24 results about "Security analysis" patented technology

The invention relates to the technical field of data security, can be applied to business scenes of financial science and technology, medical health and the like, and discloses a security processing method, device and equipment oriented to software development and a medium. Obtaining an architecture design document to identify potential safety hazards and generate design improvement suggestions; generating a code based on the business logic description and the design improvement suggestion, and completing security detection and repair to obtain a processed code and a code repair record; performing security test on the processed code and recording a test result; collecting data of exception identification, hidden danger identification, code detection and repair and security test to update the security knowledge base; and generating a security analysis report based on the demand exception list, the design improvement suggestion, the code repair record and the test result. According to the invention, through a security identification and restoration process from demand to test, early discovery of security problems, linkage processing and knowledge self-updating are realized.

The invention provides a safety analysis method based on a SelfTargetSIS problem. The method comprises the following steps: modeling a solution target of the SelfTargetSIS problem into explicit search on a message set, an allowable vector set and a challenge vector set; estimating a first search complexity in the classic model under a random oracle model; estimating a second search complexity in the quantum model under a random oracle model; and determining the minimum value of the first search complexity and the known classical optimal attack complexity as the effective attack complexity under the classical model, and determining the minimum value of the second search complexity and the known quantum optimal attack complexity as the effective attack complexity under the quantum model, thereby performing security evaluation on the anti-quantum signature. According to the method, an explicit search path based on a message set, an allowable vector set and a challenge vector set is supplemented and quantified, and the attack cost in the real world can be reflected more comprehensively.

The application discloses a routing protocol analysis method and device, equipment and a storage medium. After obtaining a routing protocol to be analyzed, an attack point in the routing protocol to be analyzed is identified, the attack point is an attack purpose of an attacker, the path of the attack to be performed by the attacker to achieve the attack purpose is reversely searched in the routing protocol to be analyzed starting from the attack purpose of the attacker, a detection rule is generated for the attack path, and the routing protocol to be analyzed is analyzed based on the generated detection rule. The attack path is obtained by comprehensively searching in the routing protocol to be analyzed starting from the attack point. The detection rule is obtained by analyzing the attack path. The routing protocol is analyzed according to the detection rule. The possible vulnerabilities in the routing protocol can be comprehensively analyzed.

Systems and methods are disclosed for software security analysis. In certain embodiments, a method may comprise identifying a set of potential security vulnerabilities, comparing the potential vulnerabilities to a catalog identifying elements on a client system, and generating risk mitigation advice based on potential security vulnerabilities matching an element in the catalog. The method may include evaluating a data field of a service request to a third party to determine an expected data type for the field, determining whether the actual data included in the service request matches the expected data type, and quarantining the service request when the actual data does not match the expected data type. The method may comprise operating as a proxy for the service request, including receiving the service request from the client system, evaluating the service request for irregularities, and forwarding the service request to the third party once the irregularities have been addressed.

The application discloses a fair commodity transaction privacy protection method based on a blockchain, which comprises the following steps: system initialization; a buyer publishes a payment transaction; a miner verifies the transaction and executes a payment function of a contract if the transaction is passed, or ends the process; the buyer publishes a payment proof transaction; a seller verifies a verifiable encryption signature and publishes a delivery transaction if the encryption signature is passed, or ends the process; the buyer publishes a redemption proof transaction; the seller publishes a redemption transaction; and the miner verifies the transaction and executes a redemption function of the contract if the transaction is passed. The method realizes the comprehensive protection of the identities, account balances, transaction amounts and transaction contents of the two parties of the transaction by using blind signature, verifiable encryption signature, homomorphic encryption, range proof and zero-knowledge proof technology to protect the transaction privacy and ensure the fairness of the transaction while recording the transaction information through the blockchain and the smart contract. Through security analysis, the method meets the effectiveness, time limit, fairness, anonymity, confidentiality and balance.

The invention provides an intelligent contract reusable component use logic compliance detection method and system, and belongs to the technical field of intelligent contract reusable component safety analysis. Inputting an intelligent contract source code and carrying out preprocessing operation; constructing a multi-dimensional smart contract feature analyzer, generating a multi-dimensional smart contract feature graph representation, and further extracting a use case of a reusable component of the smart contract and a core feature of the use case; a use logic compliance review model is generated based on large model retrieval enhancement, and potential use logic non-compliance use cases are identified; a large model illusion suppression engine based on snapshot conflicts is constructed, large model illusion is suppressed, and potential use logic non-compliance use cases after illusion suppression are obtained; constructing a verification engine based on similarity analysis, and carrying out secondary verification on the potential non-compliance use cases; and outputting a detection report of the use logic compliance of the reusable component in the current smart contract, thereby realizing automatic detection of the use logic compliance of the reusable component in the smart contract.

The invention discloses a virtual transmitted currency identification method based on machine learning based on a complex network, and belongs to the technical field of block chain security analysis and financial anti-fraud. Comprising the steps of task creation and data preparation, primary data search and key address mining, graph network construction and feature engineering, deep data search and transaction detail analysis, involved feature monitoring, contract address feature monitoring, model training and optimization, and result display and decision support. According to the method, multi-level fund flow and transaction relations are deeply analyzed, key nodes and abnormal transactions in virtual currency sales activities are automatically identified, the discovery and early warning efficiency of illegal sales activities is remarkably improved, and the problem that information sources are insufficient in traditional monitoring is solved.

The application discloses a kind of system security analysis method, system and equipment, method includes: system task is decomposed, each subtask is determined as the functional unit of the system;The performance of each functional unit is evaluated using time and precision, the output variability score of each functional unit is obtained by introducing expert score, then the potential coupling of each functional unit performance change is analyzed, and the functional coupling variability score of each functional unit is obtained in combination with the output variability score;Threshold value of functional coupling variability score is set, when exceeding the threshold value of functional coupling variability score, system will occur functional resonance, so as to identify the key functional unit in system, and set barrier for the key functional unit to prevent potential accidents from happening.The application fuses subjective and objective factors to analyze the safety of system, solves the technical problems that cannot give quantitative analysis results due to excessive dependence on expert subjective evaluation, and lacks theory or process to construct functional resonance.

The invention relates to the technical field of security evaluation of encryption algorithms, and provides a virtual shuffling security analysis method and system for bit slice misuse, and the method comprises the steps: creating a counter array which comprises a plurality of elements, and the index of each element corresponds to the value of a candidate key; for virtual shuffling, collecting a plurality of groups of tracks, screening out effective tracks for each track group, and if the number of the effective tracks is smaller than a threshold value, discarding the track group; performing LDA operation on the reserved track group to obtain a recommended key set, and for each candidate key in the recommended key set, adding one to the value of the index position of the corresponding counter array; and after all the track groups are processed, traversing the counter array, finding out the key with the highest count as a correct key, counting the count of the correct key, and obtaining the actual recommendation frequency of the correct key. And the risk of misuse of bit slice virtual shuffling in IF-ELSE implementation can be efficiently identified.

The invention provides an automatic reasoning method and system for use specifications of a reusable component of a smart contract, and belongs to the technical field of security analysis of the reusable component of the smart contract. An automatic crawling framework is used for collecting source codes of reusable components of mainstream smart contracts to be analyzed and document information of the reusable components of the mainstream smart contracts to be analyzed. And the crawled information of the reusable component of the smart contract is processed by using the task planning intermediate, and the planning of the reusable component use specification automatic analysis working process is completed according to a two-layer planning principle of'process task-subtask '. And constructing and using an intelligent analysis model oriented to reusable component code semantic understanding to process the code understanding class subtasks. And constructing and using a contract analysis tool set to process the program analysis class subtasks. And constructing and using an auxiliary tool set to process the message conversion type subtasks. And integrating the analysis result of each process task, and outputting a usage specification report of the reusable component of the smart contract, thereby realizing efficient and accurate automatic reasoning of usage specification information of the reusable component of the smart contract.

The present application relates to devices and components including apparatus, systems, and methods to perform risk analysis of authentication systems and presenting results of the risk analysis. The approaches can transform configuration data indicating authentication operations to a data format representation for performing risk analysis of the authentication systems.

The invention discloses a prime power RSA modulus decomposition method and system, a medium and equipment, and the method comprises the following steps: obtaining a value through the information of a part of high bits leaked by a private key, a prime power RSA modulus and a small public key index; recovering partial information of the prime number by using the obtained information, specifically comprising the following steps: constructing a modular equation to solve the value of the prime number; the method comprises the following steps: constructing two functions, and approaching a prime number in a binary search mode by using a size relationship of function values to obtain high bit information of a prime number part; constructing a first-order modular equation by using part of information of the recovered prime number, and recovering a complete prime number in combination with a Appersmith algorithm; and decomposing by using prime numbers and moduli. According to the method, less private key bit information is utilized, and modulus decomposition is completed, so that security analysis of the prime power RSA cryptographic algorithm is realized.

The application provides a security analysis method for a post-quantum NTRU cryptographic algorithm, which comprises the following steps: an attacker samples a public key to obtain a plurality of public key samples, a different private key g with a Hamming weight open to the public, and a fixed target private key; a modular equation is established according to each public key sample and the private key Hamming weight open-to-the-public information, and the plurality of modular equations are solved in combination with a linear technique and a preset initial value; based on a linear relationship between the equation set solution and the rest of a second polynomial except for a constant term and a linear relationship between the preset initial value and the constant term of the second polynomial, a complete value of the second polynomial is obtained; a guess value of the target private key is obtained by using a GS algorithm according to the public key sample and the complete value of the second polynomial, and a security analysis is performed on a cryptographic security system according to a relationship between the guess value and an actual value of the target private key. The application restores the private key by using the relationship between the solution of the modular equation and the private key, and breaks through the bottleneck of the prior art means.

Various examples reveal systems and procedures related to facilitating automated security analysis. Specifically, a security analysis can be performed on a software product or a part thereof to identify potential security risks associated with the product. To perform code security data analysis, various types of code security data can be analyzed for a comprehensive analysis of any potential security risks associated with a product. For example, different phases of product development can be analyzed to enable the prevention of security breaches. During implementation, design analysis, design-to-code analysis, and / or code analysis can be performed to identify potential security risks.Performing such diverse analyses enables a robust and comprehensive safety assessment of a product from design to implementation.

The invention discloses an intelligent contract security analysis method and system based on neighbor contrast learning, and the method comprises the steps: firstly carrying out the function-level slicing of an intelligent contract source code, recognizing a key node, a common node and a rollback node based on a rule, and constructing a contract graph fusing the grammar and multi-dimensional semantic relation; for the problems of graph sparsity and noise, a neighbor node set is updated through semantic feature similarity and a graph topology distance, feature aggregation is carried out by adopting a graph attention network fused with a dynamic edge semantic correction mechanism, and an edge semantic scoring network synthesizes edge features, node similarity and global context to generate a dynamic edge weight so as to correct attention. And finally, training a classification model by using a total loss function fusing neighbor contrast learning loss and classification loss. According to the method, through the synergistic effect of node distinguishing, double-neighbor contrast learning and dynamic edge correction, the data sparsity is effectively relieved, noise interference is inhibited, a key path is amplified, and the accuracy, robustness and generalization ability of vulnerability detection are remarkably improved.

The invention provides a fault transmission analysis method based on a functional physical mapping model, and belongs to the technical field of complex system safety analysis, and the method comprises the following steps: S1, carrying out the preparation before modeling; s2, creating a functional physical mapping model of the system; and S3, carrying out security analysis on the functional physical mapping model. By adopting the fault transmission analysis method based on the functional physical mapping model, the problem of repeated modeling work caused by separation of functional modeling and physical modeling is solved, a method for associating a system function with a physical architecture is provided, the efficiency of safety analysis work based on the model is improved, and the method is suitable for popularization and application. And the integrity and accuracy of hardware fault identification are ensured.

The invention provides an intelligent task management system and an operation method thereof, and the system comprises a task scheduling center which is used for receiving a collection task submitted by a user, and obtaining the task data of the collection task through a collection engine; the task analysis module is used for performing security analysis on the task data and processing a security analysis result according to a preset processing strategy to obtain a task processing result; the security analysis comprises sensitive information identification and compliance check, and the disposal strategy comprises abnormal data interception, data desensitization, data annotation and manual auditing; and the management module is used for executing query, configuration and monitoring operations on the collection task according to a management instruction input by the user, the security analysis result and the task processing result, and generating a management report. According to the system and the operation method thereof, the safety of data acquisition is improved, and the data management efficiency is improved.

Systems, methods, and apparatus are disclosed for analyzing Operational Technology (OT) networks. A cyber security appliance includes an OT module to receive data from a plurality of OT assets. An asset identification module passively monitors data to identify asset properties and generate a human-readable label for each OT asset. One or more machine-learning models are trained on a normal pattern of life for the plurality of OT assets. A comparator module compares network data to the normal pattern of life to detect anomalous activity, distinguishing between cyber threats and operational health issues, such as an absence of expected communication, and generates distinct alerts for each. An architecture generation module uses the labels to apply a grouping, such as by shared characteristic or user-defined filter, creating one or more asset groupings and generating visualization data for presentation on a display.

The invention provides a security analysis method for an RSA variant cryptographic algorithm, attack on the variant cryptographic algorithm is realized by using leaked high bit and low bit information of a private key and a Appersmith algorithm, the leaked private key information can be effectively utilized, the prior art is broken through, and bit information required for attack is reduced. In addition, the invention also provides a security analysis device for the RSA variant cryptographic algorithm and a storage medium.

A security analysis of software includes analyzing security risks at each level of the hierarchy of the software and aggregating identified risks within the hierarchy levels. Weights applied during aggregation assist in homogenizing risk scores originating from different types of identified security risks and provide for the ability to communicate a meaningful risk score at each level of the hierarchy.

A security analysis of software includes analyzing security risks at each level of the hierarchy of the software and aggregating identified risks within the hierarchy levels. Weights applied during aggregation assist in homogenizing risk scores originating from different types of identified security risks and provide for the ability to communicate a meaningful risk score at each level of the hierarchy.

The invention discloses a fully homomorphic encryption-oriented security analysis method, which belongs to the technical field of information security, and comprises the following steps of: receiving an input parameter, and judging whether a current problem type is an LWE problem or a ring LWE problem; based on the input parameters, a computational complexity function model is established to derive an explicit expression of the optimal guess dimension, and the computational complexity function model is used for representing the total attack overhead of an attacker under the guess dimension; determining an optimal guess dimension by using the display expression, and determining the size of a minimum integer block according to the optimal guess dimension and the current problem type; and calculating the security strength according to the optimal guess dimension and the size of the minimum integer block. According to the method and the device, the optimal guess dimension is expressed in a displayed manner, so that time-consuming exhaustive search in the prior art is avoided, automatic output from parameter input to safety intensity is realized, and the evaluation speed of the safety intensity is greatly improved.

The application discloses a kind of security analysis optimization method of electronic commerce system, first using Petri net respectively to the business flow and data flow in electronic commerce system respectively are modeled, then two models are combined, obtain the Petri net model after merging, again Petri net model is changed into state transition diagram, and define the rule formula of electronic commerce system security;Then the state transition diagram of electronic commerce system and rule formula are together placed into model checking tool, verify the reachability of electronic commerce system, time effectiveness and data consistency, according to the result of three, determine the security of electronic commerce system.The application can effectively verify the effectiveness of electronic commerce system, assess the security of electronic commerce system before formal online, avoid the problem that data is maliciously tampered with, data is not updated in time, data is inconsistent before and after payment, enhance the trust of user to the security of electronic commerce system, improve the sense of security of user.

The application discloses a parcel data analysis method and device, a terminal equipment and a storage medium. The application merges the parcel data and the parcel data of the previous parcel to obtain the merged parcel data by judging whether the target parcel needs to be stacked on the previous parcel. Then, the data analysis process is performed on the merged parcel data, and the first security analysis result corresponding to the target parcel is determined according to the data analysis result. Finally, whether the merged parcel data needs to be executed according to the first security analysis result and the second security analysis result of the previous parcel. The parcel data is merged, the parcel data that is misclassified due to the parcel algorithm error or the parcel length exceeding the maximum parcel length is merged into the parcel data of the previous parcel, and the parcel data after merging is analyzed, so that the parcel analysis interference on the parcel analyst is reduced, and the parcel missed detection rate and the parcel misjudgment rate are reduced.