32 results about "Password cracking" patented technology

The invention relates to the technical field of information security, in particular to a rainbow table decryption and scheduling method based on multilayer encryption protection. Through hierarchical storage of the multi-level rainbow table and the storage module and in combination with an accurate task target identification and matching mechanism, the decryption process is effectively accelerated. The optimal rainbow table subclass is identified according to the encryption hash value, the length, the encryption algorithm and other information of the password, the decryption algorithm of the target password can be quickly matched, and the password cracking speed is greatly increased; according to the method, a task scheduling distribution mechanism based on the matching degree is adopted, and computing resources can be reasonably distributed according to the priority of decryption tasks. The basic decryption unit is preferentially used by the low-priority task, and the special hardware acceleration module is used by the high-priority task, so that the utilization rate of resources is effectively improved, and meanwhile, the high-priority task is ensured to be processed in time.

The invention discloses a multistage password protection and operation tracing system of an intelligent electric actuating mechanism. The multistage password protection and operation tracing system comprises a multistage authority management module, a password security module, an operation recording module and an authority auditing module, the multi-level permission management module is provided with three levels of permissions and manages distribution, change and switching of the permissions; the password security module manages new establishment, modification, retrieval, storage, error locking and regular replacement of passwords; the operation recording module records all permission-related and equipment control operations; and the permission auditing module retrieves the operation record, generates an auditing report and identifies an abnormal operation behavior. According to the invention, through three-level authority level-to-level management, the operation range is finely divided, and low-authority users are prevented from executing high-risk operations; password cracking and violent attack are resisted through a high-level password security mechanism; through full-operation record coverage and tamper-proof design, operation traceability is realized, and responsibility ownership is clear; and an abnormal behavior analysis and audit report function is realized, and safety risks are actively identified.

The embodiment of the invention provides a weak password cracking method and device, electronic equipment and a readable storage medium, and the method comprises the steps: dynamically positioning a target login component in a target interface through combining image recognition, character recognition, source code analysis and cross-modal verification technologies; automatically capturing a target login request based on a target character string corresponding to the preset account information; for any target password in the weak password dictionary, automatically replacing a user name field in the target login request based on the to-be-tested user name, and automatically replacing a password field in the target login request based on the target password; and when a login success response corresponding to the target login request after field replacement is detected, determining that an original user password corresponding to the to-be-tested user name is a weak password. Through automatic integration of login box dynamic positioning, login request real-time capture, field intelligent replacement and response result verification, dependence on technical experience of testers is reduced, and test efficiency and test accuracy are improved to a certain extent.

The invention discloses an iOS backup password cracking and data recovery system. The method comprises the following steps: extracting metadata reference information of a backup file package; performing multi-layer progressive verification on the backup file package based on the metadata reference information; the online feature database obtains and stores effective backup passing rates and abnormal backup interception rates corresponding to the annotation samples with different backup characteristics under different dynamic threshold set conditions and cracking results and efficiency coefficients corresponding to the annotation samples with different backup characteristics under different cracking algorithm conditions; outputting a dynamic threshold set in the multi-layer progressive verification process based on the online feature database; building a cracking algorithm matching model based on the online feature database, and outputting a cracking algorithm of the backup file package when the multi-layer progressive verification of the backup file package is passed; and cracking and file recovery are performed on the backup file package based on a cracking algorithm, and online feedback is performed on a cracking result and a file recovery result, so that the target of maximizing a data recovery value under a controllable risk is achieved.

The application provides a mimic system account password dynamic management method, which comprises the following steps: in an initial state, the same user account has different passwords on different mimic components and executors; a password cracking detector is arranged on the executor or mimic component of the mimic system to detect whether the executor or mimic component is subjected to a password cracking attack in real time; when it is detected that the executor or mimic component is subjected to a password cracking attack, the current user account is locked, the executor or mimic component is informed to enable a traffic filtering rule to block the network attack cracking, and a password regeneration request message is sent to a password manager to change the password of the current user account; wherein the password cracking attack detection step comprises the following steps: detecting whether the number of login requests in a certain time range exceeds a preset threshold value, and if yes, and the return result of each login request is failure, it is considered that a password cracking attack occurs.

The invention discloses an equipment password management method, system, equipment, medium and product, and relates to the technical field of Internet of Things, intelligent equipment generates an aging key combination based on a basic key and current time on the premise of no synchronization, and any password in the aging key combination can manage the intelligent equipment; and the management platform issues the determined platform aging key to the user according to the basic key of the intelligent device and the management demand of the user for the intelligent device, so that the user can manage the intelligent device. By adopting the embodiment of the invention, brute force password cracking and illegal entering behaviors can be effectively prevented, the communication frequency between the intelligent equipment and the management platform is reduced, and the endurance time of the intelligent equipment is effectively prolonged; and management control of the intelligent equipment in a network-free environment can be realized, and normal management of a user can be ensured even if the communication module is damaged.

The invention discloses a hybrid password cracking method combining a neural network model and Hashcat, and the method comprises the steps: training a general neural network model in advance based on a password data set, carrying out the fine tuning of the general model through a short password and a long password, and constructing two exclusive models suitable for the short password and the long password; generating long password data and short password data by using an exclusive model, taking the long password data as a dictionary of dictionary attack, and mapping the short password data into masks according to a mask rule of Hashcat to generate a mask list; and aiming at a to-be-cracked target password hash value, cracking the target password hash value by combining a Hashcat mask attack mode with the mask list, cracking the target password hash value by combining a Hashcat dictionary attack mode with the dictionary, and returning a successfully cracked password. The invention aims to combine the neural network model and the Hashcat to realize password cracking so as to improve the cracking success rate and optimize the utilization of computing resources.

The invention discloses a strong password generation method and device based on user personal information, electronic equipment and a storage medium. The method comprises the following steps: in an offline state, acquiring a target website name and personal information of a to-be-generated password input by a user; based on the personal information, obtaining a pinyin full name or an English full name of the personal information; randomly selecting a preset first number of letters from the pinyin full name or the English full name, and carrying out random capital and small case conversion or special character replacement to obtain a first character string; adding a preset second number of random numeric characters before the first character or after the last character of the first character string to generate a second character string; and taking the second character string as the generated strong password. According to the scheme, the strong password is generated and stored in an off-line mode, man-in-the-middle attack and data leakage risks are effectively reduced, personal information of a user is processed randomly, it is ensured that each generated password has a high entropy value and complexity, and various password cracking attacks are effectively resisted.

The application discloses a password cracking method and device and electronic equipment, and the method comprises the following steps: applying for a memory space for a first hash value to be cracked and determining the number of bitmap spaces according to the byte number of the first hash value; splitting the first hash value based on the byte number to obtain a first digest set, and obtaining the index number of the bitmap corresponding to each digest in the first digest set and the value corresponding to each digest based on a preset rule and a bitmap mask; establishing a mapping relationship between the digest and the corresponding bitmap based on the index number and the value, and generating a bitmap mapping table of the first hash value based on the mapping relationship; judging whether a second hash value corresponding to a password to be verified exists in the bitmap mapping table based on a second index number and a second value of the second hash value; and determining whether the password to be verified is the accurate password of the first hash value based on the judgment result. Thus, the problem of low cracking efficiency for a large number of hashes is solved.

The application discloses a strong password generation method and device based on user personal information, electronic equipment and storage medium. The method comprises the following steps: in an offline state, obtaining a target website name and personal information of a password to be generated input by a user; based on the personal information, obtaining a pinyin full name or an English full name of the personal information; randomly selecting a preset first number of letters in the pinyin full name or the English full name, and performing random uppercase and lowercase conversion or special character replacement to obtain a first string; adding a preset second number of random digital characters before the first character or after the last character of the first string to generate a second string; and taking the second string as a generated strong password. The application adopts an offline mode to generate and store the strong password, effectively reduces the risk of man-in-the-middle attack and data leakage, and ensures that each generated password has high entropy and complexity by randomizing the personal information of the user, thereby effectively resisting various password cracking attacks.

The embodiment of the invention provides a security protection system, method, device and equipment, a storage medium and a program product, the system comprises a host, a server and a bastion host, the server is used for acquiring login behavior information of the host, and the login behavior information is used for indicating a behavior of logging in the host through a password; detecting whether a password cracking behavior for the host exists or not according to the login behavior information of the host; if the password cracking behavior is detected, creating an automatic password changing plan of the host through the bastion host; wherein the automatic password changing plan is used for changing the password of the host; and the bastion host is used for modifying the password of the host according to the automatic password modification plan. According to the embodiment of the invention, the password cracking behavior for the host can be detected in time, and the bastion host is called to automatically change the password, so that the probability of cracking the password by an attacker is effectively reduced, and the security of the host is improved.

The invention discloses a law enforcement scene-oriented evidence collection data real-time acquisition method and system, and relates to the technical field of data processing. The method comprises the following steps: generating a first candidate password array based on user behavior characteristic data and encrypted data attribute information of to-be-decrypted iOS equipment; carrying out cracking verification on the encrypted data by adopting the first candidate password array by utilizing computing equipment provided with a GPU (Graphics Processing Unit), outputting a first verification result, and if the first verification result passes, determining that the cracking succeeds; if the first verification result does not pass, performing conjoint analysis based on the user behavior characteristic data, the encrypted data attribute information and a first candidate password array to generate a second candidate password array; and iteratively executing the cracking verification and array updating step by using the second candidate password array until the cracking is successful. According to the method, invalid paths can be accurately eliminated, correct passwords can be quickly converged, and the password cracking efficiency is remarkably improved.

One example method includes automatically determining, at a keyboard sound mitigation model implemented on a first computing system, if the first computing system is actively running a video communication service during a video communication session with a second computing system; in response to determining that the first computing system is actively running the video communication service during the video communication session with a second computing system, automatically determining, by the keyboard sound mitigation model, if a user of the first computing system is entering a password or sensitive information into a webpage or window that is active on the first computing system; and in response to determining that the user of the first computing system is entering the password or the sensitive information, performing, by the keyboard sound mitigation model, a keyboard sound mitigation operation that masks or removes any keyboard sounds made while entering the password or sensitive information.

The embodiment of the invention provides a decryption method, a variable storage method, a related device, equipment, a medium and a product. According to the decryption method, a current signal of the chip is monitored through the current probe, an electromagnetic signal of the SRAM is monitored through the electromagnetic probe, and each key bit value corresponding to a coordinate value stored in the SRAM is determined based on a signal change mode of the current signal and the electromagnetic signal, so that a decryption result is obtained. Through a current-electromagnetic dual-channel acquisition and analysis scheme, the capability of obtaining effective information in the decryption process is improved, the redundant information processing process is reduced, and the password decoding efficiency is improved. The variable storage method comprises the following steps: dispersing and storing coordinate values of at least two coordinate dimensions of at least one password intermediate variable in at least two SRAMs (Static Random Access Memory); or the coordinate values of the at least one coordinate dimension of the at least two password intermediate variables are jointly stored in the same SRAM, so that local electromagnetic radiation analysis can be avoided, and the storage process does not affect the execution efficiency of the encryption algorithm.

The method, apparatus, electronic device, and storage medium for detecting credential stuffing attacks provided in this application include: real-time acquisition of multiple related information of a login webpage and user login behavior data; identification of conflicting information from the multiple related information and counting the total number of conflicts within a preset time period; determination of whether the conflicting information is abnormal based on the total number of conflicts; and, if the conflicting information is determined to be abnormal, detection of whether the login webpage is a credential stuffing attack based on the user login behavior data. The above technical solution can automatically detect credential stuffing attacks using multiple related information of a login webpage and user login behavior data. This detection process does not require manual intervention, effectively alleviating the inefficiency and error-prone nature of existing manual credential stuffing attack detection methods, ensuring user account security, and thus avoiding incalculable losses to users.

The invention relates to the technical field of electric data processing, in particular to a directional password guessing method and system based on user personal information, and the method comprises the following steps: S10, carrying out the preprocessing of an obtained data set, so as to remove invalid data; s20, dividing the personal information into six large classes, namely 36 small classes, and performing statistical analysis on a data set obtained after preprocessing based on the classification mode to obtain a composition structure and probability of a password; and S30, generating a guess password based on the personal information input by the user and the composition structure and probability of the password. According to the method, six categories of personal information are set, and 36 subcategories are further divided, so that the problems that a traditional directional password cracking model is too rough in division of the types of the personal information and has a large amount of repeated statistics are solved, meanwhile, the limitation that the personal information is represented by digits is eliminated, and semantics are directly captured and matched. Therefore, the distribution rule of the personal information in the password can be reflected more truly, and a better cracking effect is achieved.

The application provides an implementation method of high-efficiency weak password cracking with zero false alarm rate, aiming at realizing a weak password cracking method with high performance and zero false alarm rate through high-concurrency programming and error rescan. The method uniformly distributes weak password cracking tasks to multiple coroutines by setting a producer queue and a consumer coroutine, realizes high-concurrency running of the weak password cracking tasks, and then rescans the tasks that fail to scan due to non-password authentication errors of the weak password, thereby realizing zero false alarm rate scanning. The application provides an effective implementation method of high-efficiency weak password cracking with zero false alarm rate, improves the efficiency of weak password cracking, and realizes zero false alarm rate scanning.

The present invention relates to the field of information security technology, and specifically to a method for decrypting and scheduling rainbow tables based on multi-layer encryption protection. Through the hierarchical storage of multi-level rainbow tables and storage modules, combined with an accurate task target recognition and matching mechanism, the present invention effectively accelerates the decryption process. By identifying the optimal subclass of rainbow tables based on information such as the encrypted hash value, length, and encryption algorithm of the password, the decryption algorithm for the target password can be quickly matched, greatly improving the speed of password cracking. The present invention adopts a task scheduling and allocation mechanism based on the degree of matching, which can reasonably allocate computing resources according to the priority of decryption tasks. Low-priority tasks preferentially use basic decryption units, while high-priority tasks use dedicated hardware acceleration modules, effectively improving the utilization rate of resources and ensuring that high-priority tasks are processed in a timely manner.

The application provides a remote login brute force behavior monitoring method and device, electronic equipment and a storage medium, and relates to the technical field of security protection, and the method comprises the following steps: obtaining target information corresponding to remote login through an ETW mechanism of an operating system deployed on the electronic equipment, wherein the target information comprises at least two of the following: login behavior information, RDP connection information and network connection behavior information; and monitoring whether remote login brute force behavior exists based on at least two target information in the login behavior information, the RDP connection information and the network connection behavior information. The application can obtain at least two target information in the login behavior information, the RDP connection information and the network connection behavior information based on the ETW mechanism, and jointly monitor whether remote login brute force behavior exists, thereby improving the accuracy of remote login brute force behavior monitoring.

Embodiments of the present disclosure provide a decryption method, a variable storage method, and related devices, equipment, media and products. The decryption method monitors the current signal of the chip through the current probe, monitors the electromagnetic signal of the SRAM through the electromagnetic probe, determines the key bit value corresponding to the coordinate value stored in the SRAM based on the signal change mode of the current signal and the electromagnetic signal, and then obtains the decryption result. Through the current-electromagnetic dual-channel acquisition and analysis scheme, the ability to obtain effective information in the decryption process is improved, the redundant information processing process is reduced, and the password cracking efficiency is improved. The variable storage method stores the coordinate values of at least two coordinate dimensions of at least one password intermediate variable in at least two SRAMs, or stores the coordinate values of at least one coordinate dimension of at least two password intermediate variables in the same SRAM, which can avoid local electromagnetic radiation analysis and the storage process does not affect the execution efficiency of the encryption algorithm.

A safe case with a combined lock belongs to the field of safe cases and is characterized in that a lock bottom plate is arranged in a cabinet door, a manual coded lock, a delay auxiliary switch, a key logic lock, a key coded lock and a main switch are mounted on the lock bottom plate, lock heads or handles are respectively arranged on the door surface of the cabinet door, trap lock bodies are arranged in the key logic lock and the key coded lock, and the main switch is arranged on the lock bottom plate. A password adding device is arranged, the manual coded lock and the time delay auxiliary switch are interlocked, the main switch is limited by the time delay auxiliary switch, the key logic lock and the key coded lock, a second handle of the main switch can be rotated only by unlocking the time delay auxiliary switch, the key logic lock and the key coded lock, and the safe case is provided with an anti-violence lock; the password cracking and unlocking difficulty is increased, and the linkage mechanism can prevent abnormal unlocking; the box body can prevent cutting and illegal opening.

A method for protecting an electronic device is disclosed. According to the method and the device, the time window is set, password verification is carried out only when the timing duration of the electronic equipment from entering the to-be-verified state is within the set time window, and access of the external equipment is allowed only when password verification is successful, so that the password cracking difficulty of an attacker is increased, and the security of the attacker is improved. And the access security of the electronic equipment is improved.

1. The name of this design product: Box-type ion trap quantum computer. 2. Purpose of this design product: used to provide quantum circuit compilation and algorithm real-machine verification, can be integrated with supercomputers, and applied to biomedicine, new materials, code breaking, large models, and equipment simulation and other fields. 3. The design key point of this appearance design product lies in the shape. 4. The picture or photo that best illustrates the design points: use the status reference diagram. 5. Other situations that need explanation: Other explanations: The usage status reference diagram is a three-dimensional diagram of the usage status of the box-type ion trap quantum computer.

The present invention provides an intrusion detection method for an IOS-XE system based on containers. A self-built container is deployed on a router, and the self-built container is used to carry the intrusion detection system. The intrusion detection system includes an information extraction module and an intrusion behavior determination module. The information extraction module extracts information and stores the extracted information in a database deployed in the self-built container. The intrusion judgment module reads network data, status information, and log information from the database to determine intrusion behavior, and outputs the detection result to a Web server for display. The real-time detection method for the IOS-XE system based on containers provided by the present invention, combined with the current research on attack behaviors against Cisco routers, can detect intrusion behaviors such as password cracking, configuration hiding, and backdoor implantation, making up for the deficiency that the UTD service of the IOS-XE system only detects transit traffic, and can effectively detect Web injection attacks and CLI injection attacks widely existing in this system.

The application discloses a kind of enterprise network weak password evaluation methods based on logic attack graph and password evaluation, first, the network topology structure of enterprise intranet, security policy and system configuration are collected, in combination with the reasoning rule mapped of ATT&CK knowledge base, logic reasoning is carried out using MulVAL tool to obtain logic attack graph;Then the system account password information of each host is obtained, the password entropy is calculated and the password cracking time is simulated to obtain the password risk value;Afterwards, the password risk value is associated with the logic attack graph, a new weighted attack graph containing the password risk value is generated;Attack starting point and attack target point in the weighted attack graph are identified simultaneously;Then, all attack paths in the weighted attack graph are traversed using the depth-first search algorithm, and the weak password risk value on each attack path is calculated;Finally, the attack path with the highest weak password risk value is taken as the best attack path, and a visual process is generated to improve the network security defense level of enterprises.

The present invention discloses a hybrid password cracking method combining a neural network model and Hashcat. The method of the present invention includes pre-training a general neural network model based on a password data set, fine-tuning the general model with short passwords and long passwords respectively to construct two exclusive models applicable to short passwords and long passwords; using the exclusive models to generate long and short password data, the long password data is used as the dictionary for dictionary attack, and the short password data is mapped into masks according to the mask rules of Hashcat to generate a mask list; for the target password hash value to be cracked, the target password hash value is cracked through the Hashcat mask attack mode in combination with the mask list, and the target password hash value is cracked through the Hashcat dictionary attack mode in combination with the dictionary, and the cracked password is returned. The purpose of the present invention is to combine a neural network model and Hashcat to achieve password cracking so as to improve the cracking success rate and optimize the utilization of computing resources.

The invention relates to the technical field of unmanned aerial vehicle radio cracking control, in particular to an unmanned aerial vehicle remote control system and method based on the radio cracking technology, and the system comprises a password distribution unit, a cracking progress estimation unit, and a GPU core control unit. A password distribution unit accurately divides a password database combination into subsets according to a specific algorithm and distributes the subsets to a GPU core to carry out cracking operation, a cracking progress estimation unit cooperates by means of multiple modules, constructs a model to deeply analyze password features, constructs a wide set sample of a module, reduces dimensions to disjunction key features, and carries out training optimization. The password cracking module quantifies difference weighting to obtain a coefficient, dynamically corrects and fuses multiple factors to predict remaining time, the difficulty evaluation module clusters subsets and accurately evaluates adaptation according to an encrypted submodel, the GPU core control unit intelligently regulates and controls frequency according to the estimated remaining time, stores and outputs a result after successful cracking, and the cracking efficiency is improved.

The invention discloses an optical transmission network security risk analysis system and defense method, and the system comprises a risk analysis system which comprises a defense model platform, a communication security defense platform, a physical risk analysis platform, a defense measure platform, and a step-by-step analysis platform. According to the invention, the defense measure platform is set to carry out risk defense on the optical transmission network in real time, the password strategy module adopts a strong password and periodically changes the password so as to prevent a hacker from illegal access by using a password cracking technology, and the security management module establishes a security management system and a security training mechanism, so that the network security awareness is improved, and the security management capability is enhanced; the defense model platform carries out situation awareness, multi-factor identity authentication, starting of access control lists of network management and equipment and integrity detection, a security version communication protocol is used between the equipment and the network management, the equipment is forbidden to have a command line, even if a single point is physically contacted, the single point cannot be controlled, and the risk prevention and control requirements of people are met.

The application belongs to the technical field of security verification, and particularly relates to a password verification method and system based on user login. The method comprises the following steps: an encryption factor is generated by combining a device identification code with a system key, when a user logs in, the login password is encrypted by using the encryption factor, so as to bind the encryption factor with the device identification code, so that the validity of the password depends on the password itself and the user device end at the same time; and the encryption type is determined by acquiring user device end information and input environment information to select a corresponding encryption mode; the time behavior mode of the user is introduced into the authentication link to construct a dynamic security defense line based on user habits. The application binds the encryption factor with the device identification code, so that the validity of the password depends on the password itself and the user device end at the same time, prevents collision library attacks, and improves the security of the account; a single fixed encryption mode is avoided, the complexity of password cracking is increased, and the anti-attack ability of password verification is enhanced.

The application discloses an iOS backup password cracking and data recovery system, which comprises the following steps: extracting metadata benchmark information of a backup file package; performing multi-layer progressive verification on the backup file package based on the metadata benchmark information; obtaining and storing, by an online feature database, valid backup pass rates and abnormal backup interception rates of labeled samples corresponding to different backup features under different dynamic threshold sets, and cracking results and efficiency coefficients of the labeled samples corresponding to different backup features under different cracking algorithms; outputting dynamic threshold sets in a multi-layer progressive verification process based on the online feature database; constructing a cracking algorithm matching model based on the online feature database, and outputting a cracking algorithm of the backup file package when the multi-layer progressive verification of the backup file package is passed; cracking and file recovery are performed on the backup file package based on the cracking algorithm, and online feedback is performed on cracking results and file recovery results, so that the target of maximizing data recovery value under controllable risk is achieved.