaction dimensions. According to the invention, a water purifier cluster housekeeper integrating protocol, AI decision, federal learning and block chain security is constructed, high flexibility, expandability and reliability are realized through a containerized micro-service architecture, and efficient, energy-saving and intelligent cooperative control of a large-scale and multi-brand water purifier network is achieved.

This invention relates to the field of communication management technology, specifically to a remote communication management method and system for inspection equipment based on protocol identification. The method includes the following steps: based on a zoned operation scenario, the structure of the communication data frames of the inspection equipment is analyzed sequentially; field parameters are located and parsed; parameter sets and structure templates are compared; related field combinations are filtered and their overlap is determined; structural differences in consecutive data frames are analyzed; structural misalignment changes are identified; and a sequence offset indicator is obtained. This invention, by combining data frame structure analysis and dynamic feature comparison mechanisms during communication interaction, achieves real-time determination of field arrangement and verification relationships. It adaptively adjusts the parsing and control process according to the data content, possessing the ability to continuously perceive changes in communication structure. This avoids parsing obstacles caused by protocol evolution, reduces manual intervention, and improves the communication consistency, command recognition accuracy, and data interaction continuity of inspection equipment in multi-version mixed access environments.

The invention discloses an industrial control private protocol vulnerability mining method based on protocol analysis. The method comprises the steps of 1, preprocessing industrial control protocol flow data; and 2, analyzing the target protocol by using the byte change characteristics and the heuristic rule. And 3, generating a test case of the target protocol by using the analysis specification. And 4, reconstructing a protocol state machine by using the state conversion track of the flow, and guiding the protocol to reach a target state for testing. And 5, tracking the state of the detected target and monitoring and positioning the triggered vulnerability through a network. According to the method, the analysis accuracy of the private protocol specification can be effectively improved, the test case acceptance rate, the test target anomaly rate and the state coverage rate in the fuzzy test process are remarkably improved, and meanwhile, more protocol states can be efficiently tested under the condition of the same number of test cases so as to mine more potential vulnerabilities in the protocol.

The invention belongs to the field of computer system compatibility and peripheral interfaces, and relates to a domestic desktop terminal peripheral compatibility method and system based on protocol reverse mapping and a computer readable storage medium. According to the method, after peripheral access, three-layer analysis of physical layer signal reversal, data link layer structure reversal and application layer semantic reversal is carried out in sequence, and an equipment interface type, a frame structure and instruction semantics are dynamically identified. And based on the reverse result, dividing the equipment into a standard protocol or a private protocol through a protocol type decision, respectively routing the protocol to a drive straight-through module or an instruction translation executor for processing, and finally providing compatible services for a domestic service system through a unified virtual equipment interface. According to the method, the adaptation problem of a document-free private protocol is solved, plug and play of a Wintel peripheral by a non-x86 architecture domestic terminal is achieved, the protocol compatibility coverage rate is remarkably increased, meanwhile, the CPU occupancy rate is reduced, and the harsh requirement for millisecond response of specific industries such as electric power is met.

The invention relates to a UDP communication fault diagnosis and recovery method based on protocol stack health degree multi-dimensional perception, and belongs to the technical field of embedded systems and computer network communication. According to the method, aiming at a difficult fault that Ping communication is carried out between devices but UDP applications cannot carry out communication, an internal state of a network protocol stack is actively sensed through a built-in diagnosis agent module, and a traditional external packet capturing means is replaced. The diagnosis process comprises the steps of link layer reachability verification, protocol stack load channel detection, Socket interface state auditing and memory pool and task health degree inspection. The system constructs a protocol stack health degree vector through multi-dimensional sensing data, and performs fault mode matching based on a preset rule base. Once the fault root cause is positioned, the system can automatically trigger a repair action or report an accurate alarm. According to the invention, through automatic and intelligent diagnosis and self-healing embedded in the system, the reliability and maintainability of the embedded network equipment are greatly improved.

The invention belongs to the technical field of computer data processing, and discloses a method for analyzing data reported by equipment based on Protocol Buffer, which comprises the following steps of: S1, configuring a protobuf file according to service requirements; s2, the sending end generates a message data stream according to the data collected by the equipment; s3, the sending end sends the message data stream to a message server; s4, the receiving end converts the protobuf file into a class function which can be called by the Java code; and S5, the receiving end monitors the message server in real time, and constructs the data stream into a corresponding object through the Java class function of the protobuf after receiving the data stream issued by the message server. When the data collected by the equipment is changed, source codes do not need to be modified, only the protobuf file needs to be redefined, and a new class function is generated. When a large batch of data is processed, the data represented by protobuf can be more efficient, the compressed data is smaller, and the transmission efficiency is improved. Moreover, due to the fact that the data structure is defined in advance, data analysis is more efficient.

A method for wireless communication at a user equipment (UE) and related apparatus are provided. In the method, the UE determines a discard configuration for a discard process based on protocol data unit (PDU) set importance (PSI) associated with a set of data radio bearers (DRBs). The discard configuration includes a discard timer and discard information for each DRB in the set of DRBs. The UE further transmits, for a network entity, one or more data packets over the set of DRBs based on the discard configuration.

The application discloses a kind of intelligent fusion terminal heterogeneous protocol conversion method and system, the method includes the following steps: first, the three-layer system architecture of perception layer, protocol analysis layer and intelligent conversion layer is constructed, realizes from data acquisition, semantic understanding to the whole process of intelligent conversion.Through the construction of uniform protocol description model based on JSON Schema, centralized metadata registration and version management are carried out on protocol template, the standardization of heterogeneous protocol is realized;Intelligent identification of protocol type and analysis field is realized by using convolutional neural network, and mapping rules consistent with semantics are automatically generated by combining knowledge graph and rule engine;Model pruning and quantization technology are used to optimize deep learning model, and priority scheduling and cache mechanism are designed.The application effectively solves the interoperability problem caused by the heterogeneous communication protocol of power equipment, and improves the protocol conversion efficiency and system expansibility of intelligent fusion terminal.

The application belongs to the field of computer system compatibility and peripheral interface, and relates to a domestic desktop terminal peripheral compatibility method and system based on protocol reverse mapping and a computer readable storage medium. After the peripheral is accessed, the method sequentially performs three-layer analysis of physical layer signal reverse, data link layer structure reverse and application layer semantic reverse, dynamically identifies device interface type, frame structure and instruction semantics. Based on the reverse result, the device is divided into standard protocol or private protocol through protocol type decision, and is routed to a drive pass-through module or an instruction translation executor for processing, respectively, to finally provide compatibility services for domestic business systems through a unified virtual device interface. The application solves the adaptation problem of undocumented private protocols, realizes plug-and-play of Wintel peripherals for non-x86 architecture domestic terminals, significantly improves protocol compatibility coverage, reduces CPU occupancy, and meets the stringent requirements of millisecond-level response in the power and other specific industries.

The embodiment of the invention provides a protocol testing method and device, electronic equipment and a storage medium. The method comprises the following steps: automatically acquiring protocol interaction data through a protocol recording tool, and determining a to-be-tested protocol; based on the protocol type classification, different model generation strategies are adopted to obtain test cases of the protocol to be tested; automatically executing the test case and recording response data; and obtaining a test result based on the response data. Protocol interaction data are automatically collected through a protocol recording tool, so that the cost of manual protocol combing and communication is reduced; different model generation strategies are adopted based on protocol type classification, diversified test cases can be efficiently generated, and conventional parameter verification and function verification requirements are met; manual intervention is further reduced through automatic execution and result analysis, the test efficiency and accuracy are improved, and meanwhile the data processing pressure of the server is relieved.

The invention relates to the technical field of power electronics and transformers, in particular to a solid-state transformer fault early warning and isolation system based on protocol access, which is characterized in that when a solid-state transformer is started, a data frame generated by equipment is collected and stored by a sensor through a local control module; the protocol analysis module receives the equipment data frames and extracts information in the equipment data frames in a dynamic analysis mode; the fault early warning module analyzes the analyzed data based on a fault prediction model, predicts possible transformer faults, and evaluates prediction results; the fault isolation module is used for positioning equipment needing to be isolated according to an evaluation result, and generating related fault information by disconnecting the equipment from other components; the communication interface module reports the fault information to a central server or superior equipment for further analysis and processing of fault data; according to the system, real-time monitoring, fault early warning and intelligent isolation of the solid-state transformer are realized, and the operation safety and stability of equipment are improved.

An electric power industrial control system equipment anomaly detection method based on protocol use frequency analysis belongs to the technical field of electric power industrial control system security, and comprises the following steps: firstly, extracting the use frequency of various communication protocols in a system, and carrying out anomaly judgment on the use frequency of the protocols at each moment; then, calculating a protocol use history characteristic value of the corresponding time period of the previous day, taking the characteristic value as a reference, and judging the abnormal state of the protocol in the time period by comparing the protocol use characteristics of the day and the history; and finally, starting from the overall perspective of the equipment, constructing an equipment anomaly feature vector according to various protocol state distributions contained in the equipment, calculating a comprehensive anomaly score of the equipment according to the equipment anomaly feature vector, and dividing equipment operation state grades, thereby effectively improving the accuracy and real-time performance of equipment anomaly detection of the electric power industrial control system.

SYSTEM AND METHOD FOR EVALUATING UNIFORM RESOURCE LOCATOR 5 Disclosed is a system (100) and a method (500) for evaluating a Uniform Resource Locator (URL). The method (500) comprises extracting the URL from a message and assigning an initial risk score. The method (500) further comprises performing a protocol verification to verify a protocol of the URL and a domain assessment operation to determine whether the URL is an IP-address based URL, or FQDN 10 based URL. Furthermore, the method (500) comprises calculating a risk score for the URL based on protocol verification, domain assessment, evaluation of length of the URL, association with reputed domains, analyzing mean value of the URL, and identifying whether an entry corresponding to the URL is stored in a distributed ledger (108). Thereafter, the method (500) comprises determining a probability of 15 the URL being secure based on the calculated risk score and evaluating the credibility of the URL based on the probability.

The invention provides a multi-protocol data processing method and device, electronic equipment and a storage medium, and the method comprises the steps: loading a plurality of protocol plug-ins based on protocol configuration information, and obtaining original management information from heterogeneous equipment based on the plurality of protocol plug-ins; preprocessing the original management information to obtain management information, and inputting the management information into a pre-constructed recognition model to obtain an exception recognition result of the management information output by the recognition model; adjusting the initial rule configuration information based on the exception identification result, generating rule configuration information, and processing the management information based on the rule configuration information to obtain processed management information; and packaging the processed management information based on a communication protocol corresponding to the target equipment, and sending the packaged management information to the target equipment. According to the method, the initial rule configuration information can be updated in real time according to the identified abnormal condition, the flexibility and the adaptability are high, and the method is suitable for dynamically changing complex application scenes.

The invention discloses a data multipath transmission camouflage method based on a protocol and a sending rate, and the method comprises the following steps: 1, carrying out the fragmentation of original data through an entrance node according to a predefined protocol rule based on the obtained original data, and obtaining a plurality of data segments; step 2, disguising the encrypted data segment by using a protocol disguising module to obtain a disguising message; step 3, forwarding the rate camouflage message to a multipath communication network in parallel on each path through a plurality of communication paths by adopting an entrance node; step 4, the exit node decapsulates and verifies the rate camouflage message to obtain a plurality of data segments; step 5, the exit node sends the plurality of data segments to a receiver server according to the serial numbers of the exit node; and step 6, the exit node and the entrance node are mutually exchanged, and then the step 1 is returned to continue. And the anti-analysis capability and the concealment of the communication system are enhanced while the transmission reliability is improved.

This invention belongs to the field of industrial communication fault detection technology, specifically relating to a communication fault detection method based on protocol message analysis for POWERLINK communication networks. It includes the following steps: 1) parsing protocol messages and extracting message information as the message parsing result; 2) generating context information describing the network based on the message parsing result; 3) determining whether a protocol communication fault has occurred based on the message parsing result, the current network state, and the network context information; if a fault has occurred, recording the fault-related information; 4) generating the next state the network needs to transition to based on the message parsing result and the current network state, updating the network state, and returning to step 1), until the protocol message monitoring ends, completing the network communication fault detection. This invention can accurately and effectively detect dynamic upper-layer protocol faults in communication networks and can be widely applied to online fault detection and offline fault analysis in industrial communication networks.

The invention discloses a mobile device control system and method based on protocol conversion and wireless communication, the system comprises a communication conversion gateway, a remote communication module, a PLC controller and a GSD file configuration module, the method comprises the following steps: installing the communication conversion gateway on an AGV trolley, and using a built-in Modbus-TCP protocol parser to carry out protocol conversion on the AGV trolley; the Modbus-TCP protocol is analyzed into data in an XML (Extensible Markup Language) format; and generating a PN protocol message according to the XML format data obtained by analysis. According to the invention, efficient conversion between the Modbus-TCP and the Profinet protocol is realized through the communication conversion gateway, the problem of "protocol barriers" between different devices is solved, and the interoperability of the system is greatly improved; in combination with GSD file configuration, new equipment can be quickly accessed, and the flexibility and expandability of the system are remarkably enhanced; the optimized protocol conversion process and Profinet communication link greatly improve the response speed.

The invention discloses a network flow generating and repairing method based on protocol constraint. The method comprises the following steps: analyzing an original traffic capture file, extracting basic features through stream-level recombination and session segmentation, and mapping a continuous time sequence and a discrete protocol field to a uniform feature space; and on the basis, constructing a diffusion type network flow generation model to capture a statistical attribute and time sequence dependency relationship of the network flow. In the generating or repairing process, a protocol state machine is constructed, protocol constraint is introduced in the reverse denoising stage, the sampling process is constrained through a legality guiding mechanism, and protocol logic violation in the generating process is avoided. And finally, through feature inverse mapping and virtual protocol stack state maintenance, reconstructing to obtain network flow data which meets a communication protocol specification and can be correctly analyzed by a real protocol stack. According to the method, the generation and repair of the network traffic can be realized under a unified framework, and the correctness of a result in protocol semantics is ensured.