6360 results about "Operational system" patented technology

A federated distributed AI reasoning and action platform utilizing decentralized, partially observable hierarchical computing for neuro-symbolic reasoning. It features a federated Distributed Computational Graph (DCG) system integrating core components like pipeline orchestration, transformers, and marketplaces. The platform enables privacy-preserving dynamic resource allocation, intelligent task scheduling, and variable information sharing across diverse computing environments. By coordinating with an AI-based operating system and analyzing performance metrics, environmental conditions, and resource availability, the system optimizes efficiency across AI workloads and decision-making processes. This results in an adaptive, power-efficient, and scalable AI-enabled data processing system capable of handling complex tasks while maintaining peak performance under various operating conditions.

The invention provides a cross-platform dynamic security baseline and vulnerability closed-loop repair method and system based on federated learning, and the method comprises the steps: constructing a heterogeneous policy mapping rule base of a Windows registry, Linux sysctl and iOS plist by configuring a semantic analysis algorithm, and forming a multi-operating system policy consistency guarantee mechanism by combining a configuration conflict detection model of formalized verification; a dynamic reinforcement decision engine is designed based on a vulnerability influence surface analysis model driven by a knowledge graph and a double-circulation reinforcement learning architecture (outer-layer strategy exploration and inner-layer parameter optimization); a special evaluation system is constructed for key fields such as electric power and finance, a domestic cryptographic algorithm is deeply fused, and an electric power monitoring system PCSR / IIR / SCAR multi-dimensional index and SM2 / SM4 / SM9 full-stack security scheme is developed. According to the intelligent security baseline reinforcement method, the problems of wide cross-platform strategy gap, extensive vulnerability repair decision and insufficient industry adaptability of a traditional scheme are solved, and the intelligent security baseline reinforcement method supporting dynamic confrontation, accurate adaptation and service fusion is provided.

A federated distributed AI reasoning and action platform utilizing decentralized, partially observable hierarchical computing for neuro-symbolic reasoning. It features a federated Distributed Computational Graph (DCG) system integrating core components like pipeline orchestration, transformers, and marketplaces. The platform enables privacy-preserving dynamic resource allocation, intelligent task scheduling, and variable information sharing across diverse computing environments. By coordinating with an AI-based operating system and analyzing performance metrics, environmental conditions, and resource availability, the system optimizes efficiency across AI workloads and decision-making processes. This results in an adaptive, power-efficient, and scalable AI-enabled data processing system capable of handling complex tasks while maintaining peak performance under various operating conditions.

The invention provides an APT (Advanced Persistent Threat) attack detection method based on a large language model, which comprises the following steps of: S1, extracting original system call event data from a kernel audit log of an operating system, and preprocessing the data; s2, constructing a multi-model collaborative detection architecture based on a large language model, and realizing fine-grained classification of network entities according to the preprocessed data through prompt construction, model fine tuning and a confidence scoring mechanism; s3, constructing an adaptive graph search algorithm based on multi-modal feature correlation modeling, driving attack path topology reconstruction, and realizing maximum reduction of a malicious sub-graph topology structure; s4, carrying out combination with MITRE ATTamp; the CK tactical knowledge base constructs a cyclic enhancement analysis framework, a cyclic enhancement technology is adopted to drive a large language model to execute hierarchical association reasoning, a mapping relation from malicious subgraphs to attack tactics and tactical chains is derived step by step, and finally an attack report summary and a targeted defense strategy are generated. According to the invention, APT attack detection with high accuracy and high interpretability is realized.

The invention relates to the technical field of airport intelligent management, in particular to an airport intelligent operating system, which comprises a multi-modal data acquisition layer for acquiring multi-source data such as flights, passengers and luggage in real time through a heterogeneous sensor network; the intelligent analysis layer processes data by using deep learning and a unique algorithm, and generates information such as flight delay prediction and the like; the collaborative scheduling layer realizes cross-domain dynamic optimization of flight-boarding gate-luggage system-ground service based on digital twinning and multi-agent reinforcement learning; the man-machine interaction layer is equipped with AR navigation and voice interaction equipment and provides personalized services; in addition, a block chain evidence storage module is arranged to ensure that key operation records are safe and traceable, and a federal learning framework realizes multi-airport knowledge sharing and privacy protection; through multi-module cooperation, the airport operation efficiency is improved, the safety is enhanced, the passenger service experience is optimized, many problems faced by traditional airport operation are effectively solved, and the system has remarkable innovativeness and practicability.

The invention discloses a high-efficiency computer software system resource scheduling method, system and device and a medium, and the method comprises the steps: deploying a hardware counter in an operating system, and monitoring the CPU utilization rate, memory occupation, disk I / O, network bandwidth, the use condition of data aggregation system resources and the resource demand of each process or thread in real time; based on monitoring data, analyzing a current resource supply and demand state by adopting an advanced algorithm, and predicting a future resource demand trend; according to an analysis result, a resource allocation strategy is dynamically adjusted, it is ensured that a high-priority task obtains needed resources in time, and meanwhile fairness of a low-priority task is considered; data feedback after scheduling execution is collected, a scheduling algorithm is continuously optimized, and the scheduling efficiency is improved; the system, the equipment and the medium are used for realizing the high-efficiency computer software system resource scheduling method. The problems that an existing computer system is low in resource utilization rate, poor in key task stability and high in operation and maintenance cost are solved.

The invention discloses a network traffic threat analysis method based on operating system instruction hierarchy, which relates to the technical field of network security, and comprises the following steps: monitoring operating system instruction data in real time, constructing a dynamic behavior matrix and generating an instruction-level traffic diagram; analyzing the instruction level flow diagram, calculating first digit distribution of instruction data, comparing the first digit distribution with Benford's Law expected distribution, calculating an instruction behavior deviation degree through a statistical method, generating an abnormal score, performing risk classification in combination with a decision tree classification algorithm, and determining an abnormal instruction; and carrying out abnormal instruction classification by using a graph neural network, and identifying known attack behaviors and unknown abnormal behaviors. According to the method, more accurate attack behavior identification capability can be provided, a complete attack chain can be identified, more intelligent threat analysis is realized, false alarms are reduced, and the detection precision is improved, so that the behavior track of an attacker is accurately traced, and stronger safety protection capability is provided.

The invention provides a different types of database visualization table management method and system, and relates to the technical field of computers.The method comprises the steps that a database general operation system comprising a general operation interface and a dialect abstract base class is constructed, and a query performance evaluation system is established based on performance data; and predicting an optimal database connection mode through deep reinforcement learning and generating a multi-stage execution plan. Meanwhile, an anomaly feature knowledge base based on a graph neural network is constructed, and anomaly prediction and preventive processing are carried out based on the anomaly feature knowledge base. A multi-stage execution plan is executed after a database operation request is subjected to grammar adaptation, and a distributed transaction processor dynamically adjusts a transaction isolation level and a concurrency control parameter. And finally, according to the terminal and the data volume, selecting a proper data display mode to carry out visual presentation.

Methods and systems for managing operation of a data pipeline are disclosed. To manage the operation, a system may include one or more data sources, a data manager, and one or more downstream consumers. Interruptions to the operation may impact provision of data processing services by the data pipeline and may cause the data processing services to no longer align with operation quality goals for the data pipeline. To maintain compliance with the operation quality goals, the operation may be monitored over time. Operation data may be obtained for the data pipeline and may be used to determine representations of operation quality of the data pipeline. The representations of operation quality of the data pipeline may be compared to the operation quality goals and actions may be performed to remediate differences between the representations of operation quality of the data pipeline and the operation quality goals.

A data collection system is disclosed to be communicatively coupled to a data platform configured to perform security monitoring of a compute environment. A sub-kernel component of the data collection system may collect sub-kernel data accessible from a sub-kernel space below an operating system of a compute resource in the compute environment. The data collection system may manipulate the collected sub-kernel data to prepare the sub-kernel data to be used by the data platform in performing the security monitoring of the compute environment. The data collection system may then communicate the manipulated sub-kernel data to the data platform. Corresponding methods, systems, and products for compute environment security monitoring using data collected from a sub-kernel space are also disclosed.

The invention relates to an implementation method and device for an EtherCAT master station system based on a non-operating system, and the method comprises the steps: achieving the adaptation of an SOEM protocol stack to a hardware abstraction layer of an EtherCAT master station through the byte order processing based on a bit mask and a staged shift strategy and the EtherCAT frame receiving and transmitting control based on annular buffer area index management; on the basis of non-real-time task priority scheduling processing of a hardware timer, main circulation driven by a single-thread event and overtime monitoring of a blocking communication synchronization mechanism in combination with the timer, adaptation of an SOEM protocol stack to an EtherCAT master station operating system abstraction layer is achieved; through network scanning and communication parameter configuration, a memory management mechanism based on CoE standard mapping and a periodic position mode of a slave station, adaptation of an EtherCAT master station application layer is realized. According to the invention, through optimization and adaptation of the SOEM protocol stack, operation-system-free and microsecond-level communication jitter of the EtherCAT master station system is realized.

The invention discloses a session key capture and security event analysis method, device, equipment and medium, and relates to the technical field of network communication and information security, a data security protection system is established, a probe service is deployed at a security event monitoring end, and an eBPF technology is utilized to capture a TLS session key in a network stack of an operating system according to analysis of a TLS handshake message; and the probe service combines time features, session features and the captured secret key to generate a mapping relation, and the mapping relation is stored into a persistent file. According to the method, the HASH structure is used for storing the secret key file, the mapping relation between the quintuple and the session time point and the mapping relation between the quintuple and the session secret key are increased, searching and symmetric decryption of the mapping relation between the encrypted traffic and the session secret key can be efficiently completed at the decryption server end, the decryption performance is greatly improved, meanwhile, the session generation time and the session secret key are stored in the HASH value, and the decryption efficiency is improved. The method can solve the problem that the old connection is released and the quintuple of the new connection and the old connection is consistent in a high-concurrency scene, and can improve the decryption accuracy.

The invention discloses a mapping prediction method and system based on a hardware resource load and system operation relationship. The method comprises the following steps: collecting hardware index data in real time when an operating system operates; the method comprises the following steps: preprocessing hardware index data, performing association analysis on each index data by adopting an association rule mining algorithm, generating association rules, evaluating the association rules, screening out the association rules meeting conditions, and constructing a multivariable association model; based on a correlation analysis result, a load prediction model is constructed and trained, and the trained model is deployed in the system for load prediction; and dynamically adjusting a system hardware resource allocation strategy according to a prediction result, carrying out task migration and load balancing according to a predicted load condition, and automatically adjusting hardware resources through an automatic script or a scheduling tool. Through real-time monitoring and deep correlation analysis of indexes such as the CPU, the memory, the storage I / O and the network bandwidth, the resource utilization rate and the operation efficiency of the system are improved, and the stability and the reliability of the system are improved.

The invention discloses a solid state disk management system and a data processing method, and relates to the technical field of solid state disk management. Flexible task scheduling and resource management are provided through a lightweight operating system module, and a computing task program defined by a user is supported to be dynamically loaded; edge computing or machine learning operators are efficiently executed in combination with a programmable hardware processing unit and a DMA channel of the computing acceleration engine module, the data preloading module is utilized to predict and preload data to DDR based on LBA access history, access delay is reduced, an NVMe protocol is expanded by means of the task unloading interface module, host task issuing and result returning are achieved, and the data processing efficiency is improved. And hardware-level memory protection is ensured through the security isolation module, so that the data calculation processing capacity of the solid state disk is remarkably improved, localized calculation tasks such as edge calculation and machine learning are supported, mass data transmission is effectively reduced, and bus and network loads are relieved.

The invention provides an operating system updating method based on cloud service, which comprises the following steps: acquiring operating system versions and patch installation conditions of different hosts by scanning system information of cloud hosts, and dividing the hosts into corresponding management groups according to operating system types and version numbers, formulating a unified patch strategy and an update plan for each group; a monitoring agent is deployed on a cloud host, operation indexes and log information of service processes are collected in real time, collected data are summarized to a centralized log analysis platform, logs are analyzed and mined through a batch computing framework, and a service operation behavior model is constructed; for data in a log analysis platform, a machine learning algorithm is used, an anomaly detection model is trained in a supervised learning mode, and the model can automatically discover various abnormal behaviors in the service operation process from massive log data and generate alarm information.

The invention discloses an operating system health assessment method and system based on multi-dimensional index dynamic weighting, and the method comprises the steps: collecting the state of each hardware module, calculating the index, carrying out the weighted summation to obtain the score of the hardware module, adjusting the weight parameter of each hardware module through combining with the real-time load characteristic or business priority, and carrying out the real-time evaluation of the health of each hardware module. Performing weighted summation on the scores of the hardware modules to obtain a hardware health score; software state information in the operating system is collected, scores of all software modules are calculated, the software modules comprise key components, key services and key processes, and the scores of all the software modules are weighted and summed to obtain software health scores; and performing weighted summation on the hardware health score and the software health score to obtain a health score of the operating system so as to determine the health state of the operating system. The invention aims to solve the systematic defect in the existing health monitoring technology system, improve the comprehensive evaluation capability of the health evaluation of the operating system, and dynamically adapt to the change rule of the actual operating environment.

The invention relates to the field of satellite navigation anti-interference and the technical field of computers, and discloses a multi-processor core communication method and device, electronic equipment and a storage medium, and the method comprises the steps that a second processor core writes target information into a shared memory, and obtains a first idle channel number; the second processor obtains a first interrupt signal based on an interrupt trigger register corresponding to the first idle channel number; the first processor core reads target information in a shared memory according to the first interrupt signal; the first processor core processes the target information to obtain a processing result, and writes the processing result into the shared memory to obtain a second idle channel number; the first processor core obtains a second interrupt signal based on an interrupt trigger register corresponding to the second idle channel number; and the second processor core reads the processing result in the shared memory according to the second interrupt signal, and writes the processing result into the cache region. The multi-processor core communication method is suitable for different operating systems and is high in transportability.

The invention discloses a specific detection value identification method and device and a computer program product, and the method comprises the steps: S1, collecting the power data of a to-be-detected node of a power system, and transmitting the power data to an edge calculation layer in real time through a distributed operation system; s2, preprocessing the power data at an edge calculation layer to generate standardized time sequence data; s3, extracting time domain statistical features and frequency domain transformation features of the standardized time series data, and fusing high-dimensional features output by a pre-training deep learning model to construct a multi-dimensional feature vector; s4, performing pattern recognition on the multi-dimensional feature vector based on a pre-trained classification or clustering model, and outputting an anomaly detection result; and S5, feeding back an abnormal detection result to the power equipment control unit in real time through the distributed operating system, and triggering an alarm or executing parameter adjustment. According to the invention, efficient distribution of detection results and multi-node parallel processing can be realized, and the system performance is further optimized.

The invention provides an infrastructure security analysis method and system based on a large model, and the method comprises the following steps: collecting multi-source heterogeneous data of an infrastructure, including physical equipment sensor data, network flow data, operating system logs and external threat intelligence; converting the multi-source data into standardized feature vectors of a unified time axis through a space-time alignment module; and inputting the standardized feature vector into the fine-tuned large language model for semantic understanding, and generating an equipment behavior semantic description and threat intention analysis result. According to the method provided by the invention, a large language model and reinforcement learning collaborative architecture is provided, and the large language model is improved, so that end-to-end mapping from multi-source data to threat semantics is realized, and the attack detection rate is improved.

The invention relates to the technical field of data processing, can be applied to business scenes of financial science and technology, medical health, lease and the like, and discloses a distributed multi-terminal data cooperative processing method, which comprises the following steps: receiving a structured data unit containing business logic generated by an initiating terminal, and transmitting the structured data unit to a business verification server, receiving verification result data returned by the service verification server, and performing security encapsulation processing on the verification result data to generate security encapsulation data; calling a distributed communication service interface of the distributed operating system, and detecting a connectable device set in a network domain where the initiating terminal is located; and establishing a multi-path transmission link based on the transmission capability parameters of the terminal devices in the connectable device set, and distributing the security encapsulation data to the target terminal device group through the multi-path transmission link. According to the invention, efficient distribution and synchronization of data are realized through a multipath transmission link, the dependence on a background system is reduced, the timeliness and consistency of data synchronization are improved, and the maintenance cost of the system is reduced.

Disclosed are various embodiments for automated vulnerability management. In some embodiments, a list of available updates from a device management system is collected. Then, the device management system is queried to obtain device information to determining applicable updates for operating systems, applications, and firmware based on the list of available updates. Next, a common platform enumeration (CPE) is determined for the updates in the list of available updates and the current version of the operating systems, applications, firmware. Next, a reverse lookup is performed in a vulnerability database for vulnerabilities. The vulnerabilities of the current version of the operating systems, applications, firmware are compared with the vulnerabilities of the updates in the list of available updates. Finally, a vulnerability report is generated.

The invention discloses an encrypted file access method and device, equipment and a storage medium, relates to the technical field of data processing, is applied to a creative operation system integrated with a hardware password card, and comprises the following steps: recording an index value corresponding to a target key generated by a target hardware password card, then generating a to-be-encrypted extension attribute based on a to-be-extended file, and sending the to-be-encrypted extension attribute to the target hardware password card; encrypting the to-be-encrypted extension attribute in the target hardware password card by using the index value to obtain an encrypted extension attribute; storing the encrypted extension attribute in the to-be-extended file to obtain a to-be-encrypted file, and encrypting the to-be-encrypted file in the target hardware password card based on the index value to obtain an encrypted file; and judging whether the file access request meets a preset attribute access condition or not by using an access center generated by a preset access mechanism, if so, calling the target hardware password card to decrypt the encrypted extension attribute, and then accessing the encrypted file based on the obtained extension attribute information. Therefore, the security of file access can be improved.

The invention discloses an AI-based database operating system risk prevention and control system and method, belongs to the technical field of deep learning, and aims to solve the technical problem of how to comprehensively identify, prevent and control database operation risks and improve data management efficiency. Comprising a data processing module for performing data preprocessing on historical operation logs; the risk identification module is used for carrying out grammar and semantic analysis on the SQL statements in the processed operation logs, constructing risk characteristics of the SQL statements, carrying out risk prediction through a trained risk identification model and outputting risk levels; the risk response module is used for carrying out risk warning level by level and carrying out classification and priority ranking on the risk warning based on the Bayesian network; and the user analysis module is used for monitoring user behaviors in real time based on the user portrait and an anomaly detection algorithm, forming alarm information based on a detection result and pushing the alarm information.

The invention discloses an AI-based localized environment application offline deployment method and device and a medium. The method comprises the steps that a localized environment is pre-detected based on probe service, a system layer configuration list is generated, heterogeneous features are extracted through a dual-channel deep learning model based on the system layer configuration list, and adaptive priority labels of the heterogeneous features are generated; the method comprises the following steps: analyzing an application program through static analysis and dynamic scanning technologies, constructing a dependency list, and constructing a version compatibility atlas based on metadata of a domestic operating system warehouse; generating a minimum-cost replacement path by using a graph attention network, performing hash check on each dependency packet, and generating an incremental update packet through a differential packaging algorithm; the resource occupation condition of the system is monitored in real time through a reinforcement learning model so as to dynamically optimize a deployment sequence and a resource allocation strategy, a deployment log is analyzed based on a natural language processing model, an error type is recognized, a repair operation is triggered, and application offline deployment is achieved.

The invention discloses a task scheduling method and device, a medium and a product, and relates to the technical field of artificial intelligence. According to the scheme, the task is received, the corresponding task information is determined, the agent modeling is carried out on the multiple existing agents to determine the capability portraits of the agents, various basic information of the to-be-executed task and the task execution capability of the agents in the system are clarified, and therefore the basis of multi-agent cooperation is formed; in consideration of resource competition and coordination problems in agent task allocation, when task scheduling is executed, tasks are sequenced to generate a task sequence, and the tasks are sequentially allocated to corresponding agents according to the task sequence, capability portraits and an operating system scheduling algorithm. The task allocation strategy can be dynamically adjusted according to the characteristics and task importance of the agents, the resource utilization rate is maximized, the task execution performance is optimized, and therefore the efficient and stable task scheduling requirement of the multi-agent system in the complex environment is met.

The invention discloses a server actual hard disk physical slot position and hard disk information mapping method and device, and relates to the technical field of hard disk testing, and the method comprises the steps: marking a unique number through a hard disk recognition tool and a visual recognition case slot position under an operating system, highlighting a hard disk in combination with a lighting mechanism, and carrying out the recognition of the unique number through the slot position association after lighting. According to the method and the device, the actual hard disk SN code is established, the mapping relation between the actual hard disk SN code and the visual physical slot position is established, and the unique mapping between the actual hard disk position and the hard disk information is established through the mapping relation between the SN and the actual physical slot position, so that the problems of low efficiency of a hard disk testing technology, easiness in mistaken formatting, mistaken unloading and mistaken plugging after disk letter disorder, and high reliability are solved. According to the technical scheme, the technical problems that a storage path cannot be found in time, and the accuracy and efficiency of hard disk management are seriously affected are solved, and the technical effects that decoupling of the storage path and physical hardware is ensured, the influence of system restart or hardware change on services is reduced, the fault hard disk can be directly positioned through slot position identification, and the fault recovery time is shortened are achieved.

A system includes one or more “BotMagnet” modules that are exposed to infection by malicious code. The BotMagnets may include one or more virtual machines hosting operating systems in which malicious code may be installed and executed without exposing sensitive data or other parts of a network. In particular, outbound traffic may be transmitted to a Sinkhole module that implements a service requested by the outbound traffic and transmits responses to the malicious code executing within the BotMagnet. Credentials for services implemented by a BotSink may be planted in an active directory (AD) server. The BotSink periodically uses the credentials thereby creating log entries indicating use thereof. When an attacker accesses the services using the credentials, the BotSink engages and monitors an attacker system and may generate an alert. Decoy services may be assigned to a domain and associated with names according to a naming convention of the domain.

A system can receive, via a chatbot interface, a textual input related to an electronic report. The system can generate, using a large language model, an output including a set of keywords, a rephrased version of the textual input, and an intent sentence. The system can filter, using the output from the large language model, an ontology stored in a database to generate a filtered ontology, including one or more ontology elements, intents, and examples. The system can generate, using the large language model and the filtered ontology, a plurality of actions that are compatible with the electronic report. The system can display, via the chatbot interface, the actions. The system can receive, via the chatbot interface, an indication to execute an action. The system can provide, responsive to the indication, instructions to execute the action on the electronic report to modify the electronic report.

Example systems and methods monitor a cloud compute environment. An example method includes: opening, by an agent deployed in a cloud environment, a communication channel between the agent and a kernel of an operating system of a node within the cloud environment; determining, by the agent and via the communication channel, an event associated with a namespace of the operating system; determining, by the agent and based on the event, a status of a container associated with the node; and providing, by the agent to a data platform, a message indicative of the status of the container.

The invention discloses an intelligent fusion and standardization processing system and method for multi-source heterogeneous operation and maintenance data, and belongs to the technical field of operation and maintenance data. The system comprises a data acquisition module, a data preprocessing module, a data fusion module and an information extraction module; the data acquisition module is used for collecting original multi-source heterogeneous operation and maintenance data from different data sources, and the data sources comprise facilities, operating systems, basic components, middleware, databases and / or information systems; the data preprocessing module is used for cleaning, denoising and standardizing the acquired data; the data fusion module is used for selecting a low-level data fusion model, a middle-level data fusion model or a high-level data fusion model according to the fusion scene and fusing the preprocessed data; and the information extraction module is used for carrying out feature extraction on the fused data. According to the method, deep fusion and standardized processing of the multi-source heterogeneous operation and maintenance data are realized, and a unified and high-quality data basis is provided for data analysis and decision making.