361 results about "Protection system" patented technology

The invention relates to a feature defense method and system in a network transmission process, and the method comprises the steps: intercepting a network transmission data flow in a migration channel of a virtual machine in real time, and building a bidirectional flow mirror image pipeline; performing deep protocol analysis and recombination on the original transmission message in the mirror image pipeline to obtain a structured traffic log of complete load information and metadata labels; based on a preset traffic feature set, extracting a memory paging transmission time sequence feature and a disk data block check code distribution feature from the structured traffic log, and constructing a first detection sub-vector; according to the invention, a high-precision virtual machine migration security protection system is realized.

The invention relates to the technical field of system security, in particular to a computer storage file protection system which comprises a risk analysis module, a dynamic encryption module, an authentication management module and a behavior monitoring module. According to the method, the response speed and the personalized protection level of the file security are improved by automatically collecting location, time and user information parameters and executing context risk logic analysis, the system can provide customized protection schemes for different security requirements by dynamically adjusting an encryption mechanism and the key length, and the security of the file is improved. The system is allowed to strengthen protection measures under the high-risk condition, resource use is optimized under the low-risk condition, unnecessary performance burdens are avoided, through real-time monitoring and behavior analysis, the system can recognize and respond to abnormal behaviors in time, unauthorized access and data leakage are effectively prevented, potential threats to sensitive information are reduced, and the safety of the system is improved. The overall security management capability of the system is improved, and the continuity and effectiveness of data protection are ensured.

The invention discloses a session key capture and security event analysis method, device, equipment and medium, and relates to the technical field of network communication and information security, a data security protection system is established, a probe service is deployed at a security event monitoring end, and an eBPF technology is utilized to capture a TLS session key in a network stack of an operating system according to analysis of a TLS handshake message; and the probe service combines time features, session features and the captured secret key to generate a mapping relation, and the mapping relation is stored into a persistent file. According to the method, the HASH structure is used for storing the secret key file, the mapping relation between the quintuple and the session time point and the mapping relation between the quintuple and the session secret key are increased, searching and symmetric decryption of the mapping relation between the encrypted traffic and the session secret key can be efficiently completed at the decryption server end, the decryption performance is greatly improved, meanwhile, the session generation time and the session secret key are stored in the HASH value, and the decryption efficiency is improved. The method can solve the problem that the old connection is released and the quintuple of the new connection and the old connection is consistent in a high-concurrency scene, and can improve the decryption accuracy.

A data protection system uses machine learning to detect the cyber-attacks on a data protection system in advance to notify the user of possible attacks and also instigate any counter attacks to the best possible extent. The system trains a support vector machine model (SVM) to recognize a malware, or other type of attack before it comes into action against the system. This model learns the parameters of hazardous files or code to prepare the best model of attributes of such files to help block the malware proactively. It uses several independent variables as features to gain more accuracy to the threat detection. Some of the parameters include: rate of data change (Drastic / High / Low), attack vulnerability history, resource usage history, performance metrics, application hit ratio, and the like.

The invention relates to the technical field of solid state disk security protection, in particular to a security protection detection method and system for a solid state disk, and the method comprises the following steps: obtaining a historical security monitoring log of the solid state disk, carrying out normalized fluctuation rule mining and reference behavior evolution, and constructing a normalized reference behavior model; identifying real-time access behavior data of the solid state disk; analyzing access modes of behavior storage units one by one according to the real-time access behavior data, and identifying real-time access behavior characteristics to generate real-time access behavior characteristics; and performing reference access deviation detection on the real-time access behavior characteristics according to the normalized reference behavior model, tracing an access position, and positioning a malicious access storage unit. Through a multi-layer and all-around intelligent protection system, the overall safety and stability of the solid state disk are improved.

The invention relates to a rail transit unmanned aerial vehicle data protection system and method, electronic equipment and a medium. The system comprises a grading and classifying module, a batch processing module and an encryption module which are connected in sequence. The grading and classifying module is used for carrying out classification and grading processing on the original data of the rail transit unmanned aerial vehicle and dividing the original data into key sensitive data and general data; the batch processing module carries out batch processing on output of the grading and classifying module, key sensitive data form a file needing to be encrypted, and general data form a plaintext file; the encryption module carries out encryption processing on the to-be-encrypted file output by the batch processing module to generate an encrypted file; the system further comprises an abstract calculation module connected with the batch processing module, a plaintext file and a file needing to be encrypted are subjected to abstract calculation through the abstract calculation module, and then the plaintext file and the encrypted file are sent to the wireless transmission module to be subjected to integrity verification. Compared with the prior art, the method has the advantages of classified protection, good safety, high flexibility and the like.

A process plant and industrial control system architecture includes a generalized compute fabric that is agnostic or indifferent to the physical location at which the compute fabric is implemented, includes one or more physical control or field devices located at one or more specific sites at which a product or process is being manufactured and further includes a transport network that securely provides communications between the compute fabric and the pool of physical devices. The compute fabric includes an application layer that includes configured containers or containerized software modules that perform various control, monitoring and configuration activities with respect to one or more devices, control strategies and control loops, sites, plants, or facilities at which control is performed, and includes a physical layer including computer processing and data storage equipment that can be located at any desired location, including at or near a site, plant, or facility at which control is being performed, at a dedicated location away from the location at which control is being performed, in re-assignable computer equipment provided in the cloud, or any combination thereof. This control architecture enables significant amounts of both computer processing and IT infrastructure that is used to support a process plant, an industrial control facility or other automation facility to be implemented in a shared, in an offsite and / or in a virtualized manner that alleviates many of the communications and security issues present in current process and industrial control systems that attempt to implement control with shared or virtualized computing resources set up according to the well-known Purdue model.The industrial control system architecture is protected via more secure and customizable techniques as compared to those used in Purdue model-based control systems. For example, communications between any (and in some cases, all) endpoints of the system may be protected via one or more virtual private networks to which authenticated endpoints must be authorized to access. Endpoints may include, for example, containerized components, physical components, devices, sites or locations, the compute fabric, and the like, and the VPNs may include mutually-exclusive and / or nested VPNs. External applications and services, whether automated or executing under the purview of a person, may access information and services provided by the system via only APIs, and different sets of APIs may be exposed to different users that have been authenticated and authorized to access respective sets of APIs.A configuration system operates within the compute fabric to enable a user to easily make configuration changes to the compute fabric as the user does not generally need to specify the computer hardware within the compute fabric to use to make the configuration changes, making it possible for the user to deploy new configuration elements with simple programming steps, and in some cases with the push of a button.

The invention discloses a firmware-level security protection system and method for a hard disk of industrial automation equipment, particularly relates to the technical field of storage security protection, and is used for solving the problem of abnormal tampering of firmware. According to the method, instruction calling, interface access and interrupt timestamps are collected in a sliding window, a behavior sequence set containing an instruction sequence, calling frequency and sensitive marks is constructed and compared with a reference sequence library, firmware-level judgment on operation abnormity, access border crossing and tampering risks is triggered based on a transfer relation and an offset index, and the operation safety is improved. The method comprises the following steps of: dividing firmware into a control domain, a data domain and a configuration domain, realizing minimum permission and dynamic isolation by relying on state and permission mapping and permission register and interface shielding, forming a flow from detection to isolation to closed loop recovery by combining protected segment integrity verification and local copy hot switching, writing an exception into a protected loop log area for threshold updating, and performing protection on the protected loop log area. And the tamper-proof performance, the operation safety and the maintainability of the firmware are integrally improved.

The invention relates to the technical field of power dispatching, in particular to a virtual power plant control system and method. Comprising a data fusion module, a dynamic optimization scheduling module, an intelligent prediction module, a user interaction module, a self-learning adaptive module, a cooperative control module, a safety protection module and a storage unit. Key information is accurately extracted; the dynamic optimization scheduling module is based on a deep reinforcement learning algorithm, fully considers various factors to generate a global optimal strategy, and overcomes the defects of local optimization; the safety protection module constructs a multi-layer protection system to guarantee the safety of the system; the user interaction module covers the functions of information display, demand response, service customization and the like, personalized demands of users are met, complex conditions of the energy market and power grid operation can be handled on the whole, the operation benefit and safety of the virtual power plant are improved, and popularization is facilitated.

The invention discloses an industrial personal computer with a UPS power-off protection function and a protection system thereof, and relates to the technical field of industrial personal computers, and the industrial personal computer comprises a protection case, a fixed base is installed at the bottom of the protection case, a battery is installed in the protection case, a chain type wire is arranged above the battery, and a management mainboard is arranged above the chain type wire. When the industrial personal computer runs, especially the industrial personal computer is placed in an environment with large vibration or impact, the multifunctional sliding block is driven by the fixing block to vertically press to drive the L-shaped clamping plate to horizontally extrude the fixing base, so that vibration energy can be effectively absorbed and dispersed. Through the design of the scheme, the reset springs and the rubber damping blocks in the L-shaped clamping plates are combined, and the double damping effect can be provided through the elastic effect of the springs and the buffering effect of the rubber damping blocks in the L-shaped clamping plates.

The invention discloses a cross-platform file transfer method in the mine field, which comprises the following steps: S1, mine file source identification and fluidization: docking an industrial internet platform, reading an original file generated by a specific business scene, and converting the original file into a file stream; s2, intelligent unified transcoding for the mining terminal: performing unified transcoding on the file stream through an intelligent transcoding engine; s3, encryption based on the mine data security level: carrying out encryption processing on the transcoded file; and S4, safe unloading driven by the mine service: receiving the encrypted transcoding file, and decrypting and decoding the encrypted transcoding file at a target mine terminal or a mine appointed storage node. According to the method, safe and efficient cross-platform transmission among mine multi-service systems is realized, the problem of mine terminal file compatibility is thoroughly solved, the file transmission and access efficiency in a mine weak network environment is remarkably improved, and a mine-level data security protection system is constructed.

The invention provides a data protection method and system in a cloud computing environment, and relates to the technical field of cloud computing, the protection method comprises the following steps: receiving a cloud hard disk application and to-be-stored data sent by a user side, and generating a logic disk according to the cloud hard disk application; classifying the to-be-stored data by using a pre-trained classification model, and generating first encryption strength according to a classification result; second encryption strength is calculated according to the data activeness of the to-be-stored data; performing weighted fusion on the first encryption strength and the second encryption strength to obtain a third reinforcement density, and setting encryption parameters according to the third reinforcement density, the encryption parameters including an encryption algorithm and a key length; the to-be-stored data is encrypted based on the encryption parameters and written into the physical disk corresponding to the logic disk, dynamic and flexible encryption of the data can be achieved, the encryption strategy can be automatically adjusted according to the actual situation of the data, and therefore the data protection effect and efficiency are improved.

The embodiment of the invention discloses a multi-level safety protection system and method based on an electric power internet of things operating system. The system comprises a security module, a firmware integrity verification module, a kernel protection module and a file encryption module. The security module is used for performing security protection on security startup, isolation, intelligence and network in the electric power internet of things operation system; the firmware integrity verification module is used for performing integrity check on firmware of the electric power Internet of Things operating system and protecting a kernel, a memory, process management and files of the electric power Internet of Things operating system at the same time; and thus, protection in the starting and running processes of the electric power internet-of-things operation system is facilitated. The security protection system is established on the underlying security of the electric power Internet of Things operating system, is beneficial to the construction of an omnibearing protection mechanism of the electric power Internet of Things operating system, and prevents the electric power Internet of Things operating system from being attacked and data from being stolen.

The invention discloses a control method and device of security and protection equipment, electronic equipment and a storage medium, the method is applied to a security and protection system, and the method comprises the following steps: front-end equipment sends a control instruction to a server; the server receives the control instruction and generates a first identifier corresponding to the control instruction; the server sends a control instruction and a first identifier to the first security and protection equipment; the first security and protection equipment receives the control instruction and the first identifier and executes the control instruction; the first security and protection equipment generates an execution result record after the control instruction is executed, and sends the execution result record and a first identifier to the server; the server receives the execution result record and the first identifier, and determines first execution time of the control instruction; and if the first execution time is less than the first preset time, the server generates a corresponding operation log according to the execution result record, and stores the operation log and the first identifier in a database of the server. By adopting the method provided by the invention, the operation stability of the security and protection equipment can be improved.

The invention relates to the technical field of data security of the Internet of Things, in particular to an edge data security protection system and method based on a security chip, and the system comprises edge equipment which is deployed at the edge of a network and is used for detecting or collecting original data; the security chip is embedded in or externally connected to the edge equipment, and an encryption engine and a security storage area are integrated in the security chip; the encryption engine is integrated with an encryption algorithm, and a secret key is stored in the secure storage area; the security agent software runs on a control system of the edge equipment and is in communication connection with the security chip, and the security agent software is configured with a security policy; wherein the security agent software is configured to receive original data, call an encryption engine of the security chip according to a security policy to encrypt the original data, generate protected data, and send the protected data to a cloud or a data center; or the original data is monitored, and safety measures are taken for the original data with risks.

An access device is disclosed. The access device includes a non-transitory computer readable medium that includes code for performing a method that includes receiving, from a user device, a digital certificate and a seed, and then encrypting the seed, and a first access device key with a public key from the digital certificate to form encrypted data. The method also includes transmitting, to the user device, the encrypted data. The user device decrypts the encrypted data using a private key corresponding to the public key to obtain the seed, and the first access device key, verifies that the seed received from the access device matches the seed sent to the access device, and encrypts a secret or derivative thereof with the first access device key to form an encrypted secret or derivative thereof. The method also includes receiving the encrypted secret or derivative thereof.

Systems, methods, and computer-readable storage media for pipeline modeling. A data protection system can include one or more processing circuits including memory and at least one processor configured to verify a state of cybersecurity of an entity based on one or more cybersecurity measures implemented by the entity at a time of a catastrophic incident and generate data comprising the state of the cybersecurity from cybersecurity incident data based on at least on at least one categorized incident and corresponding at least one claim. The at least one processor can determine at least one categorized incident corresponding with at least one claim corresponds to the catastrophic incident based on at least on the data, generate a claim data package comprising the data and the catastrophic incident, and provide the claim data package to a computing system.

Systems and methods for memory replay protection are disclosed. In an example, a system in the form of a device includes a processor, and a replay protection circuit coupled to the processor and including a memory interface circuit, wherein the replay protection circuit is configured to generate a message authentication code (MAC) from at least one block of data and to access the at least one of block of data via the memory interface circuit using ciphertext that is generated by the replay protection circuit in response to a plaintext memory address received from the processor.

The invention discloses a primary main wiring diagram on-site configuration method based on microcomputer protection, and relates to the technical field of power system microcomputer protection. Two-stage mapping from a grid position to a primitive identifier and two-stage mapping from the primitive identifier to a rendering handle are maintained in parallel in a nonvolatile memory through a double-page mirroring transaction; reading screen resolution, adaptively calculating blank space and grid scaling according to a residual pixel threshold value, and outputting global coordinates; monitoring virtual switching value change in an operation period, dynamically selecting local or whole-screen refreshing according to a dirty rectangle merging algorithm, and triggering a degradation strategy in combination with a comprehensive load score; the protection device can be safely and rapidly rearranged in a low-resource mode on site, a main wiring diagram is refreshed in real time, and the problems of factory returning upgrading, resolution ratio adaptation and refreshing lagging are solved.

A storage system has zones in solid-state storage memory, with power loss protection. The system identifies portions of data for processes that utilize power loss protection. The system determines to activate or deactivate power loss protection for the portions of data for the processes. The system tracks activation and deactivation of power loss protection in zones in the solid-state storage memory, in accordance with the portions of data having power loss protection activated or deactivated.

The invention discloses a power-down protection system and a power-down protection method, and relates to the technical field of computers, and the method comprises the steps that when a monitor obtains power-off indication information, it is indicated that abnormal power-down may occur, at the moment, a power-off request is immediately sent to a power manager, and when the power manager receives the power-off request, the power-off indication information is sent to the power manager; and immediately sending a data storage request to the first controller. And when the first controller receives a data storage request, the data cached in the first storage area of the storage device is brushed to the second storage area. The power manager can detect that the power supply voltage value drops to the preset voltage threshold value for a period of time after the abnormal power failure, and after the abnormal power failure, the power manager receives the power failure request earlier and immediately sends the data storage request, so that the first controller can execute the operation of refreshing the data as soon as possible, and the duration of refreshing the data can be prolonged.

The invention relates to the technical field of alternating current grid-connected operation countercurrent prevention, in particular to an alternating current countercurrent prevention intelligent switch. The system is composed of hardware and software, and comprises an intelligent anti-countercurrent architecture, an anti-countercurrent safe operation logic program, a switch and remote switch and protection system program, and a record display system. The switch has the functions of a switch and a remote switch, ensures that the switch is not closed under the condition that the frequency and the phase are not the same under the condition of alternating current countercurrent prevention, and is automatically closed when the condition is met, so that the system safety is effectively protected.

The invention belongs to the field of industrial control and computer data security, and particularly relates to a millisecond-level power failure data protection system for an industrial control panel. The invention discloses a millisecond power failure data protection system for an industrial control panel. The millisecond power failure data protection system comprises a core processing component, a real-time synchronous shadow memory component, a bus voltage monitoring component, a pre-entropy reduction logic control component, a nonvolatile storage component and a flight control bus arbitration component. The bus voltage monitoring assembly monitors a voltage drop trend and performs early warning, the pre-entropy reduction logic control assembly calculates a minimum data survival set according to energy entropy, the real-time synchronous shadow memory assembly constructs a synchronous shadow control domain and atomizes data, and the flight control bus arbitration assembly compulsively takes over a bus and freezes processor access at the moment of power failure. Atomized writing of data into the nonvolatile storage component is guaranteed. According to the invention, zero-delay data protection and millisecond-level hot start recovery at the moment of power failure are realized, and the data security and reliability of the industrial control equipment in a severe environment are enhanced.

An illustrative method includes a data protection system detecting an anomaly associated with a managed run-time environment; determining, based on the detecting the anomaly, that the managed run-time environment is possibly being targeted by a security threat; and performing, based on the determining that the managed run-time environment is possibly being targeted by the security threat, a remedial action associated with the managed run-time environment. The performing the remedial action may include identifying a recovery dataset generated prior to the detecting the anomaly, the recovery dataset for data associated with the managed run-time environment and stored by a storage system, and converting the recovery dataset into a protected recovery dataset that cannot be deleted without a specific instruction provided by an authorized entity.

The invention relates to a system calling ptrace-based operating system micro-service security protection system and method, which are characterized in that the running state of micro-service is monitored in real time through calling of a ptrace system in a user state, and dynamic integrity verification is realized in combination with an SM3 hash algorithm. The method comprises the following steps: calculating an SM3 hash value of a code segment of a micro-service when the micro-service is started, storing the SM3 hash value as a static reference, periodically reading memory data of a target process through ptrace in a running process, recalculating a dynamic hash value, and comparing the dynamic hash value with a reference value; if it is detected that the hash values are inconsistent, it is judged that code injection attacks exist, and a defense mechanism is triggered. According to the method, the system stability risk caused by kernel module injection is avoided, meanwhile, real-time interception of tampering attacks during operation is achieved through high-frequency dynamic comparison, the lightweight design enables the method to be suitable for high-reliability scenes such as spaceflight with limited resources, the integrity of a micro-service code segment can be guaranteed, low performance loss of the system can be maintained, and the system reliability is improved. The balance blank between dynamic defense and system stability in the prior art is effectively filled.

The embodiment of the invention relates to the technical field of network security, and discloses a security protection method, a security protection system and electronic equipment. The security protection method applied to the terminal comprises the steps that when a target operation for a local sensitive file occurs, the target operation which occurs currently is recorded, an association relationship with the local sensitive file is generated, and after the target operation is completed, the local file of the terminal can change; and when the file is sent out, managing and controlling the operation of the currently sent-out file according to the recorded target operation and the association relationship. According to the method and the device, the data security of the terminal is guaranteed by more comprehensively and accurately managing and controlling the file outgoing on the terminal under the condition of not influencing the user experience, so that the construction of the zero-trust architecture is better supported through the safer terminal.

The invention belongs to the technical field of information security and equipment protection, and particularly relates to an anti-disassembly safety protection system, equipment and an anti-disassembly safety protection method. The anti-disassembly safety protection system provided by the invention comprises an anti-disassembly module and an equipment end, and the equipment end comprises an equipment power supply system, an equipment anti-disassembly part and an equipment system; the equipment power supply system is configured to supply power to the anti-disassembly module; the anti-disassembly module is configured to stop supplying power to the equipment system if detecting that bidirectional power supply with the equipment anti-disassembly part is abnormal; the equipment system is configured to be in communication connection with the anti-disassembly module, and if the communication connection result is abnormal connection, the equipment system enters an automatic locking state; and if the connection is detected to be normal, verifying the information to be verified in the anti-disassembly module, and if the verification result is that the verification is abnormal, entering an automatic locking state. According to the anti-disassembly safety protection system provided by the invention, the safety of the equipment during illegal disassembly can be effectively improved.

The invention discloses a test control method and system for a direct-current power supply, and relates to the field of simulation testing, and the method comprises the steps: constructing a three-dimensional adaptive model to complete the matching calibration of system software and hardware, and achieving the load calibration through the comparison of dynamic load simulation and actual measurement data; in the testing process, a three-stage starting mechanism is adopted to power on step by step, fault protection is configured, and parameter scanning and real-time recording are executed according to a preset mode and a testing point; a double-closed-loop feedback mechanism is introduced, an inner loop adjusts output parameters, and an outer loop predicts power grid disturbance and performs advanced compensation; a safety threshold value is dynamically generated in combination with real-time environment data, linkage protection of approaching early warning and overrun protection is achieved, and a reliable effective data set is formed through fusion processing and double verification of multi-source test data. The system has the advantages that the precision and intelligence of the whole test process are realized through dynamic load simulation, a multi-level safety protection system is constructed through a three-level starting mechanism, and the precision, safety and data value of the test are comprehensively improved.

The invention belongs to the technical field of embedded system information security, and particularly discloses a program control flow protection system and method based on stack data confidentiality and integrity. According to the method, the key stream is generated and managed during memory access of the special hardware for micro-architecture level design, and quick encryption and decryption calculation of the stack key data is realized through the exclusive-or operation of the key stream and the stack data. The stack data confidentiality protection supports the burst transmission property of an AHB-Lite bus on which stack data transmission depends, and the execution overhead of a program control flow protection method is reduced; on the basis of data encryption, MAC codes are calculated and verified when stack data are written in and read out based on a stack data integrity verification architecture of the MAC codes, real-time detection of tampering of stack key data is achieved, and program control flow abnormity is found in time. Through parallel encryption and decryption and integrity verification of the stack data, protection of the program control flow is realized from the aspect of stack data protection.

The invention discloses a data protection system for a PCIe (Peripheral Component Interconnect Express) switch. The data protection system comprises a CRC (Cyclic Redundancy Check) module, a data verification module and an error monitoring management module, wherein the CRC verification module is in communication connection with a non-transparent bridge port, and / or an upstream port, and / or a downstream port of the PCIe switch and is used for carrying out CRC verification on data received and sent by the ports, and the data verification module is in communication connection with an internal bus of the PCIe switch and is used for verifying a data packet transmitted on the internal bus and sending the verified data packet to the PCIe switch. And the error monitoring management module is in communication connection with the verification module, and is used for monitoring the data packets sent and received by the ports to identify illegal packets, recording the number and types of the illegal packets, and feeding back according to the types of the illegal packets. The data protection system can be used for a non-transparent bridge port and the like of a PCIe (Peripheral Component Interconnect Express) switch, performs data protection on the whole transmission process of a data stream, ensures the integrity of the data, and improves the reliability.