4 results about "Risk vulnerability" patented technology

The application relates to an AI-based application code vulnerability detection and repair method in a low-code platform, and the application comprises the following steps: collecting and aligning multi-modal context signals, generating a business intention anchor vector by using a lightweight intention encoder, fusing vulnerability features through cross-modal attention, searching a dynamic template library, and constructing an intention constraint repair space; a three-element utility function is used to realize multi-objective trade-off of safety, continuity and business intention; finally, a repair suggestion code and an explanation text consistent with the business constraint are output, and the intention understanding capability is optimized through user feedback loop. The application can significantly improve the script security and business continuity of the low-code platform, automatically generate vulnerability repair suggestions consistent with the business intention of the developer, promote the dynamic improvement of the self-adaptation capability of the platform, and significantly reduce the risk of unintended behavior caused by automatic modification while ensuring the effective elimination of high-risk vulnerabilities.

This invention discloses a method for ensuring wind resistance safety during the segmented hoisting of stiffening girders for long-span suspension bridges at sea. It relates to the field of wind resistance technology for hoisting, including pre-construction measures based on bridge design parameters and construction organization plans. By establishing a wind resistance safety assurance system, and in actual use, creating a digital twin model covering the entire construction process and conducting multi-condition simulations in advance, this method can identify wind-induced risk vulnerabilities at each stage from hoisting to closure, transforming passive response into proactive anticipation. This greatly ensures the safety of personnel, equipment, and the structure. Simultaneously, refined management reduces unnecessary work stoppages, helps seize construction windows during limited typhoon breaks, shortens the overall construction period, facilitates real-time monitoring of each stage, and allows for the management, visualization, and storage of wind resistance safety assurance data and corresponding analysis results. Furthermore, it facilitates wind resistance safety assurance management through internet cloud control, improving the level of intelligence in wind resistance safety assurance management.

This invention relates to the field of network testing technology and discloses a method for comparing and verifying penetration test results with a vulnerability database. The method includes the following steps: performing attack chain topology analysis on the original penetration test results, extracting each attack node and the path dependencies between nodes, and constructing a directed acyclic graph (DAG) of the attack chain; for each attack node in the DAG, retrieving a set of hit candidates from the vulnerability database using a three-layer progressive comparison method. The purpose of this method is to address the problem that existing comparison and verification methods forcibly decompose penetration test results into discrete vulnerability entries, severing the real node path dependencies and attack chain topology. This results in an inability to accurately quantify the actual threat of vulnerabilities in the actual attack path by combining real-world environmental conditions and topological locations, leading to the underestimation of high-risk vulnerabilities on critical paths and inaccurate remediation priorities.

The application provides a kind of full-link penetration test method and system of power grid key equipment, it is related to electric power information security technical field.The method comprises: the layered analysis of the network link of power grid key equipment is carried out to the network security of equipment, determines the potential threat source of each network level corresponding key equipment;Based on the potential threat source, call the pre-constructed full-link vulnerability module resource pool to carry out the full-link penetration test of power grid key equipment;Each network level includes master station layer, communication layer and terminal layer;The full-link vulnerability module resource pool is obtained by modular encapsulation of the vulnerability exploit chain information formed between each network level by high-risk vulnerability module;High-risk vulnerability module is screened out based on the modular penetration test of different services on each network level corresponding key equipment.The application solves the problem that the existing security vulnerability mining has insufficient detection capability and incomplete vulnerability mining when facing new network attacks.