26 results about "Password policy" patented technology

An information processing apparatus includes a first acquisition unit configured to acquire, from an external apparatus, a state regarding at least one item of a password policy of a password string entered on the external apparatus, and an obfuscated password string, a second acquisition unit configured to acquire a setting, which is made in the information processing apparatus, regarding the at least one item of the password policy, a determination unit configured to determine whether the obfuscated password string satisfies the password policy, based on the acquired state regarding the at least one item of the password policy of the password string, and the acquired setting regarding the at least one item of the password policy, and an update unit configured to update a password based on the obfuscated password string in a case where it is determined that the obfuscated password string satisfies the password policy.

The invention discloses an AI-driven transport layer security protocol adaptive optimization system, which relates to the technical field of traffic data access and comprises a data access module, a state sensing module, a risk assessment module, an optimization transmission module and an adaptive encryption module. The data access module is used for capturing an original data flow from a network and a host in real time; the state sensing module is used for receiving the original data stream and setting a feature engineering state index; the risk assessment module is used for quantitatively assessing the safety score of the current state according to the current traffic environment state; the self-adaptive encryption module is used for constructing a password strategy library and generating an encryption configuration strategy according to a current traffic state; and the optimization transmission module is used for constructing a parameter intelligent optimization model and controlling algorithm interaction to generate performance scheduling optimization actions.

A random password policy for a specific user associated with an entity is generated based on a global password requirement. A new password created by the specific user based on the generated random password policy is identified. That the new password complies with a set of requirements specified by the generated random password policy is confirmed.

Methods, storage systems and computer program products implement embodiments of the present invention method for protecting a client computer, which includes a processor and a display. The method includes analyzing a web page that was downloaded to the client computer, and identifying, by the processor, a password input field in the web page. After rendering the password input field to the display, an input to the password input field is captured, and the captured input is evaluated against a specified password policy. Finally, an alert is generated upon detecting a violation of the specified password policy.

The disclosure provides an approach for providing cryptographic agility for virtualized data storage. Embodiments include determining, by a hypervisor running on a host machine, one or more attributes of a virtual machine (VM) running on top of the hypervisor. Embodiments include sending, by the hypervisor, to a cryptographic provider component, a request to perform cryptographic functionality with respect to one or more virtual disks associated with the VM, wherein the request comprises the one or more attributes of the VM. Embodiments include selecting, by the cryptographic provider component, based on the one or more attributes of the VM and one or more cryptographic policies, one or more cryptographic techniques for handling the request from a set of possible cryptographic techniques. Embodiments include encrypting the one or more virtual disks in a virtual storage area network (VSAN) based on the selected one or more cryptographic techniques.

The invention particularly relates to a password security management method applied to industrial security, which relates to the technical field of industrial control system security, and comprises the following steps of: deploying password strategies in batches in an arranged controlled simulation environment, triggering test case execution according to priorities, and monitoring system response data to obtain a test result; wherein in the test case execution process, whether the obtained execution success rate is correct or not needs to be judged through the verification error coefficient obtained through analysis. According to the invention, an isolation simulation test platform highly consistent with a real production environment is established, an HMI / operator station, a PLC / DCS controller and an industrial network structure are accurately duplicated in combination with a digital twinning technology, and a test process and the production environment are completely isolated; serious consequences, such as automatic process interruption and production line stop, possibly caused by password strategy change testing are avoided from the source.

The invention discloses a password policy updating method, device and system, electronic equipment and a storage medium, and relates to the technical field of network security, the method comprises the following steps: in response to a received target password policy message, updating a first local password suite library based on a target password policy to obtain an updated first local password suite library; wherein the target password strategy message comprises newly added, modified or forbidden password suite information; starting a new service process based on the updated first local cipher suite library; and sending the update message containing the target password policy to the client, thereby realizing flexible adjustment and instant effectiveness of the target password policy, avoiding terminating an old service process, restarting a system or disconnecting original connection communication, avoiding service data interruption, quickly responding to a security demand, and improving the dynamic instant update capability of the target password policy.

The present application relates to the technical field of information security, and aims at the problems that password guessing based on probabilistic context-free grammar is difficult to identify multi-semantic patterns and the semantic guidance strength is uncontrollable, and proposes a password guessing method based on multi-semantic fusion of probabilistic context-free grammar: enumerating sub-strings in the training password, identifying semantic segments according to simple, date, vocabulary and name patterns and prioritizing disambiguation, dynamically planning segmentation according to the principle of maximum semantic coverage and least semantic segments, setting semantic enhancement parameters β for each semantic pattern during training to weight and normalize the count, and outputting the candidate password dictionary according to the probability priority queue during generation, which is suitable for efficient password guessing in offline password audit, password policy evaluation and penetration testing.

To realize a system protected by a password policy even in a remote UI environment.SOLUTION: The present invention is directed to an information processing apparatus having first acquiring means for acquiring a state of at least one password policy item in a password string input by an external device and an obfuscated password string, second acquiring means for acquiring settings for the at least one password policy item, determination means for, based on the state of the at least one password policy item in the acquired password string and the settings for the acquired at least one password policy item, determining whether or not the obfuscated password string matches with the password policy, and updating means for, if it is determined that the obfuscated password string matches with the password policy, updating the password based on the obfuscated password string.SELECTED DRAWING: Figure 10

An information processing apparatus includes a first acquisition unit configured to acquire, from an external apparatus, a state regarding at least one item of a password policy of a password string entered on the external apparatus, and an obfuscated password string, a second acquisition unit configured to acquire a setting, which is made in the information processing apparatus, regarding the at least one item of the password policy, a determination unit configured to determine whether the obfuscated password string satisfies the password policy, based on the acquired state regarding the at least one item of the password policy of the password string, and the acquired setting regarding the at least one item of the password policy, and an update unit configured to update a password based on the obfuscated password string in a case where it is determined that the obfuscated password string satisfies the password policy.

A method for applying a cryptography policy, performed by a computing system. The method may comprise acquiring information on cryptography policies associated with a first workload; determining, using the acquired information, a target cryptography policy to be applied to the first workload, the target cryptography policy including information on a target cryptographic library; and switching an existing cryptographic library applied to the first workload to the target cryptographic library.

An apparatus includes a processor operatively coupled to a memory. The processor receives a first set of risk assessment rules including first user privilege criteria and first device criteria. The first device criteria include a computing device patch level, a network type, and / or a password policy. The processor identifies a user-specific security risk based on the first set of risk assessment rules and applies a privilege mitigation measure based on the user-specific security risk without being in communication with a management server. The processor later receives a second, updated set of risk assessment rules at the computing device. Upon detecting another login of the user, the processor identifies an updated user-specific security risk based on the updated set of risk assessment rules, and applies a modified privilege mitigation measure based on the updated user-specific security risk, again without being in communication with the management server.

The invention discloses a decentralized smart home individual privacy protection method and system, relates to the technical field of smart home, and solves the problem that the information collection and processing level is reduced by adjusting the network access authority of smart equipment in the prior art; however, due to the fact that strict authority management affects normal use of the intelligent household equipment, visitors cannot remotely control the equipment, and convenience of the intelligent household equipment is reduced. An original video collected by a smart home camera is obtained from a local database, audio and video frames in the original video are separated through an audio and video processing technology, and the audio and video frames are respectively uploaded to an encryption network unit; setting a password of an encryption network unit and a terminal password synthesized by audio and video frames based on a password strategy of time; judging whether the visitor is allowed to view the complete video; if yes, recording access log information of the visitor; if not, sending a reminding signal; according to the invention, the security of personal privacy protection is greatly improved.

This application relates to the technical field of network and information security, and discloses an account security inspection system based on the RDP protocol. It uses the WinRM protocol as the core remote execution protocol, while also supporting the RDP protocol as an alternative connection method, enabling agentless remote management of Windows hosts. The system employs a multi-dimensional security inspection module covering more than 20 security checks, including password policies, account locking, user permissions, and login auditing. It supports all versions of Windows Server 2008 to 2022 through a cross-distribution compatibility mechanism. It utilizes a dynamic load-aware concurrent inspection engine to process log analysis and embedded account scanning tasks in parallel, and automatically identifies abnormal changes to account information through baseline comparison with integrity protection and a permission change awareness module. This invention requires no software deployment on the target host, is non-intrusive to the production environment, and can efficiently complete account security checks on large-scale Windows assets, significantly improving the account security protection capabilities of enterprise information systems.

The application is a password security management method applied to industrial safety, and relates to the technical field of industrial control system safety, which comprises: deploying password strategies in batches in a laid controlled simulation environment, triggering test case execution according to priority, monitoring system response data to obtain test results; wherein the execution success rate obtained in the test case execution process needs to be judged whether correct or not by analyzing the verification error coefficient obtained. In the application, an isolated simulation test platform highly consistent with the real production environment is built, the HMI / operator station, PLC / DCS controller and industrial network structure are accurately copied by combining with the digital twin technology, the test process is completely isolated from the production environment, and the serious consequences such as the interruption of the automation process and the shutdown of the production line caused by the password strategy change test are avoided from the root.

The invention discloses a BMC account login management method. The method comprises the steps of multi-factor authentication integration, password strategy customization, dynamic configuration management and intelligent monitoring and response. According to the invention, by intelligently combining different PAM modules, a multi-level authentication mechanism and enhanced security are realized, centralized management and dynamic update of PAM configuration are realized, management operation is simplified, an intelligent monitoring and response mechanism is introduced, and the automatic security protection capability of the system is improved.

Various example embodiments for supporting security for communication networks are presented herein. Various example embodiments may be configured to allow service providers of communication networks (e.g., Internet Service Providers (ISPs), Communication Service Providers (CSPs), or the like, as well as various combinations thereof) to support configuration and enforcement of password rules for customer devices of the communication networks (e.g., customer devices such as customer gateways and customer premises equipments (CPEs) supported by such customer gateways), using configurable regular expressions through a device management data model (e.g., a Broadband Forum (BBF) data model such as a TR-98 data model, a TR-181 data model, or the like, as well as various combinations thereof), for controlling passwords created for the customer devices of the communication networks through a device management interface (e.g., a Web Graphical User Interface (WebGUI) or the like).

The invention relates to a password security system based on a configuration strategy. The password security system comprises a strategy definition unit, a strategy distribution unit and a dynamic adjustment unit, the strategy definition unit comprises a strategy type module, a strategy configuration module and a strategy template module; the strategy distribution unit comprises a user group management module, a dynamic distribution module and a strategy priority module; wherein the user group management module supports creation and management of a plurality of different user groups, and each user group can be associated with one or more password strategies; the dynamic allocation module dynamically allocates an optimal password strategy according to roles, permissions or application scenes of the users; the policy priority module is used for supporting setting of policy priorities, and when multiple policies conflict, the policies with high priorities are executed preferentially according to the high-low order of the priorities; the dynamic adjusting unit comprises a real-time monitoring module, a strategy updating module and a notification mechanism module.

The embodiment of the invention discloses a browser security protection system and method for online banking all-in-one machine equipment. The system comprises a terminal containment layer used for providing a full-screen window, an exclusive instance and hot key shielding; the browser kernel adaptation layer is used for packaging at least two sets of rendering kernels; the network and identity protection layer is used for integrating Wi-Fi vouchers, certificates, dynamic passwords and password strategies and realizing multi-level verification of network access and account management; the system safety hooking layer is used for intercepting unauthorized processes, blocking popup windows and limiting system commands through a process-level hooking and mutual exclusion mechanism; the strategy communication and operation and maintenance layer is used for realizing strategy issuing, state returning and log tracking based on a shared memory and a configuration file; all the parts cooperate with one another, and safety protection of the browser of the online banking all-in-one machine equipment is achieved. The scheme provided by the embodiment of the invention gives consideration to security, service continuity and operation and maintenance efficiency, and has wide popularization and application values.

The application provides a password service method, device, equipment, medium and product, and relates to the technical field of network security. The method comprises the following steps: receiving, by a first security node, an operation request sent by a second security node of a first password service platform; obtaining a sensitive level of first data, a request type of the operation request, at least one security node with access authority of password information, and risk data of the second security node; performing trust evaluation on the second security node according to the risk data to obtain a trust degree; generating a dynamic password policy corresponding to the trust degree, the sensitive level and the request type; in the case that the at least one security node includes the second security node, performing an operation on the first data by using the password information according to the dynamic password policy to obtain second data of the operation; and sending the second data to the second security node by the first security node. The above steps can improve the security of password information in the password service process.

The invention provides a password strategy self-adaptive arrangement method, system and device and a medium, and the method comprises the steps: evaluating a service state according to a collected system architecture, a service interaction path, service interaction information and interaction node information; matching a corresponding baseline password strategy according to the service type; based on a service state and a baseline password strategy, solving an optimal password primitive combination sequence as a final password strategy under the constraint of a planning budget; according to the method, dynamic perception of the composite security target is realized by comprehensively analyzing the service state, and the optimal password primitive combination sequence is solved under the constraint of the planning budget based on the service state and the baseline password strategy to serve as the final password strategy, so that password strategy self-adaptive arrangement is realized; while the encryption protection strength in the business data interaction process is improved, irrelevant resource overhead and related economic investment brought by protection operation are reduced as much as possible, and the method has a good application prospect.

The invention relates to the technical field of information security, and provides a password guessing method of a probability context-independent grammar based on multi-semantic fusion aiming at the problems that the password guessing of the probability context-independent grammar is difficult to specifically recognize a multi-semantic mode and the semantic guidance intensity is uncontrollable. Semantic segments are recognized according to simple, date, vocabulary and name modes and subjected to priority disambiguation, segmentation is dynamically planned according to the segmentation principle of maximum semantic coverage and minimum semantic segments, a semantic enhancement parameter beta is set for each semantic mode during training to perform weighted normalization on counting, and a candidate password dictionary is output according to a probability priority queue during generation. The method is suitable for efficient password guessing in offline password auditing, password strategy evaluation and penetration testing.

This invention discloses an AI-driven adaptive optimization system for transport layer security protocols, relating to the field of traffic data access technology. It includes a data access module, a state awareness module, a risk assessment module, an optimized transmission module, and an adaptive encryption module. The data access module is used to capture raw data streams from the network and hosts in real time. The state awareness module is used to receive the raw data streams and set feature-engineered state indicators. The risk assessment module is used to quantitatively assess the current state security score based on the current traffic environment state. The adaptive encryption module is used to construct a cryptographic policy library and generate encryption configuration policies based on the current traffic state. The optimized transmission module is used to construct a parameter intelligent optimization model and control algorithm interaction to generate performance scheduling optimization actions.

Various example embodiments for supporting security for communication networks are presented herein. Various example embodiments may be configured to allow service providers of communication networks (e.g., Internet Service Providers (ISPs), Communication Service Providers (CSPs), or the like, as well as various combinations thereof) to support configuration and enforcement of password rules for customer devices of the communication networks (e.g., customer devices such as customer gateways and customer premises equipments (CPEs) supported by such customer gateways), using configurable regular expressions through a device management data model (e.g., a Broadband Forum (BBF) data model such as a TR-98 data model, a TR-181 data model, or the like, as well as various combinations thereof), for controlling passwords created for the customer devices of the communication networks through a device management interface (e.g., a Web Graphical User Interface (WebGUI) or the like).

The invention discloses an optical transmission network security risk analysis system and defense method, and the system comprises a risk analysis system which comprises a defense model platform, a communication security defense platform, a physical risk analysis platform, a defense measure platform, and a step-by-step analysis platform. According to the invention, the defense measure platform is set to carry out risk defense on the optical transmission network in real time, the password strategy module adopts a strong password and periodically changes the password so as to prevent a hacker from illegal access by using a password cracking technology, and the security management module establishes a security management system and a security training mechanism, so that the network security awareness is improved, and the security management capability is enhanced; the defense model platform carries out situation awareness, multi-factor identity authentication, starting of access control lists of network management and equipment and integrity detection, a security version communication protocol is used between the equipment and the network management, the equipment is forbidden to have a command line, even if a single point is physically contacted, the single point cannot be controlled, and the risk prevention and control requirements of people are met.

To provide a device and method that control the creation of passwords to be used for protecting accesses to devices in a communication system.SOLUTION: A method uses configurable regular expressions through a device management data model, e.g., a Broadband Forum (BBF) data model such as a TR-98 data model, a TR-181 data model, or the like, as well as various combinations thereof, for controlling passwords created for customer devices of communication networks through a device management interface, e.g., a Web Graphical User Interface (WebGUI) or the like. The method enables service providers of the communication networks, e.g., Internet Service Providers (ISPs), Communication Service Providers (CSPs), or the like, as well as various combinations thereof, to support configuration and enforcement of password rules for the customer devices of the communication networks.SELECTED DRAWING: Figure 3