18 results about "Password cracking" patented technology

The invention discloses a multistage password protection and operation tracing system of an intelligent electric actuating mechanism. The multistage password protection and operation tracing system comprises a multistage authority management module, a password security module, an operation recording module and an authority auditing module, the multi-level permission management module is provided with three levels of permissions and manages distribution, change and switching of the permissions; the password security module manages new establishment, modification, retrieval, storage, error locking and regular replacement of passwords; the operation recording module records all permission-related and equipment control operations; and the permission auditing module retrieves the operation record, generates an auditing report and identifies an abnormal operation behavior. According to the invention, through three-level authority level-to-level management, the operation range is finely divided, and low-authority users are prevented from executing high-risk operations; password cracking and violent attack are resisted through a high-level password security mechanism; through full-operation record coverage and tamper-proof design, operation traceability is realized, and responsibility ownership is clear; and an abnormal behavior analysis and audit report function is realized, and safety risks are actively identified.

The application provides a mimic system account password dynamic management method, which comprises the following steps: in an initial state, the same user account has different passwords on different mimic components and executors; a password cracking detector is arranged on the executor or mimic component of the mimic system to detect whether the executor or mimic component is subjected to a password cracking attack in real time; when it is detected that the executor or mimic component is subjected to a password cracking attack, the current user account is locked, the executor or mimic component is informed to enable a traffic filtering rule to block the network attack cracking, and a password regeneration request message is sent to a password manager to change the password of the current user account; wherein the password cracking attack detection step comprises the following steps: detecting whether the number of login requests in a certain time range exceeds a preset threshold value, and if yes, and the return result of each login request is failure, it is considered that a password cracking attack occurs.

The invention discloses an equipment password management method, system, equipment, medium and product, and relates to the technical field of Internet of Things, intelligent equipment generates an aging key combination based on a basic key and current time on the premise of no synchronization, and any password in the aging key combination can manage the intelligent equipment; and the management platform issues the determined platform aging key to the user according to the basic key of the intelligent device and the management demand of the user for the intelligent device, so that the user can manage the intelligent device. By adopting the embodiment of the invention, brute force password cracking and illegal entering behaviors can be effectively prevented, the communication frequency between the intelligent equipment and the management platform is reduced, and the endurance time of the intelligent equipment is effectively prolonged; and management control of the intelligent equipment in a network-free environment can be realized, and normal management of a user can be ensured even if the communication module is damaged.

The application discloses a password cracking method and device and electronic equipment, and the method comprises the following steps: applying for a memory space for a first hash value to be cracked and determining the number of bitmap spaces according to the byte number of the first hash value; splitting the first hash value based on the byte number to obtain a first digest set, and obtaining the index number of the bitmap corresponding to each digest in the first digest set and the value corresponding to each digest based on a preset rule and a bitmap mask; establishing a mapping relationship between the digest and the corresponding bitmap based on the index number and the value, and generating a bitmap mapping table of the first hash value based on the mapping relationship; judging whether a second hash value corresponding to a password to be verified exists in the bitmap mapping table based on a second index number and a second value of the second hash value; and determining whether the password to be verified is the accurate password of the first hash value based on the judgment result. Thus, the problem of low cracking efficiency for a large number of hashes is solved.

The application discloses a strong password generation method and device based on user personal information, electronic equipment and storage medium. The method comprises the following steps: in an offline state, obtaining a target website name and personal information of a password to be generated input by a user; based on the personal information, obtaining a pinyin full name or an English full name of the personal information; randomly selecting a preset first number of letters in the pinyin full name or the English full name, and performing random uppercase and lowercase conversion or special character replacement to obtain a first string; adding a preset second number of random digital characters before the first character or after the last character of the first string to generate a second string; and taking the second string as a generated strong password. The application adopts an offline mode to generate and store the strong password, effectively reduces the risk of man-in-the-middle attack and data leakage, and ensures that each generated password has high entropy and complexity by randomizing the personal information of the user, thereby effectively resisting various password cracking attacks.

The invention discloses a law enforcement scene-oriented evidence collection data real-time acquisition method and system, and relates to the technical field of data processing. The method comprises the following steps: generating a first candidate password array based on user behavior characteristic data and encrypted data attribute information of to-be-decrypted iOS equipment; carrying out cracking verification on the encrypted data by adopting the first candidate password array by utilizing computing equipment provided with a GPU (Graphics Processing Unit), outputting a first verification result, and if the first verification result passes, determining that the cracking succeeds; if the first verification result does not pass, performing conjoint analysis based on the user behavior characteristic data, the encrypted data attribute information and a first candidate password array to generate a second candidate password array; and iteratively executing the cracking verification and array updating step by using the second candidate password array until the cracking is successful. According to the method, invalid paths can be accurately eliminated, correct passwords can be quickly converged, and the password cracking efficiency is remarkably improved.

One example method includes automatically determining, at a keyboard sound mitigation model implemented on a first computing system, if the first computing system is actively running a video communication service during a video communication session with a second computing system; in response to determining that the first computing system is actively running the video communication service during the video communication session with a second computing system, automatically determining, by the keyboard sound mitigation model, if a user of the first computing system is entering a password or sensitive information into a webpage or window that is active on the first computing system; and in response to determining that the user of the first computing system is entering the password or the sensitive information, performing, by the keyboard sound mitigation model, a keyboard sound mitigation operation that masks or removes any keyboard sounds made while entering the password or sensitive information.

The embodiment of the invention provides a decryption method, a variable storage method, a related device, equipment, a medium and a product. According to the decryption method, a current signal of the chip is monitored through the current probe, an electromagnetic signal of the SRAM is monitored through the electromagnetic probe, and each key bit value corresponding to a coordinate value stored in the SRAM is determined based on a signal change mode of the current signal and the electromagnetic signal, so that a decryption result is obtained. Through a current-electromagnetic dual-channel acquisition and analysis scheme, the capability of obtaining effective information in the decryption process is improved, the redundant information processing process is reduced, and the password decoding efficiency is improved. The variable storage method comprises the following steps: dispersing and storing coordinate values of at least two coordinate dimensions of at least one password intermediate variable in at least two SRAMs (Static Random Access Memory); or the coordinate values of the at least one coordinate dimension of the at least two password intermediate variables are jointly stored in the same SRAM, so that local electromagnetic radiation analysis can be avoided, and the storage process does not affect the execution efficiency of the encryption algorithm.

The method, apparatus, electronic device, and storage medium for detecting credential stuffing attacks provided in this application include: real-time acquisition of multiple related information of a login webpage and user login behavior data; identification of conflicting information from the multiple related information and counting the total number of conflicts within a preset time period; determination of whether the conflicting information is abnormal based on the total number of conflicts; and, if the conflicting information is determined to be abnormal, detection of whether the login webpage is a credential stuffing attack based on the user login behavior data. The above technical solution can automatically detect credential stuffing attacks using multiple related information of a login webpage and user login behavior data. This detection process does not require manual intervention, effectively alleviating the inefficiency and error-prone nature of existing manual credential stuffing attack detection methods, ensuring user account security, and thus avoiding incalculable losses to users.

The application provides an implementation method of high-efficiency weak password cracking with zero false alarm rate, aiming at realizing a weak password cracking method with high performance and zero false alarm rate through high-concurrency programming and error rescan. The method uniformly distributes weak password cracking tasks to multiple coroutines by setting a producer queue and a consumer coroutine, realizes high-concurrency running of the weak password cracking tasks, and then rescans the tasks that fail to scan due to non-password authentication errors of the weak password, thereby realizing zero false alarm rate scanning. The application provides an effective implementation method of high-efficiency weak password cracking with zero false alarm rate, improves the efficiency of weak password cracking, and realizes zero false alarm rate scanning.

The application provides a remote login brute force behavior monitoring method and device, electronic equipment and a storage medium, and relates to the technical field of security protection, and the method comprises the following steps: obtaining target information corresponding to remote login through an ETW mechanism of an operating system deployed on the electronic equipment, wherein the target information comprises at least two of the following: login behavior information, RDP connection information and network connection behavior information; and monitoring whether remote login brute force behavior exists based on at least two target information in the login behavior information, the RDP connection information and the network connection behavior information. The application can obtain at least two target information in the login behavior information, the RDP connection information and the network connection behavior information based on the ETW mechanism, and jointly monitor whether remote login brute force behavior exists, thereby improving the accuracy of remote login brute force behavior monitoring.

Embodiments of the present disclosure provide a decryption method, a variable storage method, and related devices, equipment, media and products. The decryption method monitors the current signal of the chip through the current probe, monitors the electromagnetic signal of the SRAM through the electromagnetic probe, determines the key bit value corresponding to the coordinate value stored in the SRAM based on the signal change mode of the current signal and the electromagnetic signal, and then obtains the decryption result. Through the current-electromagnetic dual-channel acquisition and analysis scheme, the ability to obtain effective information in the decryption process is improved, the redundant information processing process is reduced, and the password cracking efficiency is improved. The variable storage method stores the coordinate values of at least two coordinate dimensions of at least one password intermediate variable in at least two SRAMs, or stores the coordinate values of at least one coordinate dimension of at least two password intermediate variables in the same SRAM, which can avoid local electromagnetic radiation analysis and the storage process does not affect the execution efficiency of the encryption algorithm.

A safe case with a combined lock belongs to the field of safe cases and is characterized in that a lock bottom plate is arranged in a cabinet door, a manual coded lock, a delay auxiliary switch, a key logic lock, a key coded lock and a main switch are mounted on the lock bottom plate, lock heads or handles are respectively arranged on the door surface of the cabinet door, trap lock bodies are arranged in the key logic lock and the key coded lock, and the main switch is arranged on the lock bottom plate. A password adding device is arranged, the manual coded lock and the time delay auxiliary switch are interlocked, the main switch is limited by the time delay auxiliary switch, the key logic lock and the key coded lock, a second handle of the main switch can be rotated only by unlocking the time delay auxiliary switch, the key logic lock and the key coded lock, and the safe case is provided with an anti-violence lock; the password cracking and unlocking difficulty is increased, and the linkage mechanism can prevent abnormal unlocking; the box body can prevent cutting and illegal opening.

A method for protecting an electronic device is disclosed. According to the method and the device, the time window is set, password verification is carried out only when the timing duration of the electronic equipment from entering the to-be-verified state is within the set time window, and access of the external equipment is allowed only when password verification is successful, so that the password cracking difficulty of an attacker is increased, and the security of the attacker is improved. And the access security of the electronic equipment is improved.

The application discloses a kind of enterprise network weak password evaluation methods based on logic attack graph and password evaluation, first, the network topology structure of enterprise intranet, security policy and system configuration are collected, in combination with the reasoning rule mapped of ATT&CK knowledge base, logic reasoning is carried out using MulVAL tool to obtain logic attack graph;Then the system account password information of each host is obtained, the password entropy is calculated and the password cracking time is simulated to obtain the password risk value;Afterwards, the password risk value is associated with the logic attack graph, a new weighted attack graph containing the password risk value is generated;Attack starting point and attack target point in the weighted attack graph are identified simultaneously;Then, all attack paths in the weighted attack graph are traversed using the depth-first search algorithm, and the weak password risk value on each attack path is calculated;Finally, the attack path with the highest weak password risk value is taken as the best attack path, and a visual process is generated to improve the network security defense level of enterprises.

The application belongs to the technical field of security verification, and particularly relates to a password verification method and system based on user login. The method comprises the following steps: an encryption factor is generated by combining a device identification code with a system key, when a user logs in, the login password is encrypted by using the encryption factor, so as to bind the encryption factor with the device identification code, so that the validity of the password depends on the password itself and the user device end at the same time; and the encryption type is determined by acquiring user device end information and input environment information to select a corresponding encryption mode; the time behavior mode of the user is introduced into the authentication link to construct a dynamic security defense line based on user habits. The application binds the encryption factor with the device identification code, so that the validity of the password depends on the password itself and the user device end at the same time, prevents collision library attacks, and improves the security of the account; a single fixed encryption mode is avoided, the complexity of password cracking is increased, and the anti-attack ability of password verification is enhanced.

The application discloses an iOS backup password cracking and data recovery system, which comprises the following steps: extracting metadata benchmark information of a backup file package; performing multi-layer progressive verification on the backup file package based on the metadata benchmark information; obtaining and storing, by an online feature database, valid backup pass rates and abnormal backup interception rates of labeled samples corresponding to different backup features under different dynamic threshold sets, and cracking results and efficiency coefficients of the labeled samples corresponding to different backup features under different cracking algorithms; outputting dynamic threshold sets in a multi-layer progressive verification process based on the online feature database; constructing a cracking algorithm matching model based on the online feature database, and outputting a cracking algorithm of the backup file package when the multi-layer progressive verification of the backup file package is passed; cracking and file recovery are performed on the backup file package based on the cracking algorithm, and online feedback is performed on cracking results and file recovery results, so that the target of maximizing data recovery value under controllable risk is achieved.

The invention provides a password cracking method, a quantum mixing system, a storage medium and electronic equipment, and the method comprises the steps: generating target data corresponding to a key value based on the key value of a key bit of a preset key; obtaining intermediate value data generated by key encryption; performing distributed splitting on the intermediate value data serving as a search problem to obtain a plurality of sub-problems, splitting the target data based on each sub-problem to obtain a first quantum state, and performing quantum coding on each sub-problem to obtain a second quantum state and coding information; based on whether the second quantum state corresponding to each sub-problem is matched with the first quantum state, obtaining a search result of each sub-problem; the global search result is obtained based on the coding information and the search result of each sub-problem, and the key value of the key bit is obtained according to the global search result, the probability of error results is reduced through the search results of the sub-problems and the global search result, the private key corresponding to the key is obtained, and quantum hardware resource consumption of a quantum search algorithm is reduced.