53 results about "Program security" patented technology

The invention discloses a computing network security analysis method based on artificial intelligence, relates to the technical field of computing network security, and solves the technical problems that in the prior art, natural factor analysis cannot be performed on hardware during computing network security supervision, and whether the current network computing processing performance meets requirements cannot be deduced. The method specifically comprises the following steps: natural factor analysis: performing natural factor analysis on computer hardware during operation of a computing network, and inferring whether the current network computing processing performance meets requirements or not according to the computer hardware analysis; architecture security detection: carrying out architecture security detection on the computing network; system configuration detection: carrying out system configuration detection on the computing network, and detecting the system security in the computing network when the operation duration of the computing network is continuously increased; and program security detection: carrying out security detection on the covering operation program in the operation process of the computing network.

The invention discloses a trusted authentication system and method based on quantum encryption terminal virtualization. Comprising a hardware trusted root module, a virtual trusted root management module, a container environment module, a container mirror image management module, a container monitoring module and a trust chain management module, a safe and credible container operation environment is constructed, a credible authentication mechanism based on quantum random numbers is established, starting and operation of an operation system, a Docker container and an application program are verified step by step, the safe and credible state of system operation is guaranteed, multi-container use is supported, and safe and credible container-level programs are achieved. Therefore, the security problem of multi-program operation of the power dispatching terminal gateway is solved.

Various example embodiments for supporting network security for a communication network are presented herein. Various example embodiments for supporting network security for a communication network may be configured to support programming of security functions, including security rules, into network devices. Various example embodiments for supporting programming of security functions into network devices may be configured to support programming of security functions into high performance application-specific integrated circuits (ASICs) of the network device. Various example embodiments for supporting programming of security functions into network devices may be configured to support programming of security functions into various types of network device, such as routers, switches, servers, or the like.

The invention discloses an application program security test system based on multi-dimensional risk analysis, and belongs to the technical field of computer science, the system comprises a risk identification module, a security execution module, a repair module, a knowledge graph module and a monitoring and reporting module, the risk identification module captures security threats and risks in an application, and performs preliminary assessment and classification; the security execution module deeply explores and verifies security vulnerabilities through automatic and manual penetration testing; the repair module records vulnerability details and plans and tracks a repair process; the knowledge graph module presents vulnerabilities, attack techniques and protection measures in a graphical manner, and enhances security cognition; and the monitoring and reporting module continuously monitors the security state of the application and generates a security report, so that the security of the application program is improved.

This invention discloses a method and apparatus for implementing a programmable API security gateway. The method includes: identifying API interface characteristics and automatically programming policy templates for the API interfaces based on these characteristics; detecting security events of the API interfaces and automatically programming security policy templates for the API interfaces based on these security events; and monitoring the operational status of the API interfaces and automatically adjusting the flow control and security policies associated with the API interfaces. This method and apparatus improve the maintenance efficiency of API interfaces and reduce operational costs.

The invention provides a binary program vulnerability mining method, device and system based on symbolic execution and taint analysis and a medium, and the method comprises the steps: disassembling a target program, extracting a control flow graph (CFG) and a data flow graph (DFG), recording a node state through a hash table, and generating a feature representation through nonlinear transformation; performing simulation execution based on CFG, DFG and feature representation, recording variable symbol values to obtain path conditions, and recursively solving constraints to generate path mapping; marking input as taint data, recursively calculating a propagation path to generate a taint flow diagram, and determining a taint state after sensitive operation; checking whether the stains are subjected to sensitive operation or not, and if the influence of integral formula calculation exceeds a threshold value, judging that potential vulnerabilities generate a candidate set; and calculating grades through a risk assessment formula, and generating a report containing positions, types, grades and repair suggestions. The method combines symbolic execution and taint analysis, can comprehensively and accurately detect vulnerabilities, has remarkable precision and efficiency advantages, and is suitable for complex program security analysis.

The invention provides a program security testing method and device, electronic equipment and a storage medium, and the method comprises the steps: splicing and calling parameters in a target source code to obtain various parameter chain structures, each parameter chain structure comprising a plurality of parameters and calling relations among the parameters; and determining an availability label of the parameter based on a preset detection rule, the availability label being used for indicating whether the parameter can be utilized by the stain code, and placing the parameter whose availability label is no in a scanning rule filter, so that the scanning rule filter ignores vulnerability scanning of the parameter. By establishing a parameter chain structure of a target code, availability detection is performed on each parameter based on a preset detection rule, the parameters which cannot be utilized by taint data are determined and added into a scanning rule filter, and in the subsequent scanning process, the scanning rule filter neglects the parameters which cannot be utilized, so that the scanning efficiency is improved. The SAST is prevented from generating false alarms on the parameters which cannot be utilized by the taint data, and the accuracy of program security detection is improved.

The application belongs to the technical field of application software development test, and discloses an application software development test system with real-time vulnerability detection, which comprises a code real-time collection module, a multi-dimensional vulnerability detection module, a vulnerability accurate positioning module, a vulnerability risk quantitative evaluation module, a dynamic repair guidance module, a data storage module, a visual interaction module and an iterative optimization module, and each module cooperates to form a whole-process closed-loop vulnerability detection and management and control system. The application software development test system with real-time vulnerability detection is adopted, real-time capture, accurate positioning, risk evaluation and dynamic repair suggestion output of the vulnerability are realized, and the software development test efficiency and application program security are improved.

The application provides a processor chip branch prediction buffer security strong method and an electronic device. The method comprises: a security domain private key generation and application method, dividing a program security domain and generating two private security keys for each security domain, and ensuring that randomization seeds adopted by different security domains are irrelevant; a structure design of a branch prediction buffer with a label domain and a data domain separated, which is combined with a branch prediction buffer skew lookup and update mechanism to realize a security branch prediction buffer skew randomization lookup and update mechanism within a system life cycle, and the structure design of the branch prediction buffer with the label domain and the data domain separated is combined to realize security within the system life cycle.

The application discloses a code execution method and device and a storage medium. The application relates to the technical field of program security, and the method comprises the following steps: performing abstract syntax tree conversion on to-be-executed code to obtain a tree-shaped code structure; checking each tree node in the tree-shaped code structure to obtain checking information, adjusting the tree-shaped code structure according to the checking information, and obtaining an adjusted tree-shaped code structure; generating target execution code according to the adjusted tree-shaped code structure; and executing the target execution code in a restricted environment, wherein the restricted environment refers to a code execution environment after a detection function is modified according to a preset restricted object list. Through the application, the problem that the code security checking method in the prior art is not accurate enough and the security of execution code in a system is low, thereby leading to poor system stability, is solved.

The application relates to the technical field of artificial intelligence, and provides an application program security risk detection method, device, equipment, medium and product, the application program security risk detection method comprises the following steps: obtaining an application program to be identified; inputting the application program to be identified into a preset identification model to obtain a detection result output by the preset identification model; the preset identification model is obtained by training data of an original application program installation package; the preset identification model comprises multiple intelligent agents working respectively, and the intelligent agents are used for executing different function tasks, wherein the function tasks comprise task scheduling, data analysis and result decision. Through the above mode, the intelligent level and performance index of the identification model can be significantly improved, so that the accuracy of the security risk detection result of the application program is improved.

The invention discloses an application program safety control method and device, equipment, a medium and a product. The method comprises the steps of obtaining a screenshot image and corresponding user interface structure information when a user operates a current application program; based on the screenshot image and the user interface structure information, using a preset first large language model to perform user behavior analysis to determine whether the user has a high-risk behavior; and if the user has the high-risk behavior, triggering safety early warning. According to the invention, the high-risk behavior of the user can be accurately identified and early warned, and the risk identification precision and adaptability are effectively improved.

To provide security for a communication network in a communication system.SOLUTION: Various exemplary embodiments that support network security for a communication network are presented in the present specification. Various exemplary embodiments that support network security for a communication network may be configured to support programming of security functions, including security rules, into network devices. Various exemplary embodiments that support programming of security functions into network devices may be configured to support programming of security functions into high performance application-specific integrated circuits (ASICs) of the network device. Various exemplary embodiments that support programming of security functions into network devices may be configured to support programming of security functions into various types of network devices, such as routers, switches, servers, or the like.SELECTED DRAWING: Figure 4

A program security application method can include uploading by a user terminal, a file to a server unit, extracting by the server unit, app information on the basis of the file, analyzing code in the app information to separate the code into an original source code and a driving code, combining, by the server unit, a security execution code, which replaces the original source code, with the driving code, executing, by a user client, the security execution code; and executing, by the user client, the original source code.

The invention discloses a program running method and device, equipment, a medium and a program product, and relates to the technical field of computers. The method comprises the following steps: acquiring a mirror image file corresponding to a first application program; performing data analysis on the mirror image file to obtain attribute data used for indicating the program container in the running process in the mirror image file; generating second attribute data corresponding to the first attribute data based on the attribute data; and configuring the second attribute data into the mirror image file, and running the program container based on the second attribute data to obtain a container running result. Namely, a mode of replacing the original attribute data with the autonomously constructed security data avoids constructing an independent isolation environment to run the program container, so that the overhead of computing resources is reduced while the safe operation of the program container is ensured, and the verification efficiency of the program security is improved.

The application belongs to the technical field of information security, and provides a kind of application program security authentication method and device based on Windows platform, the method includes: obtaining the portable executable PE file corresponding to the application program of Windows platform;PE file is encrypted, and the encrypted PE file is written into the target resource segment of preset PE file, to obtain target PE file;Run target PE file, and under the condition that target PE file passes target authentication authentication, obtain encrypted PE file and decrypt, to obtain decrypted file;Wherein, target authentication authentication includes user identity authentication and user authority authentication, or user identity authentication.The method can realize the identity authentication mechanism based on password technology to the application program of Windows platform under the premise of zero modification, meet the relevant requirements of secret evaluation, improve the security of original PE file identity authentication and reduce the authentication cost.

The present invention discloses a method and device for improving the security of cloud-hosted Web application programs based on containers. The method includes: constructing a Web application and building a MongoDB database cluster using Docker container instances in the Web application; wherein the Web application includes multiple database containers; classifying the data stored in the multiple database containers based on the types of the multiple database containers to obtain a data classification result; constructing a jump defense model according to the data classification result and the characteristics of the MongoDB database cluster, and outputting the distribution characteristics of the data stored in the multiple database containers in the Docker container instances; configuring a load balancer for the MongoDB database cluster based on the distribution characteristics to perform data distribution and mapping processing to the host, so that the jump defense model provides a single interface to each database container. The present invention can implement the use of virtual technology with very little memory, and reduce the damage degree of web application programs through container jumps.

The present application discloses a source code vulnerability detection method, system, device and storage medium, which relates to the field of program security technology. The disclosed source code vulnerability detection method includes: statically analyzing the source code to be detected to obtain a first vulnerability set; inputting the source code to be detected into a preset machine learning model, and outputting a second vulnerability set, wherein the vulnerability set is a set of codes in which vulnerabilities are detected in the source code to be detected; inputting the first vulnerability set into the machine learning model, and outputting a third vulnerability set; and using the second vulnerability set and the third vulnerability set as target vulnerability sets corresponding to the source code to be detected. The present application aims to solve the technical problem of low vulnerability detection accuracy.

The invention discloses an operating system kernel authentication system based on an RUST language, and relates to the technical field of software authentication, the operating system kernel authentication system comprises a quality evaluation module and a security evaluation module, the quality evaluation module adopts different evaluation modes according to whether a target kernel source code is open or not; for an open source operating system, static code analysis is carried out on a kernel of the open source operating system by using a coding specification based on an RUST language, and then evaluation is carried out through a quality evaluation scheme; the method comprises the following steps: aiming at an operating system kernel of which internal codes are not disclosed, evaluating the system kernel based on a sequence of specified evaluation, plan evaluation and execution evaluation defined in an ISO / IEC 25040 standard; and the security evaluation module evaluates the function security and the information security of the operating system kernel. According to the method, the security features contained in the Rust language design are fully utilized, redundancy judgment on the program security features guaranteed by the Rust compiler is reduced, and therefore the workload of the authentication process is reduced.

The invention provides a method for obfuscating and hiding codes to improve program security, which comprises the following steps: S1, obfuscating the codes of software to change the structure and form of the codes, the codes of the software comprising core codes and non-core codes; the obfuscated code comprises letter name obfuscation: replacing one or any combination of a variable name, a function name and a file name of a source code with a letter for distinguishing capital and small letters; s2, structures of core codes in the codes obtained in the step S1 are reorganized through hidden codes, all the core codes are stored in a hidden file, and original codes are deleted; and S3, packaging the obfuscated and hidden codes into a plurality of files, wherein each packaged file has a hidden file storing the hidden codes. According to the method and the device, a developer can configure the rapid reinforcing software through the simple annotation mark, the core code of the software is reinforced and protected, and the security of the software can be greatly improved.

The invention discloses a vulnerability feature recognition method and device based on an abnormal object, equipment and a medium, and relates to the field of interactive application program security testing, and the method comprises the steps: creating a throwable abnormal object at a vulnerability trigger point; judging version information of the current Java development tool, calling a Java language access interface to generate a first identification code if the version of the Java development tool is 1.8 or below, and generating a second identification code by acquiring a field in a stack backtracking field of the abnormal object capable of being thrown if the version of the Java development tool is 1.8 or above; and if the version of the Java development tool is 1.8 or below, forming a vulnerability feature code by the first identification code and the context information. According to the main technical scheme and the effects, the operation performance is remarkably improved, the system resource overhead is reduced, the performance interference of the IAST Agent on a main service system in a high-concurrency environment in the version JDK1.9 and above is greatly reduced, and the feasibility of production environment deployment is enhanced.

Method for securing programs in a memory. This description relates to a method for securing programs in a memory (104), comprising writing a startup program (iROT) to a first area of ​​said memory (104); writing at least one additional program (uROT, Secure OS, Applications) to at least a second area of ​​said memory (104); write protection of the first and second areas by modifying one or more values ​​of a first register (WRPSG1 / 2); and prohibiting modification of said one or more values ​​of the first register (WRPSG1 / 2) when they are associated with a write-protected state of the first area. Figure for the abstract: Fig. 3

Systems, apparatuses, and methods related to data identity recognition for semiconductor devices are described. A system includes a host and a memory device coupled to the host via an interconnect bus. The host includes a host security manager configured to encrypt data of a command, perform a memory integrity check, allow access to memory of a memory device corresponding to an address of a command based on which entity associated with the host sent the command, generate security keys, program security keys into the memory device, program encryption ranges, or any combination thereof. The memory device includes a memory encryption manager and a memory device security manager. The memory device security manager is configured to detect whether a command was sent from a trusted domain of the host or non-trusted domain of the host and identify which entity associated with the host initiated the command.

A method for application security and an electronic device for performing the method are provided. The electronic device includes a memory configured to store computer-executable instructions and at least one processor configured to execute the instructions by accessing the memory, wherein the at least one processor is configured to, in response to the instructions being executed by the at least one processor, record a source type of an application based on the source type of the application when installing the application on the electronic device, determine whether the application corresponds to an untrusted application based on the source type of the application, and in response to the application corresponding to an untrusted application, perform one or more of security functions set for the untrusted application.

The embodiment of the invention discloses an evaluation method, device and equipment for a static program security test tool. The method comprises the steps that an evaluation request for the static program security test tool in a preset programming language is received; obtaining grammar characteristic information of a preset programming language and information of different dimensions of sensitivity analysis related to program analysis capability precision of the static program security test tool based on the evaluation request; a plurality of different first evaluation indexes for evaluating integrity are constructed on the basis of grammatical characteristic information of a preset programming language, and a plurality of different second evaluation indexes for evaluating accuracy are constructed on the basis of different dimensions of sensitivity analysis related to program analysis capability precision; and based on each evaluation index in the plurality of first evaluation indexes and the plurality of second evaluation indexes, obtaining one or more corresponding different positive and negative sample pairs, and based on the obtained positive and negative samples, carrying out evaluation of different evaluation indexes on the static program security test tool.

The invention discloses a program reinforcement method and device, electronic equipment, a storage medium and a computer product, and relates to the field of computer program security. The method comprises the steps that a target program to be reinforced is obtained, and the target program comprises a source program and / or a non-source program; obtaining a randomization coefficient of the target program, wherein the randomization coefficient is used for balancing a safety index and a performance index when the target program runs in an application scene; under the condition that the target program comprises a source program, compiling the source program based on a randomization coefficient corresponding to the source program to obtain a reinforced first target program; and under the condition that the target program comprises a source-free program, performing binary rewriting on the source-free program based on a randomization coefficient corresponding to the source-free program to obtain a reinforced second target program. By implementing the technical scheme provided by the invention, the technical problem that the program security and the operation performance cannot be balanced in the prior art can be solved.

An embodiment of the present application discloses a software deployment method, device, computer device, storage medium, and computer program product. An embodiment of the present application can obtain encrypted code data of a software and a software launcher, where the software launcher is used to assist in starting the software; determine program security information during the operation of the software; modify code parameter information corresponding to the program security information in the software launcher based on the program security information; generate software deployment data of the software according to the encrypted code data and the modified software launcher; and deploy the software on a target device according to the software deployment data. This solution can be applied to various scenarios such as cloud technology, artificial intelligence, intelligent transportation, and assisted driving, and this solution can improve the security and efficiency of software deployment.

The present invention relates to a defect detection method and system with optimal vertex matching, which is characterized by comprising: selecting a function containing a known defect as a seed; parsing the target source code and the seed in the system to be detected into a code feature graph with an intermediate statement as a vertex in a function unit, and purifying the code feature graph of the seed; screening out a target code feature graph with a high matching degree with the purified seed graph as a candidate target graph; encoding the high-order similarity between the vertices of the candidate target graph and the seed graph to obtain the similarity between the seed graph and the candidate target graph; and determining whether the candidate target graph contains an unknown defect similar to the seed defect according to the similarity between the seed graph and the candidate target graph. The present invention can be widely applied to the field of program safety technology.

The invention provides a program encryption method and device, a storage medium and a program product, relates to the technical field of computers, and can improve the problem of program leakage and ensure the security of a program. Acquiring a public key in the key pair and a source code of the application program, and compiling the source code by using network assembly to obtain an original byte code; the key pair is the same as a key pair in a second device, and the second device is a device for deploying the application program; generating a symmetric key based on the public key, encrypting the original byte code by using the symmetric key to obtain an encrypted byte code, and encrypting the symmetric key by using the public key to obtain an encrypted symmetric key; and rewriting the code section in the original byte code to generate a rewritten byte code of which the function section is the same as that of the original byte code. Function code logic in a code section of the rewritten byte code meets a function statement in a function section; and writing the encrypted byte code, the decryption logic of the encrypted byte code and the encrypted symmetric key into the self-defined section of the rewritten byte code to obtain an encrypted program package.

The present invention discloses a software security assessment method, system, and readable storage medium. The method includes the following steps: extracting fingerprint features of third-party libraries in software delivery files; obtaining vulnerability information disclosed by the third-party libraries and extracting vulnerability features; calculating a vulnerability matching degree based on correlation comparison between the fingerprint features of the third-party libraries and the vulnerability features, and calculating a third-party library security score based on the vulnerability matching degree; obtaining the control flow of the program source code; calculating a source program security score based on the program's input validation, API calls, exception handling, and / or security features in the control flow; and calculating a software security score based on the third-party library security score and the source program security score, and using this score to assess the security of the software. The present invention solves the problem in related technologies of being unable to comprehensively detect security threats to program source code and referenced third-party libraries.