87 results about "Protocol specification" patented technology

The invention discloses a stateful protocol fuzz testing method and system based on a large model construction state machine, and the method comprises the steps: firstly preprocessing a protocol specification document, guiding an information large model to analyze through cue words to obtain state machine information, constructing an initial state machine through the state machine large model, and initializing a message dictionary; secondly, protocol testing is carried out based on an initial state machine, a prompt word is input into a large testing model to understand a flow log, a message field supplement and improvement dictionary is obtained, message request fields and response codes in the message dictionary are combined, the initial state machine is improved, and a fine-grained state machine is obtained; and finally, on the basis of a fine-grained state machine, inputting cue words, analyzing a blind area covered by the current test by an analysis large model, and guiding a fuzzy tester to preferentially test an uncovered state which is most likely to trigger the deep vulnerability, thereby completing the fuzzy test. According to the method, the fuzzy device directionally tests the potential test state area, and accurate and efficient fuzzy testing is carried out.

The invention discloses a protocol conversion method, which comprises the steps of receiving an original data frame from a charging power supply, extracting a protocol feature vector of the original data frame through a pre-trained machine learning model, and matching a first protocol type of the original data frame from a protocol feature library based on the protocol feature vector; calling an analysis rule base corresponding to the first protocol type to deconstruct an original data frame into intermediate layer data irrelevant to the protocol; and calling a field conversion rule from a protocol mapping table associated with the second protocol type, dynamically recombining the standardized field label in the intermediate layer data into a target data frame structure, and injecting a protocol control character originating from a target protocol specification to generate a target data frame conforming to the second protocol type. The method has the capability of adaptively learning a new protocol, reduces the manual intervention and maintenance cost, and improves the compatibility, communication reliability and overall operation efficiency of a battery replacement system for vehicles of different brands.

The invention provides an electricity meter multi-protocol self-adaptive docking method and system and a medium. The method comprises the following steps that an application system sends a control request to a core processing unit; the protocol router obtains a protocol plug-in according to the protocol type, and the core processing unit calls a standard interface in the basic protocol interface packet according to the operation instruction; implementing the standard interface by the protocol plug-in, and generating a message conforming to a protocol specification; the core processing unit issues the message to the target electric meter according to the target equipment address; the target electric meter reports a corresponding original message to the core processing unit according to the message content; the protocol router identifies a protocol type according to an original message and obtains a protocol plug-in, and the core processing unit calls a standard interface in the basic protocol interface packet; the protocol plug-in realizes the standard interface, and performs frame format verification, data integrity verification and message analysis on an original message in sequence; and the core processing unit extracts the standardized data after message analysis and pushes the standardized data to an application system.

The invention relates to the technical field of network communication, in particular to a high-efficiency message routing method of an independent gateway controller, which comprises the following steps of: constructing a routing table by analyzing network topology in a mode of combining a dynamic routing protocol with static configuration, mapping and storing a target address and a forwarding path, and transmitting a message to the gateway controller; the method comprises the following steps of: analyzing a source protocol frame structure to extract effective load data, repackaging the data according to a target protocol specification, realizing link redundancy by adopting a ring network protocol, automatically switching a standby link and maintaining an equivalent path when a main link fails, and obtaining a flow trend and performance data by monitoring a network load and an equipment state in real time. And dynamically adjusting a routing strategy according to the data, and periodically generating a performance report to obtain a continuously optimized routing scheme. According to the method, the problems that the routing table query efficiency is low and the routing strategy cannot be dynamically optimized according to the real-time state of the network in the traditional method are solved.

The invention discloses an autonomous evolution type 5G protocol fuzzy test system based on a large language model, and the system comprises a protocol extraction unit which employs the large language model to analyze a 5G protocol specification document, and extracts structured protocol knowledge elements containing a message format, state machine logic and parameter constraints; the vulnerability analysis unit generates a potential vulnerability description list through big language model reasoning based on the knowledge elements; the test strategy generation unit drives a large language model to generate a targeted test case based on protocol knowledge, vulnerability description and historical test knowledge in the dynamic test knowledge base; the test execution unit executes the use case and captures a result; and feeding back an analysis result of the internalization unit, extracting a causal rule, generating new test knowledge and feeding back the new test knowledge to the knowledge base. According to the system disclosed by the invention, test targets and resources can be autonomously scheduled according to continuous updating of the knowledge base, so that the test process has an iterative optimization capability, and full-process automation and intelligentization of 5G protocol fuzzy testing are realized.

The invention provides a method for testing an Internet of Vehicles protocol, and the method comprises the steps: obtaining a test parameter configured by a user through a user interaction layer, and converting the test parameter into structured configuration data; the protocol definition model analyzes the structured configuration data based on a predefined protocol specification to generate a test case definition file; the message simulator generates simulation message data according to the message template in the test case definition file; the automatic test framework executes the simulation message data to obtain a test result; and the user interaction layer formats the test result into a readable report and outputs the readable report. According to the invention, test automation and hardware removal are realized, and the test efficiency, accuracy and protocol adaptability are greatly improved.

This application provides a method, apparatus, storage medium, and device for network protocol fuzzing. The method introduces retrieval-enhanced generation technology into protocol fuzzing. By retrieving external knowledge, it provides context for a large language model, ensuring the accuracy of protocol specifications and thus improving the accuracy of generated test cases in protocol testing. Simultaneously, it utilizes the large language model to analyze the out-degree value of the state of the seed to be mutated, and then intelligently allocates test resources based on the out-degree value, thereby enhancing the efficiency of state space exploration. Thus, by combining the large language model with external knowledge retrieval capabilities, test cases that conform to protocol specifications and cover more protocol paths are generated, effectively improving the effectiveness and coverage of network protocol security testing.

The embodiments described herein implement a protocol decoder tool designed by a hardware engineer in a hardware description language (HDL) in a simulator tool for testing and / or in a signal analysis system for decoding protocols in real-time. For example, a user (e.g., hardware engineer, hardware designer, protocol designer) may design a protocol using an HDL and design a protocol decoder tool for decoding the protocol in the HDL. Register transfer level (RTL) files with protocol decoder logic in the HDL may be converted from the HDL to a second language by a converter, compiled into a decoder module by a compiler, and executed in a signal analysis system as the protocol decoder tool. As such, errors in misinterpretation of protocol specifications may be reduced.

The application relates to the fields of network communication anomaly detection and intelligent operation and maintenance, in particular to a behavior reasoning and AI intelligent disposal method and system for communication anomalies, which comprises the following steps: collecting communication interaction time sequence data and protocol stack resource state data; constructing an ideal communication state model based on interface contract analysis results, protocol specification analysis results and queuing rules, and generating an ideal communication track benchmark according to a service request sequence in a preset time window; respectively performing fault attack knowledge injection and service load fluctuation rule injection to generate abnormal scene simulation tracks and service tide simulation tracks; performing difference calculation on real observation features and the ideal communication track benchmark to obtain a real residual space, and generating an abnormal theoretical residual space and a service tide theoretical residual space; generating abnormal type results and root cause results based on the topological similarity between the residual spaces, and outputting corresponding intelligent disposal instructions; and the application can accurately identify high-concurrency legal tides and real attacks.

The invention discloses an industrial control private protocol vulnerability mining method based on protocol analysis. The method comprises the steps of 1, preprocessing industrial control protocol flow data; and 2, analyzing the target protocol by using the byte change characteristics and the heuristic rule. And 3, generating a test case of the target protocol by using the analysis specification. And 4, reconstructing a protocol state machine by using the state conversion track of the flow, and guiding the protocol to reach a target state for testing. And 5, tracking the state of the detected target and monitoring and positioning the triggered vulnerability through a network. According to the method, the analysis accuracy of the private protocol specification can be effectively improved, the test case acceptance rate, the test target anomaly rate and the state coverage rate in the fuzzy test process are remarkably improved, and meanwhile, more protocol states can be efficiently tested under the condition of the same number of test cases so as to mine more potential vulnerabilities in the protocol.

Provided in the present application are a communication method and an apparatus. The method comprises: a first communication apparatus receives configuration information on a first cell, then receives a first reference signal on a first reference signal resource and receives a second reference signal on a second reference signal resource, and then may send channel state information (CSI), wherein the RAT used by the first cell is a first RAT, the configuration information can be used for configuring the first reference signal resource and the second reference signal resource, the second reference signal resource complies with the protocol specifications of a second RAT, and the CSI is obtained on the basis of the first reference signal and / or the second reference signal. The first reference signal resource and the second reference signal resource are configured for the first communication apparatus, such that the first communication apparatus can measure the reference signals of different RATs, so as to help to improve the performance of beam management / channel measurement, thereby reducing reference signal resource overheads, and improving spectrum sharing efficiency.

This invention discloses an IoT fuzzing method based on LLM-guided and FSM dynamic inference, belonging to the field of IoT network security and software testing technology. Addressing the problems of low coverage and inaccurate state machine inference in current IoT protocol fuzzing, this invention first constructs an initial FSM by combining IoT protocol specifications and captured traffic data. Then, it generates a large number of test cases through mutation of seed test cases for fuzzing testing. Features are extracted from device responses, and state identification is performed by calculating similarity. When a new state appears, the FSM and state fingerprint database are updated. When coverage becomes a bottleneck, LLM-guided path inference is used to generate extended sub-FSMs and test cases, which are then executed. The FSM is then corrected based on the test results. This invention enables high-precision automated construction of IoT protocol state FSMs, improving test coverage and enhancing the efficiency and accuracy of vulnerability discovery.

The invention relates to the technical field of data link communication abnormal flow detection, in particular to a high-speed aircraft data link communication abnormal flow detection method and system, and the method comprises the steps: judging a communication message which accords with a preset data link communication protocol specification as a protocol layer compliance message, and carrying out the analysis to obtain a formation cooperation instruction; collecting multi-source task context information of a local high-speed aircraft to generate a task execution field snapshot; projecting the formation cooperation instruction to the task execution field snapshot for comparison and analysis to obtain a multi-dimensional semantic comparison result; if all the multi-dimensional semantic comparison results are passed, the corresponding communication flow is judged to be task-driven normal collaborative flow; and if the judgment result of the multi-dimensional semantic comparison result is that the flow does not pass, judging the corresponding communication flow as the intention camouflage type spoofing abnormal flow. The deception traffic of which the protocol layer is compliant but the tactical intention is abnormal is effectively identified, so that the accuracy of high-speed aircraft data link communication abnormal traffic detection is improved.

The invention relates to the technical field of integrated circuits and provides a verification platform for PCIe6. The invention provides a universal physical layer intellectual property core verification platform under PCIe bus protocol specifications, which can adapt to the improvement of the highest transmission rate and the maximum transmission bandwidth supported by the PCIe6 protocol, and can adapt to the customization requirements from the interface bandwidth, the clock mode and the working mode to the physical interface version proposed by rapid iterative development; the object-oriented expandability and the support for multiple modes and polymorphism are provided; the loss that a set of special directional verification platform needs to be developed again after the chip design or verification scheme is adjusted each time is avoided, the updating cost of project early-stage development and middle and later-stage iterative maintenance is reduced, the human input of the whole project is saved, and the chip research and development period of the whole project is shortened.

The invention belongs to the technical field of maintenance platforms, and provides a test maintenance platform and a maintenance method for a combiner box measurement and control all-in-one machine, and the maintenance platform is provided with a power module, an interactive interface, a maintenance module, a communication conversion module, a host and a test module. The power module is connected with the interaction interface, the maintenance module and the host. The communication conversion module is provided with a plurality of conversion interfaces of different specifications, and each interface is provided with a plurality of protocols and can be connected with the combiner box measurement and control all-in-one machine and convert signals of the combiner box measurement and control all-in-one machine into target signals. The host is connected with the communication conversion module through the conversion interface, and the interaction interface and the test module are connected with the host. The components are integrated on the maintenance platform, various testing and maintenance functions are integrated, and the operation process is greatly simplified; the platform design gives consideration to operation convenience, so that technicians can complete the whole process from fault diagnosis to maintenance on a unified interface.

The invention discloses a network flow generating and repairing method based on protocol constraint. The method comprises the following steps: analyzing an original traffic capture file, extracting basic features through stream-level recombination and session segmentation, and mapping a continuous time sequence and a discrete protocol field to a uniform feature space; and on the basis, constructing a diffusion type network flow generation model to capture a statistical attribute and time sequence dependency relationship of the network flow. In the generating or repairing process, a protocol state machine is constructed, protocol constraint is introduced in the reverse denoising stage, the sampling process is constrained through a legality guiding mechanism, and protocol logic violation in the generating process is avoided. And finally, through feature inverse mapping and virtual protocol stack state maintenance, reconstructing to obtain network flow data which meets a communication protocol specification and can be correctly analyzed by a real protocol stack. According to the method, the generation and repair of the network traffic can be realized under a unified framework, and the correctness of a result in protocol semantics is ensured.

The present application belongs to the technical field of network security and artificial intelligence, and provides a large language model driven password protocol automatic formalization modeling method and system, acquires a natural language protocol specification document, and performs preprocessing; according to the priority order of a message block, a verification block and a calculation statement, a large language model extracts corresponding semi-structured intermediate representations from text blocks; all intermediate representation statements are scanned at one time by using the large language model, protocol functions and symbols are identified and stored in a knowledge base, the large language model is driven in units of intermediate representation statements to be refined one by one, and global context and local context are extracted; the completely structured intermediate representations, a protocol role set and the updated knowledge base are taken as inputs to perform deterministic one-to-one mapping with formal verification tool code, and conversion is completed. The present application can automatically generate symbol model code which can be directly input into a formal verification tool.

This invention relates to the field of network security technology, and more particularly to a method and apparatus for adversarial training and defense of a network intrusion detection model. The method includes: dynamically outputting attack strategies based on traffic feature vectors and current strategy parameters using an adversarial strategy generator; imposing restrictions on perturbations in the problem space through adversarial domain constraints to ensure that the generated adversarial samples conform to network protocol specifications and feature logic consistency requirements; and forming a dynamic game mechanism by alternately executing adversarial training and strategy parameter optimization between the intrusion detection model and the adversarial strategy generator. This allows the model to gradually improve its defense capabilities against mixed threats in the feature space and problem space as it continuously adapts to increasingly complex attack patterns, ultimately achieving a synergistic improvement in the robustness and generalization of the intrusion detection model.

A test and measurement system comprises one or more test and measurement devices, wherein at least one test and measurement device includes one or more ports for connecting to a device under test (DUT), one or more user interfaces, a generative artificial intelligence (AI) model connected to the one or more test and measurement devices, and one or more processors to provide an application programming interface (API) of the generative AI model, receive a protocol specification and provide the protocol specification for the generative AI model, receive configuration settings for a bus operating according to the protocol via one of the one or more user interfaces, provide the configuration settings for the generative AI model, receive a decoder file from the generative AI model, and provide the decoder file on the test and measurement device.Using the decoder file on the test and measurement device to test a DUT.

This invention discloses an automatic identification method for PCB debug interfaces based on multi-feature fusion, comprising: establishing electrical connections between the debug interface pins of the PCB under test and a parameter measurement unit and a programmable protocol generator respectively through a multiplexed switch matrix; performing static electrical feature measurements on the debug interface pins using the parameter measurement unit to obtain electrical feature data; comparing and matching the electrical feature data with a pre-stored interface feature database to generate at least one candidate interface type hypothesis; automatically configuring a corresponding protocol excitation signal for each generated candidate interface type hypothesis, and applying the protocol excitation signal to the corresponding candidate pin through the multiplexed switch matrix; monitoring the response signal of the candidate pin under excitation, and confirming or excluding the candidate interface type hypothesis based on whether the response signal conforms to the expected protocol specification of the current candidate interface type; and outputting the finally confirmed interface type and its corresponding pin definition.

The invention discloses a man-machine interaction method and system based on MCP large language model dynamic graphical user interface generation, and relates to the field of man-machine interaction, and the method comprises the steps that an intelligent back end maps an identified user interaction intention into a structured MCP message frame through a protocol encoder; after the rendering front end receives the message frame, a virtual component structure tree is generated through strong type protocol specification verification, an interface updating patch is obtained through difference calculation, and a local component is dynamically instantiated to generate a real-time interaction interface; then capturing user operation, packaging the user operation into a state feedback message, returning the state feedback message to a rear end, triggering incremental reasoning of the model to determine whether to update an interface, and forming an intention-protocol-rendering-feedback interactive closed loop; according to the method, dynamic interaction of generation and evolution of a large language model interface along with natural language dialogue is achieved, the stability and safety of generation are improved through protocol layer strong verification, and low-delay response and deep man-machine cooperation are achieved through a difference rendering and event feedback mechanism.

The application discloses a kind of based on meta-protocol dynamic mapping and project resource scheduling method and system, the method is by defining unified meta-protocol specification, the core of configuration and verification algorithm and extended information, generate standard meta-protocol file.Based on this, automatically match or generate algorithm adaptation plug-in, and detect repair running dependence;With data interaction rule and historical fault record, generate and test intelligent call agent, complete the access of algorithm.In the stage of data interaction, the trained parameter prediction model is used to dynamically optimize the conversion parameter, and the precise data mapping and iterative optimization are executed.In the resource scheduling stage, the running environment demand, resource consumption trend and real-time state are comprehensively considered, the resource demand peak is actively predicted by time series prediction model, and dynamic resource allocation and isolation are executed based on the prediction result.The application realizes algorithm access automation, data interaction intelligence and resource scheduling prediction, significantly improves the integration efficiency, data accuracy and system stability.

This disclosure provides a security detection method, apparatus, and device for communication protocols, comprising: obtaining the structure of the communication protocol through unsupervised learning and structural parsing based on bidirectional raw traffic data; utilizing sequence alignment algorithms to find common patterns and variable fields among packets in different protocol session streams; identifying high-frequency byte sequences that consistently appear in application layer payload data; dividing the payload of a single packet into multiple fields and inferring the semantic type of each field; and constructing a protocol syntax tree for the communication protocol; then, based on the protocol syntax tree, modeling normal communication behavior to obtain a behavioral baseline of the behavioral patterns under normal communication behavior; and performing anomaly detection on real-time traffic obtained from the communication network based on the protocol syntax tree and the behavioral baseline. Thus, without prior knowledge of the detailed protocol specifications, it can intelligently learn from communication behavior to discover potential threats, reducing the application limitations of this security detection method.

The invention discloses an information determination method and device and a readable storage medium, relates to the technical field of communication, and aims to ensure the accuracy of terminal measurement. The method comprises the following steps: determining the TCI State of the non-periodic layer 1 cross interference measurement resource based on at least one of the following modes: protocol stipulation; a first indication of a network device. The embodiment of the invention can ensure the accuracy of terminal measurement.

A test and measurement system includes one or more test and test instruments, one or more user interfaces, a generative artificial intelligence (AI) model connected to the one or more test and test instruments, and one or more processors, the system comprises one or more test and measurement instruments having at least one test and measurement instrument for connection to one or more ports of a device under test (DUT), and one or more processors for providing an application programming interface (API) of a generative AI model, the method includes receiving a protocol specification and providing the protocol specification to a generative AI model, receiving configuration settings of a bus operating according to the protocol through one of the one or more user interfaces, providing the configuration settings to the generative AI model, receiving a decoder file from the generative AI model, deploying the decoder file to a test and measurement instrument, and transmitting the decoder file to the test and measurement instrument. The DUT is tested using the decoder file on the test and measurement instrument.

This invention discloses a minimal recursive delegated communication method and system, belonging to the field of computer network communication. The system contains only two protocol primitives, `register` and `push`, and achieves complete dynamic discovery and task delegation functions through delegated interaction between gateway entities and protocol entities. The gateway entity is deconstructed into three protocol entities: server, brain, and agent. It supports topology reversal where the gateway itself is employed by a higher-level gateway as a protocol entity, achieving infinite recursion and indistinguishability of the delegate chain. The method employs a three-layer abstraction system (L0 / L1 / L2) to separate protocol specifications, extension mechanisms, and application semantics, allowing for the emergence of organizational forms such as bureaucracy and market mechanisms through replaceable employment decision rules. This invention demonstrates the minimal completeness of delegated networks and is applicable to scenarios such as AI multi-agent collaboration, IoT device management, and social organization simulation.

The application provides a Zabbix monitoring system, a data access method and an electronic device. A collection processing module, especially a Zabbix index collection receiving module, is added between a Zabbix service module and an OTLP protocol receiving system. The Zabbix index collection receiving module acquires and parses an index file from the Zabbix service module in real time, acquires various Zabbix monitoring index data, performs data conversion on the Zabbix monitoring index data according to an OTLP index protocol specification, generates target monitoring index data conforming to the OTLP index protocol specification, and outputs the target monitoring index data to a corresponding OTLP protocol receiving system. In this way, the application can output the indexes generated by the Zabbix monitoring system as unified standard OTLP index data, seamlessly connect to devices supporting OTLP, and realize seamless access of Zabbix to the OTLP ecology.

The invention relates to the technical field of network security, in particular to a network intrusion detection model end adversarial training defense method and device, and the method comprises the steps: dynamically outputting an attack strategy through an adversarial strategy generator according to a traffic feature vector and a current strategy parameter. Limitation is applied to problem space disturbance through adversarial domain constraints, and it is ensured that generated adversarial samples meet the requirements of network protocol specifications and feature logic consistency. On the basis, a dynamic game mechanism is formed for an intrusion detection model and a confrontation strategy generator by alternately executing confrontation training and strategy parameter optimization, so that the model gradually improves the defense capability for mixed threats of a feature space and a problem space in the process of continuously adapting to increasingly complex attack modes; finally, collaborative improvement of robustness and generalization of the intrusion detection model is realized.

This invention relates to the field of abnormal traffic detection technology in data link communication, specifically a method and system for detecting abnormal traffic in high-speed aircraft data link communication. The method determines communication messages conforming to a preset data link communication protocol specification as protocol-layer compliant messages and parses them to obtain formation coordination instructions. It then collects multi-source mission context information from the high-speed aircraft to generate a snapshot of the mission execution scene. The formation coordination instructions are projected onto the snapshot for comparison and analysis to obtain multi-dimensional semantic comparison results. If all multi-dimensional semantic comparison results are passed, the corresponding communication traffic is determined to be mission-driven normal coordination traffic. If the multi-dimensional semantic comparison results are failed, the corresponding communication traffic is determined to be intention-masking deception abnormal traffic. This effectively identifies deception traffic that is protocol-layer compliant but has abnormal tactical intent, thereby improving the accuracy of abnormal traffic detection in high-speed aircraft data link communication.

This application relates to a query processing method, apparatus, computer device, storage medium, and computer program product. The method includes: retrieving query content and skill documents matching the query content; determining an adapter matching the skill document based on the protocol specifications followed by the skill document; extracting skill metadata such as server endpoints and call parameters from the skill document by parsing it; and calling the skill tools provided by the server endpoint through the adapter according to the underlying call logic and call parameters to obtain the query results corresponding to the query content. Using the above method can improve the flexibility of query processing.