187 results about "Security Measure" patented technology

The invention discloses an intelligent substation safety measure checking method and system, and the method comprises the steps: obtaining a secondary system topological structure, equipment information and historical safety measure ticket data of a substation, and constructing a quaternary knowledge graph; according to the quaternary knowledge graph, extracting multi-modal features of the maintenance task and identifying the type of a maintenance scene by combining a memory guide reflection decision reasoning mechanism, optimizing a rule reasoning process through a distributed guide local search algorithm, and generating an optimal safety measure operation set for a specific maintenance scene; automatically identifying a correlation loop and determining a minimum safety isolation range through a memory guide decision reasoning mechanism, dynamically generating a minimum safety operation set according to the real-time state of the equipment, and adaptively adjusting operation steps; and an operation dependency relationship model is constructed in combination with unwrapping variational multi-graph representation learning and a distributed guide local search algorithm, and operation sequence compliance verification, risk level assessment and dynamic visual early warning are realized. According to the invention, accurate formulation, dynamic adjustment and risk early warning of safety measures of the intelligent substation are realized.

A system and method for adaptive data processing combining compression and encryption. The system analyzes input data characteristics, compares probability distributions, and creates a transformation matrix to convert data into a dyadic distribution. It generates a main data stream of transformed data and a secondary stream of transformation information. The system dynamically selects and applies processing techniques, including transformation, encoding, compression, and encryption algorithms, based on analyzed characteristics and real-time performance metrics. It compresses the main data stream using Huffman coding and implements security measures to protect the output. A feedback loop monitors technique effectiveness, updates a knowledge base, and influences future selections. The system can operate in lossless, lossy, or modified lossless modes, adapting to different application requirements. This approach offers an efficient solution for scenarios where both data reduction and security are critical concerns.

Systems and processes enhance cybersecurity by dynamically generating a decoy sub-application that operates parallel to the primary application using generative design and a large language model. The core feature involves real-time anomaly detection within application traffic, utilizing AI to assess threats and orchestrate appropriate responses. Upon identifying potential security threats, the system employs generative design principles to architect a restricted-functionality sub-application, deploying it instantly to engage and analyze the attack vectors without compromising sensitive production data. The sub-application is isolated through software-defined networking, ensuring that its operations do not affect the primary application's functionality. Additionally, sophisticated traffic redirection mechanisms are employed to divert suspicious traffic from the primary to the decoy application, thereby protecting the integrity while allowing detailed threat analysis. This dual-capability system not only safeguards against disruptions but also enhances adaptive security measures through continuous learning and system adjustments.

The invention relates to the technical field of network security awareness, in particular to a security awareness method and system for a GPU cluster, and the method comprises the steps: collecting multi-source security situation data, and providing basic information for subsequent security analysis; by constructing and updating a cluster security situation map in real time, information timeliness is updated and ensured in real time, and powerful support is provided for risk assessment; a dynamic risk assessment model is utilized to calculate vertex and edge scores, high-risk vertexes and key risk conduction paths are identified, and a basis is provided for resource isolation and scheduling; the targeted instruction is generated according to the security risk score and the preset security policy library, different security risks are effectively handled, and safe and stable operation of the cluster is guaranteed; by converting the instruction into a specific control command and distributing and executing the specific control command, effective implementation of security measures is ensured, and the cluster security protection capability is improved; by setting a finite-state machine monitoring instruction execution state, a recovery mechanism is automatically triggered, and continuous and safe operation of the cluster is guaranteed.

The invention relates to the technical field of data security of the Internet of Things, in particular to an edge data security protection system and method based on a security chip, and the system comprises edge equipment which is deployed at the edge of a network and is used for detecting or collecting original data; the security chip is embedded in or externally connected to the edge equipment, and an encryption engine and a security storage area are integrated in the security chip; the encryption engine is integrated with an encryption algorithm, and a secret key is stored in the secure storage area; the security agent software runs on a control system of the edge equipment and is in communication connection with the security chip, and the security agent software is configured with a security policy; wherein the security agent software is configured to receive original data, call an encryption engine of the security chip according to a security policy to encrypt the original data, generate protected data, and send the protected data to a cloud or a data center; or the original data is monitored, and safety measures are taken for the original data with risks.

The invention discloses a multi-dimensional security protection method and system applied to an electric power monitoring system, which greatly improve the invasion difficulty and cost by adopting two-factor identity authentication and adding a second authentication factor on the basis of a user name and a password, and solve the problems of single and consistent authentication mode and low security. Meanwhile, through full-life-cycle encryption of the data, by means of an encryption algorithm and an integrity verification mechanism, the data security is guaranteed in the whole process, and the data in transmission and storage links are prevented from being stolen or tampered; in addition, the access control information is prevented from being tampered based on a digital signature technology, signature is carried out when authorization is changed, an identification code is generated, login verification integrity is achieved, illegal access is prevented, and access control safety is guaranteed; in addition, the integrity of the auditing log is verified through the hash value, the log is ensured to be real and reliable, the safety auditing is assisted to accurately restore events and track responsibilities, support is provided for improving safety measures, the safety auditing capability of the system is enhanced, and the safety of the power monitoring system is comprehensively improved.

The present disclosure provides techniques for identification of potential illicit activities (e.g., crimes) and / or abnormalities in large datasets. The techniques fuse data from various sources to purge normal records, analyze records using digital detective models, identify and utilize network-sequencing-chains to collect and process records, and generate reports (e.g., civic profile(s)) from the output of the digital detective models. The techniques comprise receiving data from data sources (e.g., government entities), pre-processing the data to determine records indicating illicit or abnormal behavior, determining crime types, inputting profiles into machine learning models trained to flag potential crimes, and generating encrypted data objects based on the output for review by authorized personnel. Robust security measures such as mission lock enforcement, quorum-governed privilege systems, and self-destruct capabilities may provide a digital security architecture to protect sensitive data and ensure system security.

The inputs and / or outputs of a generative artificial intelligence model are monitored to determine whether they contain or otherwise elicit undesired behavior by the model such as bypassing security measures, leaking sensitive information, or generating or consuming malicious content. This determination can be used to selectively trigger remediation processes to protect the model from malicious actions. Related apparatus, systems, techniques and articles are also described.

The invention discloses an electric power construction behavior safety detection method and system, and relates to electric power safety. The method comprises the following steps: collecting historical electric power work ticket data, and constructing a work ticket risk feature library; according to the work ticket risk feature library, training a risk identification model based on multi-task learning; collecting text data of the current electric power work ticket, extracting work content and security measure fields, and generating a text feature vector; searching optimal parameter configuration in a parameter space of the risk identification model by using a discretization doliolaria optimization algorithm; the method comprises the following steps: collecting real-time image data of a working site, carrying out target detection and feature extraction on the image data, identifying position coordinates of working personnel and types and wearing state marks of safety protection appliances, encoding a detection result into structured data, and generating an image feature vector; aiming at the lack of a dynamic association verification mechanism between an electric power work ticket text specification and an actual behavior of a work site in the prior art, the static requirement of a work ticket is converted into a dynamic behavior supervision standard.

The invention provides an open pit coal mine safety management and control method and device, electronic equipment and a storage medium, and relates to the technical field of mine field safety protection. The position of a key person is obtained in real time, whether the key person enters a corresponding operation area or not is verified, associated video monitoring is automatically triggered according to the in-place state of the person, safety measure execution is verified through real-time mapping of a video stream and an operation process state, and early warning is conducted when the safety measure execution is abnormal. The problems that in the prior art, due to the fact that a'process-position-video 'triple closed-loop verification mechanism is not formed and multi-source data space-time alignment and dynamic verification are not achieved, the security measure execution rate is insufficient, supervision lags behind, positioning data staticization is caused, video coverage is not matched, approval information is delayed, and data errors exist can be solved.

The invention discloses an intelligent substation safety measure verification and operation and maintenance management and control method and system and a storage medium, and relates to operation and maintenance automation and intelligentization of an intelligent substation. According to the invention, a cloud-edge-end collaborative architecture is constructed; edge equipment is responsible for collecting data and carrying out local intelligent preprocessing; the cloud constructs and dynamically updates a high-fidelity digital twinborn model based on the processed data, performs simulation verification on security measures, and performs real-time auxiliary verification on an edge side by using a lightweight AI model to form dual security verification; finally, the verified instruction is converted into virtual-real superposition operation guidance synchronized with the digital twinning in real time through the mobile AR terminal, and field operation is visually guided. According to the scheme, the fundamental transformation of an operation and maintenance mode from artificial experience driving to data intelligent driving is realized, the decision-making efficiency is optimized through cooperative processing, a safety defense line is constructed by utilizing dual verification, the misoperation risk is remarkably reduced by virtue of AR visual guidance, and a complete intelligent operation and maintenance closed loop is formed.

The invention provides an electrical work ticket safety measure intelligent checking method and device based on a safety measure knowledge base, and electronic equipment. The method comprises the following steps: analyzing a target equipment number and a target operation type from work ticket content of a target power plant in an operation process; searching an equipment search path rule query statement and an equipment safety measure term template corresponding to the target equipment from a safety measure knowledge base according to a target equipment type and a target operation type corresponding to the target equipment number; using the target equipment number as an input parameter of an equipment search path rule query statement, and querying an associated equipment number having an electrical topology connection relationship with the target equipment from a power grid graph database; according to target equipment information corresponding to the target equipment number, associated equipment information corresponding to the associated equipment number, the equipment safety measure term template and the target operation type, generating safety measure content; and intelligently checking the work ticket content according to the safety measure content to obtain the standard electrical work ticket content.

The invention relates to the technical field of power system safety measures, and particularly provides a method for constructing a safety measure generation model based on a graph theory and a large language model, and the method comprises the following steps: constructing a power grid knowledge graph according to a power grid topological graph, and a sequential rule and a restrictive rule of equipment operation; inputting the structured text instruction of the power grid knowledge graph into the large language model, and generating an initial work ticket through the large language model; generating a training sample according to topological features extracted from the power grid topological graph and the initial work ticket, and training the large language model to obtain a topological perception enhancement model; and according to the multi-modal auxiliary data and the topological features, generating a multi-modal feature vector, and re-training the topological perception enhancement model to obtain a security measure generation model, so as to solve the technical problems that the security measure generation model cannot process image data and the generated security measure is easy to violate equipment operation security requirements.

To present security measures that conform to security rules and are applicable to a target system.SOLUTION: A security measure determination apparatus is configured to: extract combinations to satisfy security requirements of a system, each combination including a subsystem specific measure and a component specific measure; and determine subsystem specific measures for a subsystem and component specific measures for components included in the subsystem from the extracted combinations, based on results of comparison of constraints on operating states assigned to subsystems included in the system and constraints to be satisfied by the subsystem to implement the subsystem specific measure and results of comparison of constraints on specifications assigned to components included in the system and constraints to be satisfied to implement the component specific measure.SELECTED DRAWING: Figure 2

The application discloses a kind of power grid Internet of Things platform gateway equipment access security control systems and methods, it is related to the field of security control, including: equipment is generated digital certificate by submitting unique identifier and hardware feature code, and carries out two-way identity authentication with platform;According to device type and business demand, the operating authority is divided for equipment by hierarchical permission model and the real-time data is encrypted protection;System predicts future device access quantity and service type by training LSTM neural network model;Based on the prediction result, the resource allocation proportion of each permission level is dynamically adjusted to meet the demand;When detecting device behavior anomaly, the platform will locate abnormal device and take corresponding security measures.The application has the advantages that: through two-way identity authentication, hierarchical permission model and LSTM prediction, the security access management of power grid Internet of Things platform is realized, the resource allocation is optimized, and the sudden traffic and abnormal behavior are effectively dealt with, the security and efficiency of the platform are improved.

A security measure support device (100) comprises an input unit (181) that inputs security measure information that indicates security measures against cyber-attacks on systems that include a plurality of devices, a storage unit (120) that stores attack scenarios (see attack scenario database (140)) that indicate attack sequences for the cyber-attacks, an update unit (113) that, on the basis of an updated system that is a system that includes devices to which security measures have been applied in accordance with the security measure information, identifies devices to which security measures have been applied that are included in the attack scenarios stored at the storage unit (120), substitutes the devices to which security measures have been applied for the devices of other systems to update the attack scenarios and create updated attack scenarios, and an output unit (182) that outputs the updated attack scenarios.

A computer system includes: a processor; a memory in communication with the processor; multiple user input devices; and a security tool to capture data defining usage patterns of an authorized user operating the multiple user input devices to prepare an authorized user profile and to implement security measures when usage patterns of a current user differ from the usage patterns of the authorized user from the profile. The security tool calls a Machine Learning Model (MLM) that is trained on the usage patterns of the authorized user from the profile, the MLM predicting for the security tool whether usage patterns of the current user indicate that the current user is not the authorized user based on the training of the MLM.

We provide security measures that integrate and analyze information from cyberspace and physical space using generative AI. [Solution] A security support device 10 is provided, comprising: a cyber information collection means 150 for collecting anomaly information in cyberspace; a physical information collection means 160 for collecting anomaly information in physical space; a cyber-physical correspondence means 170 for associating anomaly information in cyberspace with anomaly information in physical space; a generation AI input / output means 110 for inputting the associated anomaly information in cyberspace and anomaly information in physical space as prompts to a generation AI 20 and obtaining security measures as a response from the generation AI 20; and a CPS integrated security measure determination means 120 for assigning priority and reliability to the security measures, which are the response from the generation AI 20, and transmitting them to a CPS (cyber-physical system) 30.

A system and method for identifying compromised systems, even where cyber security measures are in place, continuously monitors system parameters against a set of predefined thresholds. If the system violates those thresholds, either instantaneously or over a period of time, the system determines that unknown processes are using the system; those processes may be unauthorized processes loaded via a successful spoof attack. The system may monitor CPU usage, power usage, temperature, memory access, data storage access, data transmission rates, etc. The system may execute some remedial action when unauthorized processes are suspected.

To facilitate the detection and response status of system security issues, thereby simplifying security measures. [Solution] The system evaluation device includes a generation unit that uses detection result information representing the detection results of vulnerabilities possessed by multiple information processing devices included in the system to evaluate the vulnerability status in the system for each different type of evaluation method and generates evaluation result information representing the evaluation results for each evaluation method, and an output unit that causes an output device to output vulnerability trend information representing the vulnerability trend corresponding to the worst evaluation result among the evaluation result information for each evaluation method.

A moving image comprising: at least one genuine machine-readable image (e.g. barcode 22) capable of actuating a function in a machine reading system 101,104; at least one non-readable image (fake) tha

The invention discloses an electric power operation plan generation method and device based on semantic analysis, electronic equipment and a storage medium, and belongs to the field of electric power, and the method comprises the steps: obtaining a to-be-analyzed electric power operation log text, and inputting the to-be-analyzed electric power operation log text to a preset operation element extraction model to generate an operation element sequence; wherein the operation element extraction model is obtained through supervised training based on an electric power field corpus with an entity type label; the operation element sequence is input into an operation plan generation model to generate an electric power operation plan, and the operation plan generation model is obtained by performing supervision training on historical data with the operation element sequence as input and the corresponding electric power operation plan as an output label; therefore, by implementing the method, the problems of weak relevance between operation steps and risk management and control measures and insufficient pertinence of safety measures in the prior art can be solved.

The invention discloses a power grid static safe operation section similarity matching method, system and device and a storage medium, and the method comprises the steps: carrying out the offline ground state power flow calculation of a historical operation mode of a power grid, and obtaining a ground state power flow result and a ground state system admittance array; taking a ground state power flow result as an initial value, simulating a fault by modifying a ground state system admittance array, performing rapid power flow calculation after the fault, performing analysis to obtain a static safety analysis result, and performing feature extraction; obtaining a plurality of classes of power grid operation modes based on static security feature clustering, and training a power grid operation mode classifier by using the power grid operation modes; and inputting the static security feature in the current power grid operation mode into the trained classifier to obtain a section similarity classification result of the real-time power grid operation mode. According to the method, similar historical sections can be searched for the current operation mode, and associated historical operation modes, maintenance plans and safety measures are provided; and the method can also be used for deciding whether a machine learning model for online static security analysis needs to be updated.

Methods and systems can protect information shown on a screen of a device. A user associated with the device can be authenticated, e.g., using photo identification of the user. In response to authenticating the user, data can be displayed on the device. A camera associated with the device can be automatically activated to take one or more images in response to a triggering event, a predetermined time interval, or randomly generated time intervals. An enhanced privacy environment is detected by analyzing the one or more images to identify that there are more than a threshold number of faces or people in the picture, or by identifying that the user is not in the picture based on a comparison of the picture to the photo identification of the user. In response to detecting the enhanced privacy environment, a privacy mode is enabled. The privacy mode can include various security measures such as concealing sensitive content or providing various security notifications.

An object of the system according to the embodiment is to efficiently identify a repetitive routine task of an employee and propose automation.SOLUTION: A system according to an embodiment includes an operation monitoring unit, a task identification unit, an automatic proposing unit, a generation AI learning unit, and a privacy protection unit. The operation monitoring unit monitors an operation from a PC monitor of an employee. The task identification unit identifies a repetitive routine task from the operation log acquired by the operation monitoring unit. The automation proposal unit proposes automation for the routine task identified by the task identification unit. A generation AI learning part learns the generation AI on the basis of the operation log, and creates the generation AI detailed in the business. The privacy protection unit protects the operation log and the training data of the generation AI based on strict privacy and security measures.SELECTED DRAWING: Figure 1

The invention discloses a data security online intelligent monitoring management system, and relates to the technical field of information technologies. Comprising the following steps that: a dynamic behavior capture module receives user operation data, performs multi-dimensional classification on the data according to a time sequence, an access permission and an operation type, analyzes and refines an original operation structure through behavior hierarchy, and generates a behavior characteristic matrix. And the detailed analysis capability of the behavior structure is improved. And through real-time updating of the dynamic network model, the system can quickly adapt to changes of behavior characteristics and environments, and synchronization of security policies and real threats is ensured. Behavior flow classification and prediction logic are dynamically adjusted, a system is allowed to adjust safety measures according to real-time analysis, and prediction accuracy is improved. In addition, the strategy for optimizing the intervention path is dynamically selected according to actual safety and intervention requirements, and safety and efficiency in the behavior intervention process are remarkably improved.

This security countermeasure action determination method includes: a step for reading a security action list including a plurality of sets of a security action and an execution condition when executing the security action; a step for acquiring information related to a security incident; a step for determining a security action to be executed from among security actions each having an execution condition satisfied by the information related to the security incident, on the basis of at least one of (i) whether or not the security action can be simultaneously executed, (ii) the number of conditions included in the execution condition, and (iii) a range of the conditions included in the execution condition; and a step for outputting the security action.

The invention provides a security management method and system for a smart park, and a storage medium, and the method comprises the steps: obtaining an abnormal behavior of a person based on multi-source data, and carrying out the type recognition and risk level evaluation of the abnormal behavior; carrying out positioning and cross-video camera real-time trajectory tracking on the abnormal behavior personnel with the high risk level; predicting all potential escape paths of the high-risk-level abnormal behavior personnel by adopting a graph neural network, and selecting an optimal escape path from the potential escape paths; identifying a high-risk area in the park based on the optimal escape path and the risk thermodynamic diagram, and deploying security measures for the high-risk area; meanwhile, whether the optimal escape path passes through the sensitive area is judged, and if yes, an early warning signal is triggered. According to the invention, full-chain intelligent prevention and control of abnormal behavior events of the park are realized, and the intelligent level and response efficiency of the park security and protection system are significantly improved.

The present invention relates to an AI-driven cybersecurity system that provides adaptive protection by identifying, mitigating, and preventing cyber threats in real-time. The system leverages advanced machine learning algorithms to detect anomalies in network traffic, enabling the identification of potential threats, which are then neutralized through automatic adjustments to firewall rules and network configurations. The system includes a tracing module capable of locating the source of cyberattacks by analyzing IP addresses and other network metadata, allowing for comprehensive incident reporting. Additionally, the invention logs and monitors all devices connecting to the network, both via Wi-Fi and hardline access, ensuring security compliance and detecting unauthorized activity. The system's adaptive approach ensures continuous protection by automatically updating security measures and reporting detailed findings to security personnel for future prevention.

An object of a system according to an exemplary embodiment is to detect a security threat of a server in real time and quickly deal with the security threat.SOLUTION: A system according to an embodiment includes a real-time analysis unit, a suspicious activity detection unit, a threat handling unit, a report generation unit, and an automatic learning unit. The real-time analyzer analyzes the behavior of the server in real time using the generated AI. The suspicious activity detection unit detects a suspicious activity from the data analyzed by the real-time analysis unit. The threat handling unit identifies and handles a threat based on the suspicious activity detected by the suspicious activity detection unit. The report generation unit generates a security report based on the information on the threat addressed by the threat handling unit. The automatic learning unit automatically learns based on the report generated by the report generation unit to improve the security measure.SELECTED DRAWING: Figure 1