846 results about "Security information" patented technology

A federated distributed computational system enables secure collaboration across multiple institutions for biological data analysis. The system consists of interconnected computational nodes managed by a centralized or decentralized federation manager, depending on the deployment model. Each node contains specialized components that work together to process biological data while preserving privacy. These components include a local computational engine that handles data processing, a privacy preservation module that protects sensitive information, a knowledge integration component that manages biological data relationships by connecting various data sources, and a communication interface that enables secure information exchange between nodes. The federation manager coordinates all computational activities across the network while ensuring data privacy is maintained throughout the process. This architecture allows research institutions to collaborate on complex biological analysis tasks without compromising their sensitive data, enabling breakthrough discoveries through shared computational resources and expertise while maintaining the security, compliance, and confidentiality required in biological research.

Systems and methods for generating predicted end-to-end cyber-security attack characteristics via bifurcated machine learning-based processing of multi-modal data are disclosed. The system accesses multi-modal data indicating a set of security information related to a computing system. The system then generates a set of extracted characteristics indicating a cyber-security attack on the computing system, via a supervised machine learning model, using the multi-modal data. Using this information, the system generates a revised set of extracted characteristics indicating the cyber-security attack, via an unsupervised machine learning model, using the extracted set of characteristics indicating the cyber-security attack, where the revised set of characteristics includes at least one new characteristic that was not included in the extracted set of characteristics indicating the cyber-security attack on the computing system. The system then generates for display a graphical representation of the revised set of extracted characteristics.

The invention relates to the technical field of network and information security, and discloses a multi-source security information collaborative analysis method and system fused with an AI intelligent agent, and the method comprises the steps: collecting security related data; cleaning and normalizing the collected data, and extracting target security features from the preprocessed data; constructing a plurality of AI agents for different data sources, and generating a preliminary threat judgment result through semantic understanding, behavior pattern recognition and association rule mining based on target security features; performing time sequence fusion on the preliminary threat judgment result, constructing a dynamic security situation model, capturing a threat evolution trend, and dynamically determining a risk level and a priority processing sequence of an event in combination with threat intelligence; according to the risk level and historical response experience, the AI intelligent agent generates an automatic response suggestion and pushes the automatic response suggestion to operation and maintenance personnel; according to the invention, the threat identification capability is improved.

The invention provides a construction site safety information supervision system based on the Internet of Things, and relates to the technical field of data processing, the risk assessment accuracy is remarkably improved and the data noise interference is inhibited through a deep reinforcement learning dynamic optimization grading early warning strategy and in combination with a multi-source data compression and federated learning framework; a risk coupling model is constructed based on a complex network theory, a conduction path and a linkage effect between regions are analyzed, a global early warning scheme is optimized, and the adaptability of the system to a complex construction environment is enhanced; the model is continuously optimized through a dynamic weight updating mechanism, high adaptability is kept under the environment change of a construction site, meanwhile, a resource dynamic allocation strategy is adopted, the problem of low high-concurrency processing efficiency is effectively solved, and the overall accident early warning accuracy is improved.

The invention relates to the technical field of network operation and maintenance, in particular to an automatic operation and maintenance method and system based on artificial intelligence, and the method comprises the steps: collecting detailed log information containing a security event in real time through a security information and event management system configured at a target endpoint; performing cleaning, labeling and structured processing on the log data by utilizing a proxy artificial intelligence system to generate standardized metadata, and performing MITRE ATTamp with the standardized metadata; mapping the CK knowledge base, identifying technical features and behavior patterns of attacks, comparing enriched log data with an external threat intelligence source, analyzing TTP of a known attack group, generating a threat intelligence association report, generating a targeted response plan by using a large language model, generating an executable command sequence according to the response plan, and generating a threat intelligence association report; the proxy executor is connected with the server through a WebSocket protocol, executes a command in a POSIX shell environment, captures and returns an execution result, verifies the execution result, carries out necessary command optimization, records an optimized response to a vector database, and automatically matches a historical event and triggers a predefined response process through a vector retrieval mechanism. And continuous threat monitoring and adaptive response are realized. According to the method, the problem that a closed loop aiming at a terminal executor, data enrichment and historical event recall cannot be formed by security operation and maintenance in the prior art can be solved.

The invention discloses a construction site safety monitoring method and system based on a large model and RAG, and the method comprises the steps: carrying out the intelligent analysis of real-time video data of a construction region based on a visual large model, and recognizing the behavior safety, violation operation, dangerous facilities and environment risks of construction personnel; adding a time label to the analyzed security event text to form a construction site security event log; reasoning and analyzing the security event log, determining whether security early warning is generated or not, and pushing early warning information; carrying out on-site intelligent voice broadcasting according to the early warning information; through a multi-RAG architecture, a construction site safety log database, a public construction safety management database and an enterprise internal safety management database are constructed, and construction safety information is stored by using a vector database and a graph database. By adopting the technical scheme of the invention, the problems of insufficient real-time monitoring capability, limited intelligent analysis capability and lack of effective knowledge base support in the existing construction site safety supervision are solved.

The invention discloses a transmission method and device, Internet of Things equipment and electronic equipment, and belongs to the technical field of communication, and the transmission method comprises the steps that target Internet of Things equipment receives a first downlink message sent by first equipment, and the first downlink message is used for indicating at least one piece of Internet of Things equipment to initiate a random access process; wherein the first downlink message comprises at least one of the following items: identification information of the at least one piece of Internet of Things equipment; a cause is paged; accessing process information; transmitting data information; the access resource configuration information of the target Internet of Things device; time control information; the retransmission resource configuration information of the target Internet of Things device; the security information is used for carrying out authentication on the target Internet of Things equipment and carrying out encryption or decryption on transmission data; and a first indication, wherein the first indication is used for indicating the backoff time of data retransmission of the target Internet of Things equipment.

The invention relates to the technical field of network security, and discloses a network traffic anomaly detection method and system based on a knowledge graph, and the network traffic anomaly detection method comprises the following steps: protocol perception metadata feature extraction: extracting metadata features which do not involve content privacy from encrypted network traffic through a deep packet inspection technology, comprising flow statistical characteristics, time sequence characteristics and connection relation characteristics; multi-level knowledge graph construction: based on the extracted metadata features, according to a network architecture, respectively constructing corresponding knowledge graphs on a device layer, a gateway layer and a cloud layer, and respectively representing device behaviors, network activities and global security information; the method does not depend on flow decryption operation, effective recognition of abnormal behaviors in the encrypted flow is achieved only by analyzing the metadata features of the network flow, and therefore the detection accuracy is improved.

Various aspects of the present disclosure relate to an authentication server function (AUSF) that receives an authentication request from a security anchor function (SEAF), and transmits a data request for authentication data to unified data management (UDM). The AUSF can receive the authentication data from the UDM for primary authentication, and set an expiration time for security information associated with the primary authentication being successful. The AUSF can then transmit an authentication message of authentication information that includes the security information and the expiration time to an authentication and key management for applications (AKMA) anchor function (AAnF) that registers the expiration time. The AUSF can also initiate reauthentication based at least in part on expiry of the authentication information.

Disclosed are systems, apparatuses, methods, and computer-readable media for providing security postures for a service provided by a heterogenous system. A method for verifying trust by a service node includes receiving a request for a security information of the service node from a client device, wherein the request includes information identifying a service to receive from the service node, identifying a related node to communicate with the service node based on the service, after identifying the related node, requesting a security information of the related node, generating a composite security information from the security information of the service node and the security information of the related node, and sending the composite security information to the client device. The composite security information provides security claims for a service implemented by a heterogenous devices that have different trusted execution environments.

The invention discloses an industrial control intrusion detection method based on an ISAE auto-encoder and AFF feature fusion, and relates to the field of industrial control network security. The problem that a conventional intrusion detection algorithm is generally only based on a data set formed by original traffic data and manually extracted features, and due to the fact that traffic features cannot be deeply mined, obtained safety information is not comprehensive enough, and the effect of detecting partial attack traffic is poor is solved. The method comprises the steps of collecting original traffic data, obtaining corresponding artificial features according to the original traffic data, and constructing a training data set according to the artificial features; performing data preprocessing on the original flow data and the artificial features; constructing an intrusion detection model and training the intrusion detection model; and inputting the test set data into the trained intrusion detection model to obtain an intrusion detection result. The method is suitable for detecting and monitoring network intrusion, and the network intrusion risk is reduced.

The invention provides a flight communication system of a single Beidou module unmanned aerial vehicle and a flight control method thereof, relates to the field of unmanned aerial vehicle communication, and comprises a flight communication scheme and communication maintenance measures. By setting communication stability guarantee measures and a communication safety protection scheme, the operation stability and safety of the communication system can be effectively improved, normal operation of the unmanned aerial vehicle in the aspect of communication can be guaranteed, communication content can be effectively compressed and optimized by setting a communication optimization strategy, and the communication safety of the unmanned aerial vehicle is improved. Meanwhile, in cooperation with transmission scheduling optimization, key safety information, real-time control instruction response and the like of the unmanned aerial vehicle can be well arranged to be transmitted in a high-priority time period to ensure timely delivery, the communication transmission efficiency is ensured, and through the organic combination of a neural network algorithm and a PID control algorithm, the safety of the unmanned aerial vehicle is improved. The unmanned aerial vehicle can deal with various complex flight conditions more intelligently and accurately, and the efficiency and accuracy of route correction are effectively improved.

The invention belongs to the technical field of information security, and particularly relates to a super-threshold data set intersection method and system for security information processing. The method comprises the following steps: S1, carrying out casual key value pair storage OKVS encoding and decoding between each participant and other participants; s2, each participant constructs a hash table according to a decoding result and elements of the participant; and S3, sending the constructed hash table to a specified party, summarizing information in the hash tables of all participants by the specified party, and finally obtaining a super-threshold intersection result by using a secret sharing scheme. The method has the characteristics that the hardware and operation and maintenance cost can be reduced, the data security is enhanced, and the calculation efficiency is improved, so that the industrial control requirement of short-time response is met.

An electronic device is provided. The electronic device includes a communication module, a memory, and a server processor operably connected to the communication module and the memory. The server processor acquires, from the first electronic device, a first message encrypted based on first security information about the second electronic device, so as to transmit the first message to the second electronic device, acquires, from the second electronic device, a decryption failure signal for the first message so as to transmit the decryption failure signal to the first electronic device, acquires, from the second electronic device, second security information about the second electronic device so as to transmit same to the first electronic device, receives, from the first electronic device, a second message encrypted based on the second security information, and can transmit the received second message to the second electronic device.

Disclosed in the present invention is a smart port management system based on a blockchain. The system comprises: a cargo information collection module, which is used for collecting cargo information; an information uploading module, which is used for performing on-chain processing on the collected cargo information and uploading the cargo information to a blockchain; a cargo conveyance collection module, which is used for collecting information related to cargo conveyance in a port by unmanned conveying devices in the port; a vehicle information collection module, which is used for collecting information related to vehicles entering the port; a personnel information collection module, which is used for collecting personnel information in the port; a port protection collection module, which is used for collecting information related to protection devices at port terminals; and a security history collection module, which is used for collecting historical security information of the port. The present invention enables more comprehensive and smart port management.

Processors, systems, methods, and computer program products to detect unauthorized modifications to security information in a security device. In at least one embodiment, a processor comprises one or more circuits that use information stored in one or more storage locations of one or more security devices to detect whether the security devices have been rebooted.

One example method includes receiving, by a confidential container service from a tenant, a request to provision a tenant node, provisioning the tenant node using a multi-tenant trusted execution environment (TEE) attested resource provisioning process, receiving, from the tenant, tenant-specific security information concerning the tenant node, storing the tenant-specific security information in a tenant-specific catalog, implementing security procedures, specified in the tenant-specific security information, in the tenant node, and upon successful authentication of the tenant, using the security procedures, enabling the tenant to access the tenant specific confidential resources from the tenant node(s).

The invention relates to the technical field of intelligent locks, and discloses a video recording method and device of an intelligent door lock, computer equipment and a storage medium, the method comprises the following steps: when an event backtracking function of the intelligent door lock is in an enabled state, detecting a trigger event for the intelligent door lock; judging whether the trigger event has a backtracking requirement or not based on a preset analysis strategy; if the backtracking demand exists, recording the outdoor environment of the intelligent door lock based on the trigger event to obtain a recorded video; and when a playing condition corresponding to the trigger event is met, controlling the intelligent door lock to execute a playing operation of the recorded video. The problems that an existing intelligent lock depends on an application program to display safety information, so that key safety information cannot be effectively transmitted due to the fact that a user does not actively check the key safety information, and the practical function value cannot be fully exerted are solved.

The invention discloses a coal mine safety information intelligent monitoring system applying an industrial internet, and relates to the technical field of intelligent monitoring. During operation of the system, multi-source data are collected from equipment and subjected to primary processing, and data from different sources are subjected to space-time matching and association by using a data fusion technology; and obtaining a coal mine safety information early warning index Yjzs after calculation, analyzing the stress change and risk of the underground rock stratum, and simulating and predicting the chemical risk in the mine by processing the hydrogen sulfide diffusion rate and nitrogen oxide concentration gradient data and adopting a computational fluid dynamics (CFD) chemical reaction rate model. And monitoring and evaluating behaviors of coal miners and operation conditions of equipment, comparing a coal mine safety information early warning index Yjzs with a preset warning threshold value M and a danger threshold value N, generating a corresponding strategy scheme according to a comparison result, and dynamically adjusting the threshold value to adapt to different mine conditions and safety standards.

The invention provides a security information reading method and device. The security information reading method comprises the steps of obtaining a current life cycle corresponding to a target chip under the condition that a reading request of reading security information of the target chip is received; a target reading position is selected from a first storage unit and a second storage unit according to the current life cycle, the first storage unit is used for storing safety information injected into a target chip after the chip leaves a factory, and the second storage unit is used for storing safety information injected into the target chip during chip design and production; and reading the target security information stored in the target reading position. By means of the safety information reading method, the probability of potential safety hazards existing in a factory chip is reduced.

Systems and methods for generating predicted end-to-end cyber-security attack characteristics via bifurcated machine learning-based processing of multi-modal data are disclosed. The system accesses multi-modal data indicating a set of security information related to a computing system. The system then generates a set of extracted characteristics indicating a cyber-security attack on the computing system, via a supervised machine learning model, using the multi-modal data. Using this information, the system generates a revised set of extracted characteristics indicating the cyber-security attack, via an unsupervised machine learning model, using the extracted set of characteristics indicating the cyber-security attack, where the revised set of characteristics includes at least one new characteristic that was not included in the extracted set of characteristics indicating the cyber-security attack on the computing system. The system then generates for display a graphical representation of the revised set of extracted characteristics.

The invention discloses a smart park security system based on a GIS technology, and belongs to the technical field of security protection. Comprising a GIS basic service module, a security element plotting module, a basic element visualization module, a multi-source heterogeneous security information integration module, a data storage and management module, a depth feature extraction module, a model training and real-time reasoning module and a control response and verification module. And the GIS basic service module is used for providing a unified space reference and geographic information service and supporting coordinate conversion, space analysis and map rendering. Based on the unified space reference capability of the GIS basic service module and in combination with the GPS RTK positioning and Beidou dual-mode positioning of the security element plotting module, precise space association of the park security equipment is realized, the plotting position is precise, the real-time operation state of the equipment can be deeply bound with GIS coordinates, and a manager can intuitively master the dynamic state of the equipment through a map, so that the management efficiency is improved. The problems of fuzzy plotting and state disjunction of a traditional system are solved.

The present invention relates to the technical field of network security processing, and particularly to a method for constructing a knowledge base for network security. The method includes the following steps: obtaining a network device system log file and performing network security data collection and processing to obtain network device system network security information data; performing attack behavior sequence mining analysis and knowledge base connection construction on the network device system network security information data to obtain a network security knowledge base; performing network security instance extraction processing and attribute pair value deduction processing on the network security knowledge base to obtain network security instance attribute pair values; performing knowledge relationship optimization analysis based on the network security instance attribute pair values to obtain a network security instance knowledge optimization connection relationship; and performing knowledge relationship update processing on the network security knowledge base according to the network security instance knowledge optimization connection relationship to generate a network security knowledge update base. The present invention can meet the rapid update of network security knowledge.

The invention relates to the technical field of railway safety informatization, in particular to a railway external environment hidden danger intelligent extraction data storage and visualization system. The system is composed of a hidden danger intelligent extraction model integration module, a multi-source data storage module, a multi-source data visualization and hidden danger standing book module and a risk assessment and space analysis module. The front end is constructed based on a Vue framework, the rear end is constructed based on a Flask framework, and data interaction is performed through a RESTful API. According to the system, intelligent hidden danger extraction and dynamic display are realized through fusion of a deep learning algorithm and multi-source data; efficient image processing and distributed storage are adopted, so that the false detection and omission ratio is reduced; the modular design and the micro-service architecture optimize the resource configuration and reduce the operation cost; the visual front-end interface and the interactive design improve the user experience and simplify the operation process; intelligent extraction, efficient storage, visual display and accurate analysis of railway external environment hidden danger data are realized.

The invention provides a security information retrieval reasoning method, device and equipment and a storage medium, and the method comprises the steps: carrying out the analysis processing of an input security case document, and extracting the entity and relation information; then, constructing a character relationship graph and carrying out coding processing to obtain a coded graph; performing retrieval and expansion processing on the encoded atlas according to user query to obtain a retrieval sub-graph; and finally, evidence chain reasoning is carried out based on the retrieval sub-graph, and an analysis report containing a relation network graph and an evidence chain view is generated. Through organic combination of case document analysis, map coding, retrieval extension and evidence chain reasoning, effective extraction of entity relationships is realized in a document information processing stage, structural expression of information is enhanced in a map construction stage, complete associated information is obtained in a retrieval stage, and the retrieval efficiency is improved. Reliable evidence support is established in the reasoning stage, and finally more accurate information support is provided for case analysis.

The invention discloses a micro-service secure communication method and system, electronic equipment and a storage medium, which are used for realizing communication between a request micro-service and a target micro-service, and the micro-service secure communication method comprises the following steps: generating security information based on the micro-service, the security information comprising identity information and authority information; requesting the micro service to initiate a calling request; generating encrypted data based on the calling request; generating an operation certificate based on the calling request, wherein the operation certificate comprises user identity information and operation content; and the target micro-service obtains the encrypted data and calls the operation basis and the security information to carry out security verification, and when the verification is passed, response data is generated and sent to the request micro-service. According to the invention, a comprehensive security mechanism of identity verification, authority control, data encryption and integrity protection is realized, so that the security risk is effectively reduced, and the security and reliability of communication between micro-services of different domains are ensured.

A security feed normalizer aggregates and normalizes threat intelligence data across security feeds and extracts threat descriptors of cybersecurity threats from the aggregated / normalized data. A first large language model (LLM) determines whether each threat descriptor is informative, i.e., comprises sufficient information for reproducing / generating network traffic of the corresponding cybersecurity threat. For informative threat descriptors, a second LLM generates network traffic for the corresponding cybersecurity threats. The generated network traffic is used for subsequent remediation of corresponding threats.

The invention discloses a bank virtual desktop remote access control method and system based on a firewall, and relates to the technical field of firewall security monitoring, and the method comprises the steps: analyzing the security information of a virtual desktop of each business window to determine the security level of the virtual desktop of each business window; the firewall instance of each virtual desktop is set in a targeted manner, and each virtual desktop is protected in a targeted manner, so that the reliability of the firewall instance is improved. The access scene of the virtual desktop of the service window is defined, and different security monitoring strategies are adopted for a single virtual desktop and a plurality of virtual desktops, so that the security of remote access is improved. The dynamic monitoring strategy is set according to the control content and the access scene, and the security monitoring strategy is adjusted by considering the interaction condition among the virtual desktops, so that the security and adaptability of the remote access control of the bank virtual desktop are improved, and the security of the remote access control is ensured.

A safety information supervision apparatus applied to a high-speed rail signaling system includes a communication processor, a Radio Block Center (RBC) interface machine, a Centralized Traffic Control (CTC) interface machine, a supervision and analysis server, an analysis terminal, and a storage device, where the communication processor and the RBC interface machine are communicatively connected to the supervision and analysis server through a monitoring network. The CTC interface machine is communicatively connected to the CTC system of a station and the supervision and analysis server, so as to obtain train information in the CTC system and to transmit an analysis result of the supervision and analysis server to the CTC system through the CTC interface machine. Multi-source data fusion analysis is used to perform filtering and validity analysis on basic data, thereby reducing false alarms.

The invention discloses an event association analysis and early warning system for a security information management platform, and the system comprises an event identifier generation module, an event feature association module, an abnormal event discrimination module, an early warning response execution module, and an early warning triggering module, a data storage module and a behavior verification module. The event identifier generation module determines the association importance in combination with the event emergency level, the type label and the occurrence frequency, and generates a unique identifier; the event feature association module integrates initial, stage and continued feature acquisition values, and compares the values with a reference to form a result; the abnormal event judgment module determines an abnormal monitoring quantity by analyzing a state and the like, and identifies abnormal associated information; and the early warning response execution module optimizes a response path based on a multi-dimensional model in combination with the association importance and historical data. The system improves event identification accuracy, feature association comprehensiveness and the like, and is suitable for security and protection information management.