40 results about "Open port" patented technology

The invention discloses a dynamic detection method and device for network assets, and belongs to the technical field of network security management. The method comprises the steps of performing initialization analysis and environment matching processing on a detection instruction received by a system, and determining a task scanning object of a to-be-scanned asset; performing first dynamic detection on assets to be scanned according to the task scanning object to obtain port opening information of all survival assets; performing second dynamic identification on all survival assets according to the task scanning object and the port open information to obtain structured data of an open port; and performing fusion correction on the structured data according to a preset fingerprint database, and establishing a complete asset model of the to-be-scanned asset according to a correction result. According to the invention, the detection efficiency of network assets can be improved and complete detection information can be obtained.

The invention relates to the technical field of Internet of Things, and provides an equipment identification method and device, equipment and a medium, which can start a probe to asynchronously initiate an address resolution protocol broadcast request for a target authorized network segment in a sectional manner to generate an active equipment list, and can avoid congestion, thereby accurately detecting active equipment. Performing port detection on each device in the active device list, performing multi-protocol verification on an open port according to a port-protocol adaptive matching mechanism, and performing organization unique identifier analysis on a media access control address of each device in the active device list; the problem of missing detection caused by single protocol broadcasting and port change and the problem of false alarm caused by only organizing unique identifier analysis are solved; and calculating a confidence score of each device according to the fusion features to generate an identification result of each device, so that device identification can be accurately carried out step by step by integrating multi-dimensional factors, and the false alarm rate is effectively reduced.

In a sampling system for mass spectrometry, a method and apparatus are set forth for high flow-rate flushing and sample delivery via a sampling probe (10). The sampling system includes a sampling probe (10) having a first fluid conduit (40) with an inlet, a second fluid conduit (42) with an outlet, and a sampling port fluidly connecting the first fluid conduit (40) and second fluid conduit (42). A fluid source (50) is attached to the inlet and a vacuum source (60) is attached to the outlet for causing fluid to flow through the first fluid conduit (40) past the sampling port and exit through the second fluid conduit (42). A cap (90) is provided for selectively closing and opening the sampling port. When the cap is removed, thus when the sampling port is open, sample may be introduced into, and captured by fluid flowing through the sampling port. When the cap is in place, thus when the sampling port is closed, a flushing fluid is supplied for flushing the sampling probe (10).

The present application provides a system and a method for detecting an Apache HTTP Server path traversal vulnerability. The method comprises: inputting a target IP address list into a scanning module, and probing the network reachability of each IP address in the target IP address list; if there is a network-reachable IP address, probing all ports of the IP address, and recording open port numbers; identifying services running on the open ports and performing service classification; if a service is classified as an Apache service, initiating a Curl request command to an icons directory path of the Apache service; if the Curl request succeeds and an / etc / passwd file is read, parsing the / etc / passwd file and extracting users of a host under test; performing detection on the users of the host to obtain an Apache HTTP Server path traversal vulnerability; and generating a detection report for the host on the basis of the Apache HTTP Server path traversal vulnerability.

Systems and methods are disclosed for automated method parameter configuration for differential mobility separations. As non-limiting examples, various aspects of this disclosure provide receiving a sample in an open port interface; transferring the sample to an ionization source; ionizing the transferred sample; introducing the ionized sample into a mass spectrometer; mass analyzing the ionized sample to produce an initial mass analysis result; determining a peak width of the initial mass analysis result; and determining a dwell time for subsequent measurements based on the determined peak width, a pre-defined number of data points across subsequent mass analysis peak widths, and a number of different analytes to be assessed for the sample. The sample may be diluted and transferred to the ionization source by a sample introduction apparatus selected from a group including an acoustic droplet ejector (ADE), a pneumatic ejector, a piezoelectric ejector, and a hydraulic ejector.

The present application provides a detection system and method for Harbor image registry registration vulnerabilities. The method comprises: inputting a target IP address list to a scanning module, and detecting network reachability of each IP address in the target IP address list; if there is a network-reachable IP address, detecting all ports of the IP address, and recording the number of an open port; by identifying a service running under the open port, classifying the service; if the service is classified as a Web service of a Harbor image registry, determining whether an api users path under the service can be accessed; if the access succeeds, using a registration module to initiate a post request for the api users path and register an administrator account; when the post request has been implemented and a new administrator account has been successfully created by a Harbor image registry server, a parsing module pulling an image file of the image registry and parsing and detecting the image file; and a detection report module integrating detected vulnerabilities to generate a detection report of Harbor image registry registration vulnerabilities.

The application discloses a method and system for detecting components based on gRPC communication, and relates to the technical field of communication information management; a client gRPC sending module sends a request to obtain return information to judge the availability of a detected component, a server gRPC receiving module receives the request, obtains client information and a component name to be detected according to the request, obtains open ports of the corresponding component and ping request return values of the open ports from a server data storage module according to the component name, knows whether the component is available according to the ping request return values, organizes return information and sends the return information to the client gRPC sending module, a server self-checking module sends a ping request to the open ports of each component in real time and obtains ping request return values, and the component, the corresponding open ports of the component and the corresponding ping request return values are written into the server data storage module.

Disclosed are methods and systems that can detect, monitor, adjust, and optimize fluid dynamic conditions within a sampling system comprising a transport capillary (e.g., an open port interface). The methods and systems detect an acoustic signal within the sampling system and, based on characteristics of the detected acoustic signal, adjust flow rate conditions of the liquid and / or airflow in the sampling system. Also provided are automated control and feedback systems (e.g., automated feedback adjustments made to an inlet pump flow rate, nebulizer gas flow rate, or both) that adjust, tune, and maintain flow conditions within a transport line based on a detected acoustic signal.

The invention belongs to the technical field of industrial control network vulnerability scanning, and relates to an industrial control system network vulnerability scanning preprocessing method and system. Determining a system scanning boundary according to the network configuration information and the real-time flow data of the industrial control system, and obtaining a survival IP address list, an open port list and a scanning tolerance degree based on the system scanning boundary; obtaining a scanning task workload and scanning load intensity based on the survival IP address list, the open port list and the scanning tolerance degree, and generating a scanning task based on the scanning task workload and the scanning load intensity; and carrying out network vulnerability scanning according to the scanning task and obtaining an unverified vulnerability list, obtaining a vulnerability set according to the unverified vulnerability list and the threat score, and verifying the vulnerability set by utilizing POC. Invalid scanning and over-scanning can be avoided, the scanning range can be narrowed according to the characteristics of the industrial control system, and a reasonable scanning load is generated, so that the scanning time is effectively shortened. The false alarm rate of vulnerability detection can be reduced.

The invention relates to a network connection security automatic start-stop control method and device, computer equipment, a medium and a product. The method comprises the steps that network equipment receives a first start-stop time strategy issued by a strategy management platform, and sends a start instruction to a fan control unit to instruct the fan control unit to open a to-be-opened port under the condition that the current moment is a start moment, so that operation and maintenance personnel remotely access the fan control unit through the to-be-opened port, and the operation and maintenance personnel remotely access the fan control unit through the to-be-opened port. And under the condition that the current moment is a stop moment, sending a stop instruction to the fan control unit to indicate the fan control unit to close the to-be-opened port so as to stop the process that the operation and maintenance personnel remotely access the fan control unit through the to-be-opened port, and feeding back a session termination notification to the strategy management platform, and the policy management platform is indicated to send a session termination notification to the operation and maintenance personnel. By adopting the method, the network security can be improved.

The invention relates to the technical field of intelligent environmental protection of port bulk cargo storage yards, in particular to a meteorological big data monitoring and joint operation method and system for a port electronic greenhouse, and the method comprises the following steps: collecting multi-source data in an open port storage yard electronic greenhouse, constructing a multi-source data resource pool, and storing the multi-source data resource pool in a database; constructing a dynamic dust diffusion prediction model, and predicting dust concentration distribution in combination with the correction factor; setting a multi-equipment cooperative control rule, calculating a risk score, and controlling dust falling equipment in combination with current and predicted dust concentration distribution to realize dust falling; and monitoring the dust falling effect in real time so as to adjust the control parameters of the dust falling equipment, and regularly performing incremental training on the dynamic dust diffusion prediction model. According to multi-source information such as meteorological data, the dust diffusion trend can be pre-judged in advance, cooperative control over dust falling equipment can be achieved, control parameters can be adjusted according to the dust falling effect, control unbalance can be relieved, and the requirement for intelligent dust control of a port is met.

Power electronic equipment comprises a power box body internally provided with a heating device, a heat dissipation box body fixed to one side of the power box body, and a two-phase flow heat dissipation device vertically arranged in the heat dissipation box body. The power box body is provided with a first side plate, the upper portion of the first side plate is provided with an inner concave portion, one side of the heat dissipation box body is provided with an opening, the opening side of the heat dissipation box body is attached to the outer side of the first side plate, the two-phase flow radiator comprises an evaporator, a condenser and a connecting cavity connecting the evaporator and the condenser, and the evaporator is attached to the outer surface of the lower portion of the first side plate. The condenser is located above the evaporator and arranged in the inner concave part, an air inlet is formed in the lower portion of the heat dissipation box body, and an air outlet is formed in the upper portion of the heat dissipation box body. The power electronic equipment is high in heat dissipation efficiency, compact in structure and capable of adapting to various installation angles and installation directions in the range from the vertical direction to the horizontal direction, and the application flexibility and scene adaptability of the power electronic equipment are improved.

The application discloses a multi-path multi-control safe medicine administration device. The device comprises a flow channel valve, the flow channel valve comprises a multi-path multi-functional control valve, the multi-path multi-functional control valve comprises a valve seat, a valve core, a valve sleeve body connected to the valve seat, and corresponding flow control devices, the valve core comprises a valve body sealing part and corresponding channel on-off parts, the flow control devices comprise valve flow devices and control devices, the valve flow devices comprise a flow guide chamber arranged on a corresponding side wall of the valve seat and a channel hole connected to corresponding channels of the multi-path multi-functional control valve and the flow guide chamber, the corresponding channel on-off parts of the valve core are arranged between the flow guide chamber and the channel hole, and the control devices comprise a touch body corresponding to the valve core and arranged at an open port of the valve sleeve body. The multi-path multi-control safe medicine administration device has simple and reasonable structure, stable and reliable operation, and is safer and cleaner.

Embodiments of the present application relate to the technical field of cloud computing, in particular to a port opening method and device, equipment and storage medium, aiming to improve the port opening efficiency. The method comprises: a service software receives a global configuration file, wherein the global configuration file includes a network address corresponding to the service software and a port blacklist, all ports in the network address are open ports; the service software sends a forwarding rule corresponding to the global configuration file to a kernel; the service software receives domain name port information corresponding to an added port; the kernel verifies an access request for the added port according to the forwarding rule; the kernel sends the access request to the service software if the verification is passed; and the service software returns a corresponding response message if the access request meets the domain name port information.

The present application provides a detection method for SpringBoot Actuator vulnerabilities, comprising: inputting a target IP address list to a scanning module, and detecting the network reachability of each IP address in the IP address list; if any IP address is reachable in a network, detecting all ports of the IP address, and recording open port numbers; performing service classification by identifying services running on open ports; if a service is classified to as a SpringBoot Web-type service, determining whether an Actuator path of the service is accessible; if the access is successful, using a crawler module to crawl a Web page under the Actuator path; if the crawled content contains a Heapdump binary file, downloading the Heapdump file to a local computer; parsing the downloaded Heapdump file by means of a parsing module to extract sensitive information from the file; and a detection report module generating a SpringBoot Actuator vulnerability detection report on the basis of the extracted sensitive information.

Disclosed herein is a method of calibrating a spectral sensing device. The spectral sensing device includes:a. at least one detector element;b. at least one wavelength-selective element;c. at least one light source:d. at least one sample interface;e. at least one first optical path; andf. at least one second optical path.The method includes:I. illuminating the detector element via the at least one first optical path;II. illuminating the detector element via the at least one second optical path with no sample applied to the sample interface;III. illuminating the detector element via the at least one second optical path with at least one calibration sample applied to the sample interface; andIV. determining at least one item of calibration information by using the first detector signal, the open port detector signal and the calibration detector signal.Further disclosed herein are a method of determining at least one calibrated optical property of at least one sample, a spectral sensing device and computer programs and computer-readable storage media for performing the methods.

The invention provides a strategy-based K8s NodePort service exposure control method, which comprises the following steps of: grouping nodes in a cluster according to a preset node label strategy, and configuring a port range allowed to be used and a corresponding namespace for each node group; when a NodePort service is created in a specified namespace, determining a node set and a port range which should be exposed by the service based on a binding relationship between the namespace and a node group and the node group selected by a tenant; according to the determined node set and port range, dynamically configuring and opening a NodePort port on the corresponding node to realize policy-based exposure of the service; and monitoring changes of node group configuration, a port range or a namespace binding relationship in real time, and dynamically updating the exposed node and port configuration of the created NodePort service when the changes are detected. According to the method, the attack surface exposed by the service can be effectively reduced, and the port resource utilization rate and the isolation control capability in a multi-tenant environment are enhanced through node grouping and a port range multiplexing mechanism.

The invention provides an information system asset risk assessment method and device and a medium, and relates to the technical field of computers. The method comprises the following steps: acquiring multi-dimensional risk assessment information of information system assets, wherein the multi-dimensional risk assessment information comprises open port information and component protection information; obtaining the risk value of each dimension of the information system asset according to the risk assessment information of each dimension, including obtaining the asset exposure risk value according to the open port information and obtaining the component protection risk value according to the component protection information; and obtaining a comprehensive risk score of the information system assets according to the multi-dimensional risk value, and carrying out risk early warning on the information system assets according to the comprehensive risk score. According to the method, two dimensions of the asset exposure degree and the asset protection condition are introduced into asset risk calculation, risk quantification is realized from a two-way perspective of risk exposure and protection offset, and the reliability of asset risk assessment is improved.

This invention discloses a method and system for industrial control network asset identification and vulnerability remediation, belonging to the field of industrial control security technology. By probing open ports and service clusters of industrial control equipment, graph neural networks are used to obtain correlations. Based on this, reinforcement learning is employed to generate adaptive probing actions and collect multimodal data. A deep learning model is used to fuse and match data to parse device attributes and construct a digital twin profile. Combining the profile with associated vulnerabilities, device roles, and topological locations, a large language model is used to generate security defense and vulnerability remediation solutions. This method optimizes port service detection, service verification, and data collection, constructs profiles, and combines knowledge graphs and large models to generate scenario-based solutions. It solves the problems of inaccurate asset identification and environmentally detached remediation in traditional technologies, thereby improving the network security defense capabilities of industrial control systems.

The invention discloses a server port security configuration method and device and a server, and relates to the technical field of network services. The method comprises the steps that an open port and a rule port are obtained through configuration, the open port is a port which can be actively accessed, the open port comprises a user login identity verification interface, and the rule port is a port which cannot be actively accessed; obtaining a white list of the rule port based on the white list rule configuration of the rule port, wherein the white list rule of the rule port comprises that the request end passing the verification of the user login identity verification interface of the open port is allowed to access the rule port; the device is a computer readable storage medium in which a program is stored, and the steps in the method are implemented when the program is executed by a processor. The server is obtained according to the configuration of the method; and for the request end which does not pass verification, the rule port is hidden, so that the security of the server port is improved.

A method for calibrating a detection device 110 is disclosed, the method comprising the following steps: I. illuminating at least one detector element (112) via at least one first optical path (128) to obtain at least one first detector signal S1, wherein the first optical path (128) is configured such that light emitted from the at least one light source (124) propagates to the detector element (112) without passing through at least one sample interface (126); II. With no sample applied to the sample interface (126), illuminate the detector element (112) via at least the second optical path (130) without any light, thereby generating at least one open-port detector signal S. 2;open wherein the second optical path (130) is configured such that light emitted from the light source (124) passes through the sample interface (126) at least once and propagates to the detector element (112); and III. First detector signal S1, open port detector signal S 2;open , and determining at least one item of operational calibration information using at least one item of factory calibration information, the item of factory information being a signal that indicates an open port detector signal S 2;open and a predetermined relationship between the reference signal of the second optical path (130).

A method (500), apparatus (200), and system for preventing intrusion in a communication network are disclosed. The method (500) may include retrieving at least one host attribute and port number of an associated host for each of a set of open ports within the communication network (202). A destination host attribute in an Intrusion Prevention System (IPS) rule is matched against at least one host attribute of each of the set of open ports in the communication network (202). The IPS rule is adapted based on the matching result. Based on this adaptation, the IPS rule is selectively applied in the communication network (202).

The application belongs to the technical field of acoustic antennas, and particularly relates to a dual-band high-directivity topological acoustic receiving antenna. The left side surface, the upper side surface, the lower side surface and the rear end surface are mutually spliced to form a single-port acoustic waveguide, so that the right side of the single-port acoustic waveguide is an open port, the single-port acoustic waveguide is a parallelogram structure, and a topological phononic crystal and a sound-absorbing sponge are arranged in the single-port acoustic waveguide. Through the structure, high-directivity reception of two different voice frequency band acoustic waves can be realized, and an anti-interference high-security acoustic communication function is realized. Meanwhile, the acoustic receiving antenna has the characteristics of dual working frequency bands, small size, light weight and convenience in carrying, has high-directivity receiving effect on two independent wide frequency band acoustic signals, provides a feasible solution for voice frequency band acoustic signal directivity anti-interference and security transmission, and can be applied to the field of artificial intelligence robots.

This application provides a network access method, apparatus, device, and medium for a zero-trust network architecture. The method includes: a client sending a UDP authentication request carrying authentication information to a controller; the controller verifying the authentication information, sending a first verification result to the client, and opening a TCP port; the client establishing a TCP connection with the controller and sending a first TCP request carrying security policy check information to the controller; the controller generating a credit assessment result based on the security policy check information, sending a controller authorization message to a gateway, and sending a first authorization result to the client; the gateway verifying the client's authorization message based on the controller authorization message, generating a second authorization result, and sending the second authorization result to the client; and the client establishing a communication connection with the gateway and sending an authentication result to the controller. This improves the authentication success rate and security of network access.

The present application relates to the technical field of Internet of Things, and provides a device identification method, device, apparatus and medium, which can start a probe to asynchronously initiate an address resolution protocol broadcast request for a target authorized network segment to generate a list of active devices, can avoid congestion, and thus accurately detects active devices; each device in the list of active devices is subjected to port detection, open ports are subjected to multi-protocol verification according to a port-protocol adaptive matching mechanism, and a media access control address of each device in the list of active devices is subjected to organization unique identifier resolution, solving the problem of missed detection caused by single-protocol broadcast and port changes, and the problem of false positives caused by organization unique identifier resolution alone; and a confidence score of each device is calculated according to fusion features to generate an identification result of each device, so that device identification can be performed step by step and accurately in combination with multiple factors, effectively reducing the false positive rate.

In one aspect, a method of positioning an open end of an open port interface (OPI) relative to a sample surface to be analyzed by mass spectrometry is disclosed. The OPI includes a liquid delivery conduit for delivering a liquid to the open end of the OPI and a liquid exhaust conduit for removing liquid from the open end of the OPI. The method includes establishing a fluid flow along a path extending from the liquid delivery conduit to the open end of the OPI, monitoring fluid pressure at one or more locations along the fluid flow path and adjusting a position of the open end of the OPI relative to the sample surface based on the monitored fluid pressure. The fluid can be a gas or a liquid. Further, the sample surface can be a liquid surface or a solid surface.

The invention provides a cleaning base station, a cleaning system and a cleaning method of the cleaning system.The cleaning base station comprises a base station body and a cleaning assembly, the base station body is provided with a containing space, the containing space is provided with a first area and a second area which communicate with each other, and the first area is provided with an opening; the opening is suitable for the window cleaning robot to be detachably arranged in the first area; the cleaning assembly is movably installed in the second area so that the cleaning assembly can clean a cleaning assembly and / or a driving piece of the window cleaning robot. The cleaning assembly comprises a water spraying piece, the water spraying piece is provided with a plurality of water spraying openings, and the water spraying openings are suitable for spraying water towards the first area. Therefore, the cleaning assembly can clean the cleaning assembly and / or the driving part of the window cleaning robot, and the cleaning efficiency of the cleaning base station can be improved. And meanwhile, the user does not need to manually clean the driving part and the cleaning assembly, the cleaning effect can be guaranteed, and therefore the use experience of the user can be improved.

The utility model relates to the technical field of harmonic detection, in particular to an integrated plug box and a harmonic elimination monitoring system. The side wall of the accommodating frame is fixedly provided with a connecting assembly; the connecting assembly comprises a voltage and current acquisition port, an input port and an output port. The voltage acquisition loop comprises a clamping protection module and a signal conditioning module and is used for monitoring and inputting real-time voltage; the current acquisition loop comprises a signal conditioning module, a current transformer is connected to one end of the signal conditioning module, and real-time current is monitored and recorded; the input end of the digital-to-analog conversion module is connected to the signal conditioning module, and the output end pin of the digital-to-analog conversion module is connected to the CPU. According to the scheme, allogeneic hanging rail type side wall installation and modular design connection are adopted, the size is reduced by 40%, dense installation is supported, and MTBF is larger than 100,000 hours; the precision is higher, the voltage / current measurement precision reaches 0.5%, the phase error is smaller than or equal to 1 degree, the temperature drift is smaller than 1% of a full scale, long-term monitoring and transient fault capture can be both considered, and accurate analysis after the detection process is finished is supported.

The invention relates to the technical field of computer network security, and discloses a vulnerability detection method and device, equipment and a storage medium, and a second target process set providing services externally is determined from a first target process set according to all external monitoring ports of a system. The first target process set comprises a plurality of first target processes in a running state. Analyzing the second target process set, and determining a to-be-checked component and component information of the to-be-checked component; and performing risk analysis according to the component information of the to-be-checked component to determine a risk component. By screening the target process which is in the running state and is open to the external port, the target application which can actually generate risks can be accurately positioned. And risk analysis is carried out on the analyzed component information, so that the possible security risk of the target process during operation can be more accurately judged.

The invention relates to the technical field of network security, and particularly discloses a system for performing operation and maintenance auditing on network isolation assets, which comprises an operation and maintenance terminal, a bastion host, a session proxy server and the network isolation assets, and is characterized in that the operation and maintenance terminal initiates an RDP operation and maintenance request to the network isolation assets through the bastion host, a session agent is built in the network isolation asset; the bastion host serves as an intermediate agent to establish an encrypted long connection session tunnel capable of transmitting RDP data between the operation and maintenance terminal and the session agent through the session agent server, the operation and maintenance terminal operates and maintains network isolation assets through the long connection session tunnel, and meanwhile the bastion host monitors RDP data traffic in the long connection session tunnel. And analyzing and generating an auditing record to realize auditing of the network isolation assets. According to the method, the isolation requirement of a high-security scene is met, the attack risk introduced by an open port is avoided, and the operation and maintenance auditing problem of network isolation assets in the high-security scene is fundamentally solved.