29 results about "Packet detection" patented technology

The present application relates to the field of power grid dispatching data security, and more particularly to a power grid dispatching data dynamic perception and protection method based on a commercial secret algorithm. The method captures power grid dispatching network data streams in real time, obtains original service data containing dispatching instructions, measurement data and state information through protocol analysis and deep packet detection; then uses a dynamic data perception engine to identify sensitive data units, and dynamically generates data sensitivity labels according to the business type and the power grid operation state; dynamically matches commercial cryptographic algorithms from the commercial secret algorithm library according to the labels and distributes temporary session keys to generate an encryption strategy; encrypts the sensitive units, adds a security mark containing an algorithm identifier and a key index to the data packet header to form a protected data stream; sends the protected data stream to the target end, updates the session key state and uploads the execution log to the audit center. The present application realizes dynamic, accurate identification and differentiated encryption protection of power grid dispatching sensitive data.

The present invention relates to the technical field of computers. Disclosed are a data processing method and apparatus, a data storage system, and an electronic device. The method comprises: for any storage controller, performing load demand analysis on an initial data packet to be processed of the storage controller; on the basis of the load analysis result corresponding to each storage controller, performing a first adjustment on the initial data packet to be processed, so that each storage controller obtains an intermediate data packet to be processed; detecting a current data processing capability of each storage controller; and on the basis of the current data processing capability of each storage controller, performing a second adjustment on the intermediate data packet to be processed, so that each storage controller obtains a target data packet to be processed. Two load balancing adjustments are performed on the initial data packet to be processed of each storage controller on the basis of the load demand of data to be processed and the processing capability of a processor itself, respectively, so as to ensure that the data processing load of the storage controllers is balanced, thereby laying a foundation for improving the performance of data storage devices.

This invention relates to a packet inspection system, method, apparatus, gateway device, and storage medium, comprising: a public cloud gateway for encapsulating received raw packets through a first-layer tunnel and sending the encapsulated first packet to a firewall load balancing gateway; a firewall load balancing gateway for encapsulating the first packet through a second-layer tunnel and sending the encapsulated second packet to a cloud server gateway; a cloud server gateway for decapsulating the second packet through the first-layer tunnel and sending it to the target cloud virtual machine where the target firewall resides; and a target firewall for decapsulating the second packet through the second-layer tunnel to obtain the raw packet and performing protection detection on the raw packet. Thus, firewall devices can be integrated into the public cloud gateway, and the encapsulated packets can be distributed to the target firewall for protection detection via a load balancing algorithm through the firewall load balancing gateway, improving the security of the cloud computing environment.

This invention discloses a packet loss detection method for unmanned surface vessel (USV) formations based on adaptive fuzzy membership filtering. The method includes: establishing state equations describing the motion of both the leader and follower USVs; linearizing these nonlinear equations to simplify the complex curvilinear motion relationships into linear mathematical expressions, thus obtaining simplified state equations for the entire formation system; introducing an adjustable measurement noise figure based on the simplified formation model, dynamically adjusting the filtering intensity according to the current measurement noise level, thereby more accurately estimating the real-time state of the USVs; and simultaneously detecting packet loss during state updates, combining preset communication quality indicators and real-time calculated noise levels to determine the reliability of received data. This invention achieves good detection results for packet loss in noisy channels and can be widely applied in the field of data detection.

Load balancing operations between network devices to perform DPI operations are provided herein. Network devices of a virtualized network device arrangement may load balance network traffic by employing a network link between the network devices to exchange data packets for DPI operations. Further, the network devices may employ dedicated CPUs to offload DPI operations. In this manner, the current techniques may enable preservation of pre-existing networking routing or deterministic routing to be performed on-the-fly by enabling DPI to be performed without constraining network traffic flows to a specified route.

The application relates to a method and device for detecting and warning fake accounts, electronic equipment and a storage medium. The method comprises the following steps: S1, obtaining feature information related to a user account; S2, generating a whitelist of normal website or application access of a user; S3, DPI (Deep Packet Inspection) is used to extract user behavior logs of domain names in the blacklist and the whitelist, wherein user behaviors meeting the feature information of the user account generate risk behavior records and trusted behavior records; S4, cosine similarity algorithm analysis, the cosine similarity algorithm is used to calculate the cosine value of the included angle of two vectors, and a fake account risk threshold is set for the cosine value; and S5, risk warning, implementing warning according to the information of a risk warning table. According to the method, more targeted and effective detection of fake user account behaviors can be initiated actively in the whole Internet range.

The utility model belongs to cigarette packaging equipment technical field, concretely relates to a small package detection device, including the mounting frame of small package conveying channel both sides, and the detection disc of rotation installation between two mounting frames, one mounting frame is equipped with the drive part, drive part drives detection disc rotation, is used for receiving the small package of small package conveying channel transmission, and will small package shift to detection output channel, the outer surface of detection disc is provided with at least five detection sites, both sides of detection site all are equipped with side air outlet, another mounting frame is provided with the turbulence hole and the air inlet hole, the position of detection disc close air inlet hole corresponds and is provided with the air inlet hole. Its purpose is: to the small package of reaching the detection range of sensor group carries out gas turbulence operation, carries out the defect amplification to the scattered package, is helpful to visual inspection to find the warped edge of transparent paper, and then improves the accuracy of detection, simple structure, high practicality.

The application discloses an APP network flow-based optimization detection method and device and a medium, belongs to the APP network detection technical field, and is used for solving the technical problems that the existing analysis and abnormal detection of App network requests are not comprehensive enough, the artificial efficiency is low, key risk information is easy to be missed, and many limitations exist. The method comprises the following steps: performing version trust identification processing on a user certificate under certificate verification to obtain a new user certificate; capturing HTTPS network packets of an APP application in an Android device through a trust state of the new user certificate in a virtual machine; performing parallel aggregation detection on the HTTPS network packets under multiple attribute items to obtain network packet detection results; performing cooperative detection processing on abnormal related data features in the network packet detection results and threshold rules to obtain network potential performance problem results; and determining an optimization scheme for a problem based on the network potential performance problem results.

This invention relates to a method, system, device, and medium for detecting DSSS data packets. The method includes: receiving a radio frequency signal transmitted by a transmitter and preprocessing it to obtain a baseband discrete received signal sequence; performing differential processing on the baseband discrete received signal sequence to generate a differential periodic signal; generating a local reference sequence matching the differential periodic signal; performing a cross-correlation operation on the differential periodic signal using the local reference sequence, and accumulating the coherent energy of the cross-correlation operation results over multiple periods to obtain a correlation metric; delaying and accumulating the differential periodic signal to obtain an interference metric; introducing a first decision threshold corresponding to the correlation metric and a second decision threshold corresponding to the interference metric, and outputting a decision result indicating that a DSSS data packet has been detected based on a dual-threshold hierarchical mechanism. Compared with existing technologies, this invention can improve the performance of DSSS data packet detection and reduce the false alarm probability in interference environments without traversing the polarity combinations of preamble bits.

This application provides a packet loss detection method and apparatus. The method includes: for each service port, acquiring its inbound and outbound packet rates at the current sampling point, subtracting the rate at which the CPU receives and sends packets via that port at the current sampling point, then summing the inbound and outbound packet rates of all service ports at the current sampling point, and calculating the difference between the two to obtain the overall inbound and outbound packet rate difference of the device at the current sampling point. Finally, combining the overall inbound and outbound packet rate differences of the device at the most recent N sampling points, it is determined whether packet loss has occurred in the device, generating a packet loss detection result. This method, without relying on specific chip register statistics, achieves general-purpose overall device packet loss detection by analyzing changes in the overall device's inbound and outbound packet rates. This detection method is effective, reliable, and highly accurate.

This invention discloses a method for DPI load adaptive scheduling and resource optimization in high-throughput networks, relating to the field of network traffic scheduling technology. The method includes: extracting detection instance load values ​​from the original state dataset and merging the load values ​​of each detection instance into a comprehensive load index; sorting and classifying each deep packet detection instance according to the comprehensive load index to generate an instance load distribution set and a hotspot instance tag set; dividing the scheduling process into a fast time-scaled scheduling loop and a slow time-scaled scheduling loop; matching the load of newly entering service flows through the fast time-scaled scheduling loop based on the instance load distribution set to generate fast resource scheduling parameters; and reallocating the processing tasks of deep packet detection instances through the slow time-scaled scheduling loop based on the hotspot instance tag set to generate slow resource scheduling parameters. This invention improves the orderliness and controllability of resource scheduling parameter updates and provides a stable execution basis for subsequent state assessment and feedback control.

Embodiments of the present disclosure relate to a control plane system (CPS) of a radio access network (RAN) node. The CPS is configured to detect a protocol data unit (PDU) session established between a user equipment (UE) and a data network, and generate a session establishment request based on the detection. The session establishment request includes a first information element (IE) for creating a packet detection rule (PDR) to classify one or more IP packets received from the data network and addressed to the UE as downlink (DL) packets, and a second IE for creating a plurality of forwarding actions corresponding to the PDR to route the DL packets from a user plane system (UPS) to the UE over a data radio bearer. The CPS is further configured to send the session establishment request to the UPS to facilitate the UPS routing the downlink packets to the UE over the DRB.

Load balancing is provided between network devices to perform DPI operations. Network devices in a virtualized network device array can balance network traffic by using a network connection between the devices to exchange data packets for DPI operations. Furthermore, the network devices can use dedicated CPUs to offload DPI operations. In this way, the techniques presented allow existing network routing or deterministic routing to be maintained, enabling DPI to be performed on the fly without restricting network traffic to a specific route.

A network node can be configured with a packet detection rule (PDR). The PDR can allow the network node to identify one or more extended reality (XR) flows. The network node can be configured with a forwarding action rule (FAR). The FAR can include information about how the one or more XR flows should be routed. The network node can invoke a user plane function (UPF). The UPF can be configured using information from the PDR and / or the FAR. The network node can establish a protocol data unit (PDU) session. The network node can identify one or more XR flows indicated in the PDU session based at least on its configured PDR. The network node can forward the one or more XR flows according to the information in the FAR.

The application relates to a high-performance hardware deep packet detection method and device based on a heterogeneous pipeline, which comprises the following steps: clustering and bucketing a rule set to be detected at a software end, generating an XOR retrieval table, an NSSO mask table and a cuckoo hash table configuration; adopting a three-stage pipeline processing architecture at a hardware end: a first stage uses a parallel hash array to extract a data fingerprint, carries out linear-speed preliminary screening through an XOR retriever and outputs a rule bucket activation token; a second stage dynamically activates a matching engine in response to the token, adopts an NSSO algorithm based on a bit slicing architecture, and updates a matching state through a parallel index high-low mask subtable; and a third stage uses a cuckoo hash index to cooperate with a hierarchical storage strategy to quickly check short rules on a chip and accurately verify long rules by reading external memory through a DMA mechanism. The application gradually unloads traffic pressure through multiple levels of logic, effectively solving the problems of storage bottlenecks, port conflicts and power consumption faced by large-scale rule matching in a high-speed network environment.

This invention relates to the field of network communication technology and discloses a converged hardware and software bypass intelligent management and control platform. The platform includes a control unit and a physical bypass module. The control unit runs converged control software, including modules for security device monitoring, software bypass control, physical bypass control, and server processes. The security device monitoring module monitors the status of security tools through methods such as packet detection. In case of failure, the software bypass control module issues commands to adjust traffic paths, and the physical bypass module performs link pass-through when the platform malfunctions. The platform adopts a 1U rack-mount design, supports hot-swappable modules and redundant power supplies, and achieves centralized monitoring and policy configuration across the entire link through a web interface, effectively improving network reliability and operational efficiency. It is suitable for high-availability scenarios such as data centers and industrial networks.

The application belongs to the technical field of tobacco packaging production, and discloses a control method and system for a buffer cigarette packet depletion detection device. When the number of cigarette packets in the buffer area of the cigarette packet packaging line is determined to decrease, the energization state of a relay can be used to make the buffer cigarette packet depletion detection device in a normal operation state by combining the cigarette packet packaging data of the cigarette packet packaging line and the preset transportation data. When the cigarette packet packaging line is determined to be in a normal operation state by combining the cigarette packet detection signals collected by the buffer cigarette packet depletion detection device and the preset transportation data, the energization state of the relay can be used to make the buffer cigarette packet depletion detection device in a shutdown state, so as to effectively avoid the safety hazards caused by manual shielding treatment by combining the automatic control mode of the buffer cigarette packet depletion detection device, and the overall packaging efficiency and the normal operation of the buffer cigarette packet depletion detection device can also be ensured.

Disclosed are computerized systems and methods for a decision intelligence (DI)-based framework that automatically and / or dynamically provides mechanisms for managing, optimizing and configuring a WiFi network at a location. The framework provides network management utilizing edge processing capabilities to bridge local WiFi and cloud systems. The framework implements comprehensive device typing through multi-layered analysis combining passive monitoring, deep packet inspection and hybrid deterministic-probabilistic classification methods. State synchronization between local and cloud networks can be achieved through hierarchical data modeling and differential synchronization algorithms. The framework can implement advanced features that include automated channel optimization, QoS management, and security monitoring. The framework incorporates self-healing capabilities using reinforcement learning techniques and maintains operational efficiency through intelligent resource management and workload distribution. The framework can operate autonomously while requiring minimal cloud connectivity, featuring extensible architecture through a plugin system that enables adaptation to evolving network requirements while maintaining stable operation of existing capabilities.

Various aspects of this disclosure relate to a network node for wireless communication, comprising: at least one memory; and at least one processor coupled to the at least one memory and configured such that the network node: receives a packet detection rule (PDR), the PDR including an indication to establish an encapsulation protocol with a server address when the network node detects a packet being sent toward a server address, and configuration information to enable PDU set verification and extract PDU set information contained within the encapsulation protocol when the network node receives a packet from the server address. The processor is further configured to receive a first uplink packet, verify the first uplink packet, and identify the first uplink packet as matching the PDR.

The application discloses a multi-stage scheduling method for intelligent buildings based on a building dispatching center, and relates to the technical field of computers.The method comprises the following steps: constructing a device perception layer, using a master-slave RS485 bus cascade architecture to realize global perception of building devices; constructing a communication transmission layer, using a double heartbeat packet detection mechanism to support dual-mode redundant access of Ethernet and wireless communication; deploying an intelligent control layer, taking an IDDC network type global controller as a core scheduling unit, and configuring an AI processing unit to support self-learning of control strategies; constructing a unified scheduling layer to support unified access of multiple mainstream protocols; performing scheduling control to support fine time control in multiple time periods, and realizing strategy optimization by using an AI algorithm; and realizing remote interaction, with a centralized control center monitoring running states and receiving alarm information in real time.The application has the effects of large capacity expansion, high reliable communication, fine intelligent control and energy saving, and realizes coordinated scheduling and centralized management and control of building subsystems.

The application belongs to the technical field of information security, and provides a software development information security management method based on distributed backup, which comprises the following steps: obtaining online duration of nodes participating in distributed backup, process participation degree data, and analyzing and processing to identify active nodes in software development information; based on sensitive data types of software development scenes, a sensitive data feature library is constructed, a deep packet detection technology is used to match the sensitive data feature library, and sensitive data of active nodes are identified; transmission flow of sensitive data in active nodes is obtained, quantitative deviation analysis is performed on sensitive data transmission flow of active nodes, and transmission exposure risk of active nodes is evaluated; and the application provides multi-level and full-cycle reliable support for sensitive data security of distributed backup software development scenes.

This application provides an application template package detection method and server, relating to the field of terminal technology. This application can improve the reliability of the output detection report by combining static and dynamic detection results. The method includes: a server receiving an application template package sent by an electronic device; the server obtaining a static detection report of the application template package, which includes a first problem existing in the application template package during static detection; and the server generating an application package based on the application template package, running the application package, and generating a dynamic detection report of the application template package, which includes a second problem existing in the application package during dynamic operation. Subsequently, the server generates a target detection report of the application template package based on the static and dynamic detection reports.

This disclosure provides a packet detection method, an electronic device, a system, and a computer-readable storage medium, and relates to the field of communication security technologies. In an embodiment, detection marking information that indicates a risk in a service packet is set in the service packet. In a process of forwarding the service packet on a forwarding path, a security device forwards the service packet that carries the detection marking information, or before forwarding the service packet, the security device updates a value of a field in the service packet based on a detection result after performing security detection on the service packet. The network device sends flow security status information to a network management analysis device based on the detection marking information carried in the service packet, to assist a control plane in identifying a service flow forwarding path on which a risk exists.

This application provides a data packet detection method, apparatus, device, storage medium, and program. The method includes: acquiring multiple network data packets in network hardware and storing them in a virtual address space; the graphics processor includes multiple computing units; acquiring the load status of each computing unit; based on the load status of each computing unit, performing parallel processing on the multiple network data packets through the multiple computing units to obtain the target processing result corresponding to each network data packet; for any given network data packet, if the target processing result corresponding to the network data packet is abnormal, generating detection alarm information for the target processing result of the network data packet, the detection alarm information being used to indicate a security event notification. The method of this application can improve the processing efficiency of data packet detection.

The application discloses a message processing method and device, a nonvolatile storage medium and an electronic device. The method comprises the following steps: obtaining a to-be-processed message, wherein the to-be-processed message carries target message flow tuple information; calling a preset access control table to analyze the to-be-processed message, determining a preset group matched with the target message flow tuple information as a target group; in the case that the target group exists in the preset access control table, determining a preset instruction corresponding to the target group in a preset instruction set as a target instruction, wherein the preset instruction is used for recording the corresponding relationship between at least one preset table index and at least one preset rule index; calling the target instruction to obtain at least one target rule from a preset rule management pool, wherein the target rule is associated with a preset rule identifier in the target group; and processing the to-be-processed message based on the at least one target rule. The application solves the technical problem of low matching efficiency of the existing packet detection rule (PDR).

The application discloses a kind of based on deep learning's full six surface detection of cigarette packet method, belong to cigarette packet detection technical field, including the following steps: one, constructs cigarette packet detection model;Two, based on cigarette packet detection model detects cigarette packet;The application can make extraction area concentrate in the top corner area of stress concentration, accurately identify micro-crack, micro-wrinkle and micro-distortion, can be associated with top corner local feature and cigarette packet overall global stress feature, accurately capture the global linkage misplacement feature caused by top corner stress, realize local defect to global state mapping, compared with prior art, can improve detection precision.

The ephemeral port of a probe UDP packet is populated with a first value that is a function of the destination address and destination port of a target as well as a random seed. The first value may also be a function of the local address of the server generating the probe UDP packet. The destination port of a response UDP packet is compared to a second value that is a function of the source address, source port, and the random seed, and possibly the destination address. If the destination port matches the second value, the response packet is determined not to be spoofed. Probe packets may be generated by multiple probes and labeled with a local address and index assigned to the probe to enable response packets to be mapped back to a probe.

Methods and apparatuses for enabling reuse, by a node in a basic service set (BSS), of a channel medium that is in use by devices of an overlapping BSS (OBSS) in a wireless local area network. A method of wireless communication performed by a first node includes the steps of obtaining, based on transmissions from other nodes in at least one of a BSS or an OBSS, network context information for a network environment around the first node, updating an OBSS packet detection (PD) threshold for spatial reuse (SR) based on the network context information, and performing, for a transmission to one of the other nodes in the BSS, an SR clear channel assessment (CCA) using the updated OBSS PD threshold for detection of packets transmitted by the nodes in the OBSS.

In one embodiment, a receiver includes: an analog front end (AFE) circuit to receive and process an incoming radio frequency (RF) analog signal comprising a packet; an analog-to-digital converter (ADC) coupled to the AFE circuit to receive and digitize an analog signal based on the RF analog signal into a digital signal; a packet detector coupled to the ADC to detect the packet based on the digital signal; and a computation circuit coupled to the packet detector. The computation circuit may be configured to determine a received signal strength indicator (RSSI) value based at least in part on a portion of a preamble of the packet.