161 results about "Security compliance" patented technology

The invention provides a security risk assessment method and system for digital assets, and the method comprises the steps: obtaining a unique identifier and an ownership record of the digital assets, and determining key points of risk assessment, the key points comprising encrypted storage, transaction history and a circulation mechanism of the digital assets; for each key point, identifying identity authentication, access control and data encryption security factors in the key point, and performing security compliance verification on privacy protection and compliance requirements of the digital assets by adopting a probability statistical method; generating a plurality of digital asset cross-chain compatibility and value evaluation factor combinations through a Monte Carlo simulation method, simulating security events and consequences thereof in different scenes, and calculating the occurrence probability and loss influence of each scene; and according to the optimized risk assessment model, assessing the overall security risk of the digital assets, identifying the key link with the highest risk, and assessing the potential loss influence of the key link.

The invention discloses an automatic large language model selection method based on multi-dimensional evaluation and dynamic weight adjustment, and aims to solve the problems of low text generation quality, inaccurate dialogue questions and answers, low online assistant task completion rate and the like in an existing large language model by introducing a multi-dimensional evaluation mechanism. According to the method, a plurality of evaluation dimensions such as ROUGE index evaluation, text quality evaluation, semantic similarity evaluation, safety compliance evaluation, front suitability evaluation, question and answer evaluation, dialogue evaluation, online customer service evaluation and online assistant evaluation are comprehensively considered, the performance of the large language model is comprehensively evaluated, and through analysis of operation data and user feedback, the evaluation accuracy of the large language model is improved. And dynamically adjusting the weight of each evaluation dimension to adapt to continuously changing application requirements and user expectations. And finally, according to the comprehensive score, an optimal large language model is automatically selected, and high quality and user satisfaction of Web services are ensured.

The invention relates to the technical field of informatization processing, and provides an IT asset intelligent management system and an implementation method thereof, and the system comprises an asset discovery subsystem which outputs a standardized asset list through a feature comparison and deduplication fusion program; the unified modeling subsystem forms an asset topological graph by processing association and dependence between information technology assets; the intelligent analysis and prediction subsystem outputs insight results and prediction indexes about resource capacity prediction, anomaly detection, cost optimization suggestions, risk trends and the like; the life cycle management subsystem drives an automatic operation and maintenance workflow through a strategy engine to realize closed-loop management of the information technology asset state; the security and compliance subsystem generates an alarm, a repair suggestion or executes an automated repair policy. According to the invention, intelligence, automation and safety compliance of information technology asset management are realized, and the efficiency and reliability of information technology operation, maintenance and management are significantly improved.

The invention relates to the technical field of intelligent edge computing, and discloses a heterogeneous data processing optimization system based on intelligent edge computing. Comprising a heterogeneous data acquisition module, an edge preprocessing module, an intelligent optimization scheduling module, a heterogeneous fusion analysis module and a self-adaptive feedback control module. According to the system, data streams of different formats and protocols can be collected from a plurality of heterogeneous data sources in real time, and multi-modal correlation analysis is carried out after preprocessing and intelligent scheduling. Meanwhile, the system performance is optimized through self-adaptive feedback control, and a resource efficiency evaluation module and a safety compliance verification module are further arranged. According to the method, the problems of delay, accuracy, resource allocation, safety compliance and the like in heterogeneous data processing are effectively solved, the data processing efficiency and the system stability are improved, and the method is suitable for heterogeneous data processing scenes in the fields of industry, traffic, medical treatment and the like.

The invention discloses a multi-dimensional evaluation method for credential environment migration, and particularly relates to the field of evaluation. According to the method, an evaluation index system covering infrastructure, an application system, data resources and security compliance is constructed, and comprehensive scanning is realized through instruction set detection, binary analysis and equal security compliance inspection; dynamically calculating the weight by adopting an AHP-entropy weight hybrid model, and triggering weight rebalance based on the volatility; through combination of static scanning and a dynamic probe, the compatibility, performance and safety differences are quantitatively analyzed; and finally, generating a visual risk assessment report, integrating data of each stage to calculate a compatibility score, a performance loss rate and a security level, providing instruction level difference comparison, a performance flame graph and a vulnerability attack path interaction view, and outputting a migration suggestion comprising a priority reconstruction list, an NEON instruction optimization scheme and a staged reinforcement plan.

The invention relates to an artificial intelligence-based network and data security monitoring and compliance analysis method and system, and the method comprises the steps: analyzing a security compliance standard inputted by a user based on artificial intelligence, automatically generating a corresponding judgment rule for each check item, and adjusting the judgment rule in cooperation with an interaction port. The adjusted rule is used for network and data security compliance analysis; the system based on the method collects and integrates data with a data collection layer, an analysis engine identifies attacks and performs compliance verification, and an output end outputs attack features and risk scores. According to the method, online learning and intelligent iteration of security policies are realized, dynamic change of network topology is adapted, policy optimization is dynamically executed, and perspectiveness and effectiveness of security defense are ensured; manual intervention is greatly reduced, the efficiency and accuracy of compliance management are improved, and automatic compliance is basically achieved; a firm privacy protection barrier is built for cross-domain data sharing, and the safety and privacy of data in the sharing process are ensured.

In an illustrative embodiment, systems and methods for verifying safety compliance of a worker positioned on a building structure utilize a motion detector module (MDM) for attaching to a wearable safety harness, where the harness has a lifeline attachment feature for connecting the safety harness to a lifeline anchored to the building structure. The MDM may include a motion sensor for detecting movement of the worker and processing circuitry for detecting, from signals provided by the motion sensor, significant movement indicative of the safety harness being properly worn by the worker and / or proper attachment of the safety harness to a lifeline, and translating the significant movements into compliance information. The MDM may include a proximate sensor for detecting contact between the attachment feature on the harness and a fastener on the lifeline for verifying the compliance information.

The invention discloses a risk control strategy-based decision engine and method, and relates to the technical field of financial risk control, and the decision engine comprises a strategy warehouse module, a mapping service module, an execution engine module, a data management module, a version rollback module, a security scale module, and a monitoring alarm module. According to the invention, function decoupling is realized through collaborative design of the seven modules, and the modules interact through a unified interface, support strategy dynamic loading, gray release, distributed parallel execution, version governance and security compliance capabilities, and ensure high cohesion and low coupling of the system; through unique strategy version management, intelligent mapping and gray release, plug-in parallel execution, multi-version consistency view, block chain audit rollback, security compliance management and control, intelligent monitoring and other technical innovations, a complex, dynamic and high-concurrency risk control business scene is effectively supported; the security, the flexibility, the expandability and the auditing performance of the decision engine are remarkably improved, and the technical advancement and the industry creativity are high.

The invention discloses a single sign-on method and system based on flow interception and credential injection, and the method comprises the steps: a user completes UKey authentication through a gateway client, a gateway generates a session bound with the client and stores the session in a Redis cluster, and a dynamic TTL mechanism renews the session according to the operation of the user; when a user accesses an application system, a gateway captures traffic through a kernel layer, and a quintuple rule and a Bloom filter are adopted to intercept malicious requests; for a logged-in user, after the gateway queries the session state, an encrypted user certificate is called and a signature is added, and a request header is injected by a zero-copy technology and then forwarded to an application server. The system comprises a gateway client, an authentication gateway, a database and an application server. According to the invention, through a cryptographic algorithm, hardware-level key management and kernel layer flow optimization, the problems of complex integration, low security and performance bottleneck of a traditional single sign-on system are solved, and zero transformation access, microsecond-level delay and financial-level security compliance are realized.

Techniques are disclosed for performing scanning and profiling of stored data to identify the location of data entries that comprise sensitive data that require storage in accordance with enhanced security requirements. The techniques advantageously move a portion of the scanning and profiling operations closer to the data storage locations, and involve deploying processing resources near the locations at which the data is stored rather than relying solely upon centralizing processing at a separate location. This approach has the advantages of reducing network traffic and latency, which can help improve performance and reduce costs, and may also facilitate organizations to better take advantage of distributed computing architectures, which can scale more effectively than centralized processing.

This disclosure describes techniques and mechanisms for defining dynamic security compliance in networks to proactively prevent security policy violations from being added and / or made, retroactively and continuously identify security policy violations based on data from the changing threat landscape, and provide auto-remediation of non-compliant security policies. The techniques enable automated security policies and provide improved network security against a dynamic threat landscape.

The invention relates to the technical field of digital intelligent management, in particular to a digital intelligent management system and method for an unmanned aerial vehicle research, development and manufacturing enterprise, and the system comprises a knowledge management module, a data embedding processing module, an LLM center model, an AI agent, an enterprise resource planning module, a user interaction feedback module, and a security scale module. The knowledge management module is used for providing an internal knowledge base, encrypting authority management and real-time updating; the data embedding processing module is used for vector database and multi-mode embedding; the system realizes operations such as data input, storage, learning, calling, updating and the like to realize an intelligent working system, staff in a company exchange information with zero delay, and by combining intelligent auxiliary analysis of data, misjudgment caused by redundant and repeated invalid delay and information mismatching is avoided, and the working efficiency is improved. According to the method, internal information circulation of a company is effectively improved, the information island problem of each department is solved, the data secrecy capability in an enterprise is improved, and the management risk early warning capability is enhanced.

The invention discloses a data governance security solution method based on artificial intelligence, and relates to the technical field of data management, and the method comprises the following steps: S1, data asset list and classification; s2, data risk assessment; s3, making a data access control strategy; s4, performing data encryption and desensitization processing; s5, data transmission security management; s6, performing data storage security management; s7, performing data use and sharing security management; s8, monitoring and responding to a data security event; and S9, performing data governance security compliance auditing. According to the data governance security solution based on artificial intelligence, by introducing an AI-driven dynamic label management mechanism, a self-adaptive transmission protocol selection mechanism and a dynamic authorization mechanism based on behavior analysis, real-time adjustment and fine management of a data security policy are realized, and potential threats can be quickly responded and prevented; therefore, the security, flexibility and efficiency of data management are greatly improved.

The invention discloses a multi-dimensional large model test evaluation method and system, belongs to the technical field of artificial intelligence testing, integrates a basic model, platform capability and application performance to realize multi-dimensional large model test evaluation, and comprises the following steps: basic model capability evaluation, including sensitive lexicon + BERT semantic double-engine security detection and context dependence test chain; evaluating the capability of the model platform, including presetting LLM intelligent labels and double-person back-to-back data backflow; application performance evaluation, including character disturbance robustness test and LIME interpretability grading evaluation; large-model full-stack testing is achieved through a RESTful heterogeneous model nanotube interface, and localized compatibility adaptation verification is achieved based on GPU attenuation rate quantification. The method solves the problem of lack of evaluation of platform engineering capability, safety compliance and localization support in the prior art, realizes three-dimensional capability coupling evaluation, solves the problem of localization adaptation, and fills the blank of a large-model full-stack test technology.

Ansible IntelScan is a groundbreaking software tool, characterized by innovative ideas and streamlined code processes. It leverages Ansible to aid system administrators and system engineers in executing their daily tasks more efficiently and effectively. The software eliminates the need for Ansible Modules or Roles, leading to significant time savings and cost reductions for companies. With its modular, user-friendly design, Ansible IntelScan is primed for routine tasks and report creation, serving as an asset for management decision-making. Its ease of use enables even junior administrators with minimal shell scripting knowledge to operate the software, thereby enhancing overall work productivity and cost-efficiency. Ansible IntelScan is compatible with large-scale Linux server environments, supporting simultaneous operations on over 1000 physical and virtual servers. This innovative tool has been rigorously tested and validated on popular Linux distributions such as Red Hat, CentOS, Ubuntu, and Debian in DEV, QA, and Production environments.Ansible IntelScan streamlines numerous critical operations including Linux system inventory reporting, cloud configuration, identification of unused cloud volumes, creation of multiple users, and customized security vulnerability scanning. The tool's efficacy has been proven in a variety of applications, such as system inventory management, labor-hour reduction in security company operations, cost savings through the identification of unused cloud resources, timesaving in user creation for US DOD and government projects, and the creation of customized vulnerability scan tools for enhanced security compliance.With the incorporation of advanced features like playbook execution and report generation, Ansible IntelScan emerges as a dynamic and resourceful toolset for system administrators at all levels of experience.

The invention discloses a network security compliance checking system, method and device and a storage medium. Comprising an analysis engine module and a compliance evaluation module connected with the analysis engine module, the analysis engine module is used for acquiring network data, marking abnormal logs in the network data through a user and entity behavior analysis technology, and sending the abnormal logs to the compliance evaluation module; and the compliance evaluation module is used for obtaining a compliance rule and determining a compliance evaluation result of the abnormal log based on the compliance rule. Through the analysis engine module, the advanced user and entity behavior analysis technology is utilized, abnormal logs can be identified from a large amount of network data, and the detection capability of network abnormal behaviors is enhanced. Whether the abnormal log is compliant or not is automatically judged through the compliance evaluation module, the efficiency and accuracy of compliance evaluation are improved while the manual workload is reduced, setting of compliance rules has flexibility and expandability, and the method can adapt to complex and changeable network environments.

The invention discloses an intelligent media asset management system based on artificial intelligence, a multi-modal data processing module adopts a time-shifting convolutional neural network to extract spatio-temporal features of videos and audios, an intelligent cataloguing module optimizes a video shot segmentation strategy based on deep reinforcement learning, a graph neural network is utilized to model a label semantic relationship, and a video shot segmentation strategy is established; and label global dependence and entity identification are optimized through Transform and a conditional random field, and abnormal labels are detected in combination with an Isolation Forest algorithm, so that the cataloguing accuracy and fluency are remarkably improved. The knowledge graph engine adopts a hierarchical knowledge graph to embed and construct a cross-modal resource association network, supports a dynamic update label system, and adopts technologies such as multi-modal AI analysis, reinforcement learning optimization, knowledge graph association, distributed architecture and security compliance design. The problems of poor system expansibility, prominent potential safety hazards and the like in traditional media asset management are solved, efficient and accurate media asset intelligent processing is achieved, and the intelligent level, system performance and data security of media asset management are improved.

The invention relates to the technical field of financial database processing systems, and discloses a financial database processing and analyzing system with a data protection function, which comprises a system architecture design module, a data protection strategy module, a data processing and analyzing module and a security scale module. The invention relates to a financial database processing and analyzing system which improves performance and data processing capacity and ensures data safety and privacy. The system realizes high availability and stability through technologies of read-write separation, fault transfer, health examination and the like; data protection strategies such as dynamic desensitization, secondary authorization and encryption further guarantee data security; the data processing and analysis module is combined to enhance the data processing and analysis capability of financial services, and the security and scale module ensures the overall security of the system; compliance evaluation ensures that the system conforms to related laws and regulations; in short, the system provides an efficient, safe and compliant data processing analysis scheme for the financial industry.

Execution of software applications can be controlled based on application profiles to facilitate safety compliance. For example, a system can execute a test suite to identify a function call of a software application that is associated with a functional safety standard issued by a standard-setting organization. In response to identifying the function call, the system can generate a risk score for the function call. The risk score can indicate a likelihood of the function call causing non-compliance with the functional safety standard. The system can further generate an application profile including a permission for the software application based on the risk score. The permission may disable the function call of the software application. The system may then execute the software application based on the application profile. As a result, execution of the software application can comply with the functional safety standard.

The invention discloses a large model memory management method and device and a medium, and relates to the technical field of artificial intelligence, and the method comprises the steps: obtaining a new knowledge unit and a partition parameter corresponding to the new knowledge unit; according to the partition parameter, determining a storage partition corresponding to the new knowledge unit in the knowledge base; calculating the similarity between the new knowledge unit and each existing knowledge unit, and taking the existing knowledge unit of which the similarity is greater than a preset similarity threshold as a candidate conflict object; calculating the conflict degree between each candidate conflict object and the new knowledge unit, and processing the new knowledge unit according to the conflict degree to obtain a first processing result; and injecting the first processing result into the corresponding storage partition. According to the management method, catastrophic forgetting can be effectively prevented and controlled, long-term retention and safety compliance of key knowledge are guaranteed, and technical support is provided for application of a large model in a complex and continuous evolution scene.

The invention relates to the technical field of foreign trade information processing, and provides a multi-language semantic aggregation and automatic quotation system which comprises a multi-language keyword analysis module, a data acquisition module, a semantic aggregation and clustering module, a visual display module, a quotation generation and editable module and an output and mail arrival module. The system has the advantages of high automation, accurate semantics, multi-format output, flexible editing, safety and compliance, easy maintenance and the like, and is suitable for multiple industry fields such as mothers and infants, consumer electronics, pet supplies, industrial equipment and the like.

The invention discloses a method and system for enterprise employee social security compliance management based on a knowledge graph, and relates to the technical field of artificial intelligence, and the method comprises the steps: collecting employee basic data and employee social security data corresponding to each enterprise in real time, and adding an enterprise identifier for each piece of employee basic data and employee social security data; social security policy data are obtained, a policy change time sequence is constructed based on the social security policy data, and the effective time, the region range, the applicable crowd and the specific terms of each social security policy are recorded; in response to an enterprise employee social security compliance management request, inputting the employee basic data, the employee social security data and the social security policy data of the corresponding enterprise as an original data set into an enterprise employee social security compliance management model, and outputting a social security adjustment strategy, the problems that in the prior art, policy changes cannot be dynamically adapted, the social security states of employees cannot be compared in real time, and the cost optimal adjustment strategy cannot be automatically generated are solved.

The present application provides an artificial intelligence content production real-time risk control method and apparatus. The method comprises: step S1, receiving input data needing to be used for synthesizing a digital avatar video; step S2, determining the security and compliance of the input data according to a preset risk control requirement, and if the input data is secure and compliant, releasing a risk control lock applied to a digital avatar model; step S3, synthesizing the digital avatar video on the basis of the input data, and by means of the digital avatar model, performing compliance approval on the synthesized video located in a cache; and step S4, performing disk storage on a final video that has passed compliance approval. In the present application, real-time risk control management can be performed on video content generated by digital avatars, thereby preventing the malicious use of the digital avatars.

A device, system and method for accelerated compliance testing for real-time detection of suspicious transactions in a transaction stream. A machine learning model may determine a global trend of cumulative transaction behavior based on all, a majority or a representative subset, of the stream of transactions. For each transaction in the stream, a skip rule engine may sort each security compliance test to be skipped or not skipped based on the test's relevance to the global trend of the cumulative transaction behavior. The not skipped security compliance tests may be executed in real-time for each transaction in the stream to generate real-time partial security assessments therefore comprising real-time suspicious transaction alerts. The remaining tests may be skipped in real-time and executed, at a time delay after transaction times, to generate time delayed supplemental security assessments therefore comprising time delayed suspicious transaction alerts to complete all compliance testing.

1. Name of the Design Product: Conversation Area and Information Display Area of the Graphic User Interface for Compliance Q&A of Electronic Devices. 2. Use of the Design Product: An electronic device. 3. Design Key Points of the Design Product: The part of the graphic user interface in the electronic device that is claimed for protection. 4. Picture or Photograph Best Showing the Design Key Points: Design 1, Variant State Diagram 1. 5. Design 1 is designated as the basic design. 6. Use of the Graphic User Interface: The graphic user interface is used for intelligent Q&A on security compliance issues. The part of the graphic user interface claimed for protection is used for intelligent Q&A on security compliance issues and for displaying the regulatory standards cited in the intelligent responses. The graphic user interface can be interacted with through touch or click operations by the user on the graphic user interface. In response to the completion of generating the reply information for the user's question, the graphic user interface changes from the main view of Design 1 to Design 1, Variant State Diagram 1 to display the result of generating the reply information and the thinking process of generating the reply information; in response to the user touching or clicking on a certain regulatory standard queried during the thinking process, the graphic user interface changes from Design 1, Variant State Diagram 1 to Design 1, Variant State Diagram 2 to display the detailed information of that regulatory standard. In response to the completion of generating the reply information for the user's question, the graphic user interface changes from the main view of Design 2 to Design 2, Variant State Diagram 1 to display the result of generating the reply information and the thinking process of generating the reply information; in response to the user touching or clicking on a certain regulatory standard queried during the thinking process, the graphic user interface changes from Design 2, Variant State Diagram 1 to Design 2, Variant State Diagram 2 to display the detailed information of that regulatory standard. 7. Other Circumstances Requiring Explanation: Other Explanation: The part of the graphic user interface shown by the dashed line in each view of Design 1 to Design 2 does not constitute the part claimed for protection in this design.

The application relates to a power grid production data access method and device for power grid data sharing security compliance based on deep action determination and risk budget. The method comprises the following steps: in response to an access request for power grid production data sent by a terminal, inputting a context feature vector corresponding to the access request into a pre-constructed deep action determination model to obtain a target access action corresponding to the access request; in the case that the target access action is a preset access action, determining a current privacy budget value corresponding to the target access action; in the case that the current privacy budget value does not exceed a current remaining privacy budget value, performing differential privacy protection processing on the power grid production data according to the current privacy budget value to obtain processed power grid production data, and returning the processed power grid production data to the terminal. By using the method, the security of power grid production data access can be improved.

Provided is a system and method for security screening, the method including: matching, by at least one of at least one processor, a passenger name of a passenger in a baggage source message (BSM) with a passenger name in a manifest, wherein the BSM comprises travel data of a first mode of travel of a luggage item of the passenger on an air carrier; extracting, by at least one of the at least one processor, an International Air Transport Association (IATA) license plate number from the BSM for the luggage item; accessing, by at least one of the at least one processor, security screening image and related data captured during a first mode of travel security screen of the luggage item using the IATA license plate number; displaying, by at least one of the at least one processor, a graphical user interface (GUI) on a display device to analyze the screening image and related data; and obtaining via a scanning device, by at least one of the at least one processor, a mark representative of the analysis result in response to scanning an IATA license plate barcode affixed to the luggage item, wherein the analysis result is representative of one of: a security compliance of the luggage item to cross a border or to transfer to a second mode of travel, and a non-security compliance of the luggage item.

The invention provides a main data automatic governance method and system based on a large model and Dores, and belongs to the field of data governance. The method comprises the following steps: constructing an RAG main data management knowledge base stored in Dores, and exploring multi-source heterogeneous data by utilizing federated query and MCP service of the Dores; driving an end-to-end process from main data automatic identification, asset checking, source layer modeling and data access, and main data standard model definition and gold attribute set generation by using a large language model; deep cleaning is carried out on the data by adopting a rule and AI cooperation mode, and heterogeneous data mapping and ETL task generation and arrangement are completed; finally, in combination with a graph database and an authority system, intelligent data security sharing based on dynamic desensitization is realized. According to the method, automation, intelligence and adaptive optimization of the whole process of main data management are realized, and the problems of dependence on manpower, low efficiency, incomplete coverage and insufficient safety compliance of a traditional scheme are solved.

The invention relates to the technical field of archive management, in particular to a material collection contract archive whole-process collection system based on a large model agent. The system comprises a data access layer, an intelligent processing layer, a knowledge service layer, an application layer and a security compliance layer which are in communication connection in sequence. The data access layer is used for collecting multi-source heterogeneous contract data and pushing a collection result to the intelligent processing layer; and the intelligent processing layer realizes intelligent analysis, verification, state tracking and knowledge association of contract data based on a large model agent. The objective of the invention is to provide a material collection contract archive full-process collection system based on a large model agent, and by constructing a technical architecture integrating data collection, intelligent processing, knowledge precipitation and closed-loop management, automatic and intelligent management of a full life cycle from generation to archiving of contract archives is realized.

The invention relates to a data detection method and device, computer equipment, a storage medium and a computer program product. The method comprises the following steps: receiving a domain name data detection request triggered for a form trigger, and obtaining a form filling address associated with the form trigger and target domain name data carried by the domain name data detection request; analyzing the form filling address to obtain a form identifier carried by the form filling address, and obtaining a workflow identifier associated with the form identifier and workflow structure data associated with the workflow identifier; and analyzing the workflow structure data, obtaining a plurality of workflow tasks carried by the workflow structure data and an execution sequence of the plurality of workflow tasks, sequentially executing the plurality of workflow tasks according to the execution sequence, and carrying out multiple items of security compliance detection on the target domain name data to obtain a detection result. By adopting the method, tedious operation in the data detection process and misoperation in different links can be reduced, and the safety compliance detection processing efficiency of the domain name data is improved.