232 results about "Security Measure" patented technology

The invention discloses an intelligent substation safety measure checking method and system, and the method comprises the steps: obtaining a secondary system topological structure, equipment information and historical safety measure ticket data of a substation, and constructing a quaternary knowledge graph; according to the quaternary knowledge graph, extracting multi-modal features of the maintenance task and identifying the type of a maintenance scene by combining a memory guide reflection decision reasoning mechanism, optimizing a rule reasoning process through a distributed guide local search algorithm, and generating an optimal safety measure operation set for a specific maintenance scene; automatically identifying a correlation loop and determining a minimum safety isolation range through a memory guide decision reasoning mechanism, dynamically generating a minimum safety operation set according to the real-time state of the equipment, and adaptively adjusting operation steps; and an operation dependency relationship model is constructed in combination with unwrapping variational multi-graph representation learning and a distributed guide local search algorithm, and operation sequence compliance verification, risk level assessment and dynamic visual early warning are realized. According to the invention, accurate formulation, dynamic adjustment and risk early warning of safety measures of the intelligent substation are realized.

A system and method for adaptive data processing combining compression and encryption. The system analyzes input data characteristics, compares probability distributions, and creates a transformation matrix to convert data into a dyadic distribution. It generates a main data stream of transformed data and a secondary stream of transformation information. The system dynamically selects and applies processing techniques, including transformation, encoding, compression, and encryption algorithms, based on analyzed characteristics and real-time performance metrics. It compresses the main data stream using Huffman coding and implements security measures to protect the output. A feedback loop monitors technique effectiveness, updates a knowledge base, and influences future selections. The system can operate in lossless, lossy, or modified lossless modes, adapting to different application requirements. This approach offers an efficient solution for scenarios where both data reduction and security are critical concerns.

Systems and processes enhance cybersecurity by dynamically generating a decoy sub-application that operates parallel to the primary application using generative design and a large language model. The core feature involves real-time anomaly detection within application traffic, utilizing AI to assess threats and orchestrate appropriate responses. Upon identifying potential security threats, the system employs generative design principles to architect a restricted-functionality sub-application, deploying it instantly to engage and analyze the attack vectors without compromising sensitive production data. The sub-application is isolated through software-defined networking, ensuring that its operations do not affect the primary application's functionality. Additionally, sophisticated traffic redirection mechanisms are employed to divert suspicious traffic from the primary to the decoy application, thereby protecting the integrity while allowing detailed threat analysis. This dual-capability system not only safeguards against disruptions but also enhances adaptive security measures through continuous learning and system adjustments.

The invention relates to the technical field of network security awareness, in particular to a security awareness method and system for a GPU cluster, and the method comprises the steps: collecting multi-source security situation data, and providing basic information for subsequent security analysis; by constructing and updating a cluster security situation map in real time, information timeliness is updated and ensured in real time, and powerful support is provided for risk assessment; a dynamic risk assessment model is utilized to calculate vertex and edge scores, high-risk vertexes and key risk conduction paths are identified, and a basis is provided for resource isolation and scheduling; the targeted instruction is generated according to the security risk score and the preset security policy library, different security risks are effectively handled, and safe and stable operation of the cluster is guaranteed; by converting the instruction into a specific control command and distributing and executing the specific control command, effective implementation of security measures is ensured, and the cluster security protection capability is improved; by setting a finite-state machine monitoring instruction execution state, a recovery mechanism is automatically triggered, and continuous and safe operation of the cluster is guaranteed.

The invention relates to the technical field of data security of the Internet of Things, in particular to an edge data security protection system and method based on a security chip, and the system comprises edge equipment which is deployed at the edge of a network and is used for detecting or collecting original data; the security chip is embedded in or externally connected to the edge equipment, and an encryption engine and a security storage area are integrated in the security chip; the encryption engine is integrated with an encryption algorithm, and a secret key is stored in the secure storage area; the security agent software runs on a control system of the edge equipment and is in communication connection with the security chip, and the security agent software is configured with a security policy; wherein the security agent software is configured to receive original data, call an encryption engine of the security chip according to a security policy to encrypt the original data, generate protected data, and send the protected data to a cloud or a data center; or the original data is monitored, and safety measures are taken for the original data with risks.

The invention discloses a multi-dimensional security protection method and system applied to an electric power monitoring system, which greatly improve the invasion difficulty and cost by adopting two-factor identity authentication and adding a second authentication factor on the basis of a user name and a password, and solve the problems of single and consistent authentication mode and low security. Meanwhile, through full-life-cycle encryption of the data, by means of an encryption algorithm and an integrity verification mechanism, the data security is guaranteed in the whole process, and the data in transmission and storage links are prevented from being stolen or tampered; in addition, the access control information is prevented from being tampered based on a digital signature technology, signature is carried out when authorization is changed, an identification code is generated, login verification integrity is achieved, illegal access is prevented, and access control safety is guaranteed; in addition, the integrity of the auditing log is verified through the hash value, the log is ensured to be real and reliable, the safety auditing is assisted to accurately restore events and track responsibilities, support is provided for improving safety measures, the safety auditing capability of the system is enhanced, and the safety of the power monitoring system is comprehensively improved.

The present disclosure provides techniques for identification of potential illicit activities (e.g., crimes) and / or abnormalities in large datasets. The techniques fuse data from various sources to purge normal records, analyze records using digital detective models, identify and utilize network-sequencing-chains to collect and process records, and generate reports (e.g., civic profile(s)) from the output of the digital detective models. The techniques comprise receiving data from data sources (e.g., government entities), pre-processing the data to determine records indicating illicit or abnormal behavior, determining crime types, inputting profiles into machine learning models trained to flag potential crimes, and generating encrypted data objects based on the output for review by authorized personnel. Robust security measures such as mission lock enforcement, quorum-governed privilege systems, and self-destruct capabilities may provide a digital security architecture to protect sensitive data and ensure system security.

A method of security information visualization processing, an electronic device and a storage medium are provided. The method includes: in response to a security overview display instruction, displaying a security overview dashboard of a user group; displaying, in the security overview dashboard, anomaly aggregation information and security measure aggregation information; and aggregately displaying, in a display region corresponding to a security scenario, information of a plurality of anomaly categories associated with the security scenario.

The inputs and / or outputs of a generative artificial intelligence model are monitored to determine whether they contain or otherwise elicit undesired behavior by the model such as bypassing security measures, leaking sensitive information, or generating or consuming malicious content. This determination can be used to selectively trigger remediation processes to protect the model from malicious actions. Related apparatus, systems, techniques and articles are also described.

The invention discloses an electric power construction behavior safety detection method and system, and relates to electric power safety. The method comprises the following steps: collecting historical electric power work ticket data, and constructing a work ticket risk feature library; according to the work ticket risk feature library, training a risk identification model based on multi-task learning; collecting text data of the current electric power work ticket, extracting work content and security measure fields, and generating a text feature vector; searching optimal parameter configuration in a parameter space of the risk identification model by using a discretization doliolaria optimization algorithm; the method comprises the following steps: collecting real-time image data of a working site, carrying out target detection and feature extraction on the image data, identifying position coordinates of working personnel and types and wearing state marks of safety protection appliances, encoding a detection result into structured data, and generating an image feature vector; aiming at the lack of a dynamic association verification mechanism between an electric power work ticket text specification and an actual behavior of a work site in the prior art, the static requirement of a work ticket is converted into a dynamic behavior supervision standard.

The invention relates to the technical field of work ticket auxiliary auditing, and discloses an information system operation and maintenance work ticket auxiliary auditing method based on a large model, and the method comprises the steps: obtaining the content of a work ticket, carrying out the text cleaning of the content, and constructing a content accuracy auditing prompt word; the cue word is transmitted into a large model, and a content accuracy auditing opinion is obtained; constructing a work scheme rationality auditing prompt word, and obtaining a work scheme rationality auditing opinion and a potential risk point list; constructing a safety measure completeness auditing prompt word, and obtaining a safety measure completeness auditing opinion; obtaining a content compliance auditing opinion, and generating a final work ticket auxiliary auditing opinion; according to the method, the auditing efficiency, quality and safety are comprehensively improved, and a powerful guarantee is provided for safe and stable operation of an enterprise information system. And meanwhile, through knowledge precipitation and a continuous optimization mechanism, continuous improvement of the auditing capability is realized, and core competitiveness of enterprise operation and maintenance management is formed.

The invention provides an open pit coal mine safety management and control method and device, electronic equipment and a storage medium, and relates to the technical field of mine field safety protection. The position of a key person is obtained in real time, whether the key person enters a corresponding operation area or not is verified, associated video monitoring is automatically triggered according to the in-place state of the person, safety measure execution is verified through real-time mapping of a video stream and an operation process state, and early warning is conducted when the safety measure execution is abnormal. The problems that in the prior art, due to the fact that a'process-position-video 'triple closed-loop verification mechanism is not formed and multi-source data space-time alignment and dynamic verification are not achieved, the security measure execution rate is insufficient, supervision lags behind, positioning data staticization is caused, video coverage is not matched, approval information is delayed, and data errors exist can be solved.

The invention discloses an intelligent substation safety measure verification and operation and maintenance management and control method and system and a storage medium, and relates to operation and maintenance automation and intelligentization of an intelligent substation. According to the invention, a cloud-edge-end collaborative architecture is constructed; edge equipment is responsible for collecting data and carrying out local intelligent preprocessing; the cloud constructs and dynamically updates a high-fidelity digital twinborn model based on the processed data, performs simulation verification on security measures, and performs real-time auxiliary verification on an edge side by using a lightweight AI model to form dual security verification; finally, the verified instruction is converted into virtual-real superposition operation guidance synchronized with the digital twinning in real time through the mobile AR terminal, and field operation is visually guided. According to the scheme, the fundamental transformation of an operation and maintenance mode from artificial experience driving to data intelligent driving is realized, the decision-making efficiency is optimized through cooperative processing, a safety defense line is constructed by utilizing dual verification, the misoperation risk is remarkably reduced by virtue of AR visual guidance, and a complete intelligent operation and maintenance closed loop is formed.

An electronic device, method and computer program product mitigate risks of presenting content that may include links to malware or phishing queries at secondary device(s) by learning from security-related user actions taken at trusted primary device(s). In response to receiving, via user interface component(s), a user input designating third-party content as violating a security policy at an electronic device assigned group level authorization to make security decisions for security policy sharing group of electronic devices, the controller updates a security policy module of the electronic device. The controller configures the electronic device to implement the updated security policy of the third-party content. The controller transmits a security policy update to each second device within the security policy sharing group to trigger an update of the respective security policy module to recognize and locally implement security measures against similar third-party content that is subsequently received.

The invention provides an electrical work ticket safety measure intelligent checking method and device based on a safety measure knowledge base, and electronic equipment. The method comprises the following steps: analyzing a target equipment number and a target operation type from work ticket content of a target power plant in an operation process; searching an equipment search path rule query statement and an equipment safety measure term template corresponding to the target equipment from a safety measure knowledge base according to a target equipment type and a target operation type corresponding to the target equipment number; using the target equipment number as an input parameter of an equipment search path rule query statement, and querying an associated equipment number having an electrical topology connection relationship with the target equipment from a power grid graph database; according to target equipment information corresponding to the target equipment number, associated equipment information corresponding to the associated equipment number, the equipment safety measure term template and the target operation type, generating safety measure content; and intelligently checking the work ticket content according to the safety measure content to obtain the standard electrical work ticket content.

The invention discloses a relay protection operation state monitoring system and method, and the system comprises a data processing module which is used for obtaining a preprocessing equipment image before or after relay protection operation, and generating an equipment state code; the intelligent analysis engine comprises a safety measure card execution sequence modeling module which is used for analyzing a safety measure ticket text to construct an operation sequence rule base; the guiding operation module is used for generating operation steps according to the operation sequence rule base so as to guide a user to operate; the operation recording module is used for structurally generating a safety measure operation behavior record of the user; the intelligent state comparison module is used for comparing equipment state differences before and after relay protection operation according to the equipment state codes, the operation sequence rule base and the safety measure operation behavior records; and the leakage recovery early warning module is used for triggering leakage recovery early warning according to the comparison result. According to the invention, the safety and efficiency of relay protection operation can be improved.

The invention provides a fire operation safety management system, which belongs to the technical field of operation safety supervision and comprises an operation application unit, a measure confirmation unit, an operation examination and approval unit, a start confirmation unit, an operation implementation unit and an operation completion unit. The measure confirmation unit matches and confirms operation safety measures; the job approval unit matches an approval process including multi-stage approval and face recognition verification; the work starting confirmation unit verifies the tools, senses the environment and secondarily confirms gas monitoring; the operation implementation unit is linked with data to supervise the operation state; and the work completion unit guides acceptance, returns tools and the like and archives work tickets. The system has the beneficial effects that operation approval management is strengthened, an intelligent safety protection system of'full-chain control, whole-process trace reserving and full-risk pre-judgment 'is constructed by means of hardware auxiliary means such as field monitoring and personnel positioning, closed-loop management of an operation process is realized, and intrinsic safety transformation from an enterprise to active prevention is promoted.

The invention relates to the technical field of power system safety measures, and particularly provides a method for constructing a safety measure generation model based on a graph theory and a large language model, and the method comprises the following steps: constructing a power grid knowledge graph according to a power grid topological graph, and a sequential rule and a restrictive rule of equipment operation; inputting the structured text instruction of the power grid knowledge graph into the large language model, and generating an initial work ticket through the large language model; generating a training sample according to topological features extracted from the power grid topological graph and the initial work ticket, and training the large language model to obtain a topological perception enhancement model; and according to the multi-modal auxiliary data and the topological features, generating a multi-modal feature vector, and re-training the topological perception enhancement model to obtain a security measure generation model, so as to solve the technical problems that the security measure generation model cannot process image data and the generated security measure is easy to violate equipment operation security requirements.

To present security measures that conform to security rules and are applicable to a target system.SOLUTION: A security measure determination apparatus is configured to: extract combinations to satisfy security requirements of a system, each combination including a subsystem specific measure and a component specific measure; and determine subsystem specific measures for a subsystem and component specific measures for components included in the subsystem from the extracted combinations, based on results of comparison of constraints on operating states assigned to subsystems included in the system and constraints to be satisfied by the subsystem to implement the subsystem specific measure and results of comparison of constraints on specifications assigned to components included in the system and constraints to be satisfied to implement the component specific measure.SELECTED DRAWING: Figure 2

The present invention provides a method for automatically generating safety management and control measures for secondary equipment in a smart substation, and belongs to the field of operation and maintenance technology for smart substations. The method comprises: constructing a safety measure target model based on the SCD file of the smart substation; improving the secondary safety measure operation objects in the safety measure target model; adding safety measure rules to the safety measure target model; generating secondary equipment safety measures based on the secondary equipment to be repaired using the safety measure object model; and automatically generating a secondary safety measure management and control diagram and a secondary safety measure ticket. The present invention realizes automated functions such as the automatic generation of secondary safety measures, the automatic drawing of secondary safety measure management and control diagrams, and the automatic issuance of secondary safety measure tickets by digitally modeling the primary and secondary equipment of the smart substation and their associated relationships.

The application discloses a kind of power grid Internet of Things platform gateway equipment access security control systems and methods, it is related to the field of security control, including: equipment is generated digital certificate by submitting unique identifier and hardware feature code, and carries out two-way identity authentication with platform;According to device type and business demand, the operating authority is divided for equipment by hierarchical permission model and the real-time data is encrypted protection;System predicts future device access quantity and service type by training LSTM neural network model;Based on the prediction result, the resource allocation proportion of each permission level is dynamically adjusted to meet the demand;When detecting device behavior anomaly, the platform will locate abnormal device and take corresponding security measures.The application has the advantages that: through two-way identity authentication, hierarchical permission model and LSTM prediction, the security access management of power grid Internet of Things platform is realized, the resource allocation is optimized, and the sudden traffic and abnormal behavior are effectively dealt with, the security and efficiency of the platform are improved.

A security measure support device (100) comprises an input unit (181) that inputs security measure information that indicates security measures against cyber-attacks on systems that include a plurality of devices, a storage unit (120) that stores attack scenarios (see attack scenario database (140)) that indicate attack sequences for the cyber-attacks, an update unit (113) that, on the basis of an updated system that is a system that includes devices to which security measures have been applied in accordance with the security measure information, identifies devices to which security measures have been applied that are included in the attack scenarios stored at the storage unit (120), substitutes the devices to which security measures have been applied for the devices of other systems to update the attack scenarios and create updated attack scenarios, and an output unit (182) that outputs the updated attack scenarios.

A computer system includes: a processor; a memory in communication with the processor; multiple user input devices; and a security tool to capture data defining usage patterns of an authorized user operating the multiple user input devices to prepare an authorized user profile and to implement security measures when usage patterns of a current user differ from the usage patterns of the authorized user from the profile. The security tool calls a Machine Learning Model (MLM) that is trained on the usage patterns of the authorized user from the profile, the MLM predicting for the security tool whether usage patterns of the current user indicate that the current user is not the authorized user based on the training of the MLM.

In a cloud computing environment, cross-tenant access security measures include monitoring a change or addition of conditional access policies that impedes or is at risk to impede authorized access to a focal tenant from a secondary tenant user. In some cases, cross-tenant access security includes tracking a role assignment list to detect malicious roles, or to detect hindered role changes such as role deletion, or both. In some cases, focus tenant events and auxiliary tenant events are associated in the audit. In some cases, the authorized access is an access when zero persistently limited. In some cases, authorized access is constrained to an IP address range, or to a login from a managed device, or both. In short, security measures are described that aim to mitigate accidental or secret role or policy changes that may interrupt or obstruct authorized cross-tenant access.

We provide security measures that integrate and analyze information from cyberspace and physical space using generative AI. [Solution] A security support device 10 is provided, comprising: a cyber information collection means 150 for collecting anomaly information in cyberspace; a physical information collection means 160 for collecting anomaly information in physical space; a cyber-physical correspondence means 170 for associating anomaly information in cyberspace with anomaly information in physical space; a generation AI input / output means 110 for inputting the associated anomaly information in cyberspace and anomaly information in physical space as prompts to a generation AI 20 and obtaining security measures as a response from the generation AI 20; and a CPS integrated security measure determination means 120 for assigning priority and reliability to the security measures, which are the response from the generation AI 20, and transmitting them to a CPS (cyber-physical system) 30.

A system and method for identifying compromised systems, even where cyber security measures are in place, continuously monitors system parameters against a set of predefined thresholds. If the system violates those thresholds, either instantaneously or over a period of time, the system determines that unknown processes are using the system; those processes may be unauthorized processes loaded via a successful spoof attack. The system may monitor CPU usage, power usage, temperature, memory access, data storage access, data transmission rates, etc. The system may execute some remedial action when unauthorized processes are suspected.

The present invention proposes a traffic data statistical analysis method, system and computer program product based on a large model, which belongs to the field of computer network security and data analysis technology. The method includes: obtaining the resource set currently requested by the client; identifying the resources to be counted and the clients to be checked; analyzing the traffic transmission characteristics, network text characteristics, and / or encryption characteristics of the resources to be counted within a preset time period; the large model outputs a security screening result for the clients to be checked; based on the security screening result, security measures are executed for subsequent resource requests of the clients to be checked. The system includes a cloud server. The solution of the present invention can use the existing large model based on network security to identify network fraud, malicious traffic and disguised attack data streams for the deceptive data of the client, thereby improving the value of the statistical results of the traffic data analysis and avoiding delays and blockages in cloud resource services.

To facilitate the detection and response status of system security issues, thereby simplifying security measures. [Solution] The system evaluation device includes a generation unit that uses detection result information representing the detection results of vulnerabilities possessed by multiple information processing devices included in the system to evaluate the vulnerability status in the system for each different type of evaluation method and generates evaluation result information representing the evaluation results for each evaluation method, and an output unit that causes an output device to output vulnerability trend information representing the vulnerability trend corresponding to the worst evaluation result among the evaluation result information for each evaluation method.

A moving image comprising: at least one genuine machine-readable image (e.g. barcode 22) capable of actuating a function in a machine reading system 101,104; at least one non-readable image (fake) tha

The invention discloses an electric power operation plan generation method and device based on semantic analysis, electronic equipment and a storage medium, and belongs to the field of electric power, and the method comprises the steps: obtaining a to-be-analyzed electric power operation log text, and inputting the to-be-analyzed electric power operation log text to a preset operation element extraction model to generate an operation element sequence; wherein the operation element extraction model is obtained through supervised training based on an electric power field corpus with an entity type label; the operation element sequence is input into an operation plan generation model to generate an electric power operation plan, and the operation plan generation model is obtained by performing supervision training on historical data with the operation element sequence as input and the corresponding electric power operation plan as an output label; therefore, by implementing the method, the problems of weak relevance between operation steps and risk management and control measures and insufficient pertinence of safety measures in the prior art can be solved.