422 results about "Security Measure" patented technology

The invention discloses an intelligent substation safety measure checking method and system, and the method comprises the steps: obtaining a secondary system topological structure, equipment information and historical safety measure ticket data of a substation, and constructing a quaternary knowledge graph; according to the quaternary knowledge graph, extracting multi-modal features of the maintenance task and identifying the type of a maintenance scene by combining a memory guide reflection decision reasoning mechanism, optimizing a rule reasoning process through a distributed guide local search algorithm, and generating an optimal safety measure operation set for a specific maintenance scene; automatically identifying a correlation loop and determining a minimum safety isolation range through a memory guide decision reasoning mechanism, dynamically generating a minimum safety operation set according to the real-time state of the equipment, and adaptively adjusting operation steps; and an operation dependency relationship model is constructed in combination with unwrapping variational multi-graph representation learning and a distributed guide local search algorithm, and operation sequence compliance verification, risk level assessment and dynamic visual early warning are realized. According to the invention, accurate formulation, dynamic adjustment and risk early warning of safety measures of the intelligent substation are realized.

The invention discloses a security data generation method and device, a storage medium and an electronic device.The method comprises the steps that description information of a target task is obtained, the description information at least comprises a first task attribute corresponding to an equipment type associated with the target task, a second task attribute corresponding to an operation type associated with the target task, and a third task attribute corresponding to an operation step associated with the target task; the description information is used for filling placeholder information in a target template, multiple structured cue words are obtained, and the target template is a cue word template which is retrieved from a pre-constructed template library and related to the target task; and screening out a target cue word from the plurality of structured cue words, and inputting the target cue word into a pre-trained large language model to obtain security data corresponding to the target cue word. The problem of how to improve the generation quality and the generation efficiency of the safety measure data corresponding to the operation ticket and the work ticket is solved.

The present disclosure relates to a system to proactively detect in real time one or more threats in crowded areas. The present disclosure presents a proactive system for real-time threat detection in crowded areas. Utilizing a network of imaging sensors and advanced machine learning algorithms, the system identifies suspicious individuals, objects, and behavioral patterns within a predefined area. The system detects potential threats such as individuals on watch lists, suspicious objects like unattended bags, and abnormal behaviors indicative of security risks, by continuously monitoring and analyzing images and video feeds. Upon detection, the system promptly notifies authorities, providing detailed information on threat location, suspected individuals, and behavioral analysis. Privacy-preserving measures, including encryption of facial recognition data, ensure compliance with privacy regulations. The present disclosure offers a scalable, efficient, and automated solution to enhance security measures, reduce response times, and safeguard public safety in dynamic urban environments.

A method for providing cyber security measures in a shared network estimates in a probabilistic model, a likelihood of a cybersecurity event occurring in a system. Based on the estimated likelihood selectively applies some but not all of the cyber security measures. Based constraints of system resources available for operations a combination discretionary security measures are selected for execution. During runtime of the system, security risk of an aspect of the system is periodically evaluated causing reconfiguration of the security measures for execution based on the estimated security risk and system resources available for operations. Timed automata corresponding to security threats are assigned a risk score associated with the security threat based on one or more states of the automata. An aggregation of multiple risk scores produces a trust score for the overall system. A number of security measures may be selected and allocated based on the trust score.

The inputs and / or outputs of a generative artificial intelligence model are monitored to determine whether they contain or otherwise elicit undesired behavior by the model such as bypassing security measures, leaking sensitive information, or generating or consuming malicious content. This determination can be used to selectively trigger remediation processes to protect the model from malicious actions. Related apparatus, systems, techniques and articles are also described.

A system and method are provided that use metadata encoded in a data flow to determine security actions to perform at a policy-enforcement point based on the security-chain context for the data flow that is provided by metadata (e.g., the security-chain context can include which security operations have been performed upstream on which data packets). The policy-enforcement point receives the data flow and the metadata, including attestations of the security operations that have previously (e.g., upstream) been applied to the data flow. Based on the attested to security operations, the policy-enforcement point selects what security actions to apply next to the data flow, e.g., additional security operations to apply, allow the data flow into a workload or trust zone, drop the workload, perform dynamic load balancing.

The invention provides a data classification and grading method and device based on an artificial intelligence large model technology, and relates to the field of data security. The method comprises the following steps: constructing a data classification and grading catalog according to a preset classification rule, and storing each row of the classification and grading catalog as a document record in a target vector database; respectively carrying out first retrieval operation, second retrieval operation and third retrieval operation on the data classification and grading catalog by taking the business system name, the data table name and the field name as first query conditions so as to obtain a first matching document, a second matching document and a third matching document in the target vector database; sorting the first matching document, the second matching document and the third matching document according to a preset sorting mode, and obtaining a sorting result; and inputting a sorting result into the large language model, and performing data security early warning through the large language model. According to the method and the device, the security problems that corresponding security measures cannot be taken, sensitive data is leaked and the like when a data governance engineer identifies the metadata according to the data classification and classification catalog and judges the classification and security level of the metadata are solved.

A system and method for adaptive data processing combining compression and encryption. The system analyzes input data characteristics, compares probability distributions, and creates a transformation matrix to convert data into a dyadic distribution. It generates a main data stream of transformed data and a secondary stream of transformation information. The system dynamically selects and applies processing techniques, including transformation, encoding, compression, and encryption algorithms, based on analyzed characteristics and real-time performance metrics. It compresses the main data stream using Huffman coding and implements security measures to protect the output. A feedback loop monitors technique effectiveness, updates a knowledge base, and influences future selections. The system can operate in lossless, lossy, or modified lossless modes, adapting to different application requirements. This approach offers an efficient solution for scenarios where both data reduction and security are critical concerns.

Current OT security solutions mostly provide defensive security involving monitoring and network segmentation. However, offensive security, proven effective in IT systems, is not easily applicable to OT systems due to its sensitive nature and high availability requirements. To conduct offensive security measures in OT networks, the concept of Digital Twins emerges as a viable solution but with limited progress in developing virtual replicas that accurately simulate real environments. Further, the process of creating such replicas is inherently complex and time-consuming, often involving extensive manual work. The present invention discloses an environment named as “Battle Twin,” a specialized playground designed for breach and attack simulations specifically designed for OT networks. Battle Twin focuses on mimicking the security posture of the underlying network rather than replicating its production or behavioral aspects. By leveraging Battle Twin, security experts may effectively test and evaluate offensive security strategies without even touching real OT environments.

Systems, computer program products, and methods are described herein for AI-based adaptive security parameter calculation in license key generation with quantum-resistant protections. The present disclosure is configured to utilize advanced cryptographic techniques, including elliptic curve cryptography and SHA-3 hashing, to produce secure digital signatures for license keys. An AI-driven engine analyzes historical security data to adaptively adjust key generation parameters, ensuring enhanced protection against current and emerging threats. This adaptive approach allows for continuous learning and improvement of security measures, making the system robust against both classical and quantum cryptographic attacks. The disclosed methods integrate the generation, assessment, and validation of keys into a streamlined process that promotes high security while maintaining efficiency.

The invention provides a personnel safety dynamic early warning method and system for distribution network line operation, and relates to the technical field of intelligent power grid management, and the method comprises the steps: calling an operation work ticket which comprises a work task, operation personnel information, safety measure requirements, grounding wire installation information, and a regulation and control instruction; text semantic structuring preprocessing is executed, and three-dimensional security features are extracted; security statement extraction is carried out, and a structured task template is established; when the positioning information of the target operating personnel is identified to accord with the area range of the target area, activating the target area; establishing a time sequence working data set based on ground wire intelligent sensing and operation tool intelligent sensing; and performing security verification, and generating a security dynamic early warning. According to the invention, the technical problem that the response speed and accuracy of safety early warning are reduced because the safety assessment of the operation task is not accurate enough due to the lack of an intelligent information extraction and task verification mechanism in the distribution network line operation in the prior art is solved.

The invention relates to the technical field of safety protection, and provides a high-place operation safety belt failure early warning device and method.The real-time state of a safety rope can be evaluated through cooperation of a monitoring main machine and a monitoring auxiliary machine, and the real-time state of the safety rope is divided into a normal state, a low-hanging high-use state, a virtual-hanging state and a straightening state; the real-time state of the safety rope is sent to the handheld monitoring terminal and the supervision terminal through the monitoring host by using the Lora communication technology, so that safety supervision personnel can quickly master the safety condition of a construction site, timely take necessary safety measures and timely find potential safety hazards; by monitoring and feeding back the real-time state of the safety rope in real time, the occurrence rate of falling accidents in high-altitude operation is remarkably reduced, and the safety of constructors is improved; the handheld monitoring terminal has the function of monitoring the plurality of monitoring hosts at the same time, so that the safety supervision efficiency is enhanced, and the safety personnel can better manage the safety states of the plurality of construction personnel.

The invention relates to the technical field of computer network security, in particular to a computer network information security management method and system, which comprises the following steps: S1, risk assessment, S2, security policy making, S3, security protection measure implementation, S4, management measure implementation, S5, security training and propaganda, S6, emergency response, and S7, accident handling and asset identification: comprehensively carding network assets in an enterprise or an organization, comprise hardware equipment, software systems, network services, data and the like, and the importance and value are determined. According to the computer network information security management method and system, through an information security management method, such as a data encryption technology, the data can be converted into a ciphertext form for storage and transmission, and only an authorized officer with a correct key can decrypt and restore the data into original data; therefore, abnormal user access behaviors and potential security holes can be found in time, a basis is provided for improving security measures, and the situation that a database is stolen or leaked in the data transmission process is effectively prevented.

Systems and processes enhance cybersecurity by dynamically generating a decoy sub-application that operates parallel to the primary application using generative design and a large language model. The core feature involves real-time anomaly detection within application traffic, utilizing AI to assess threats and orchestrate appropriate responses. Upon identifying potential security threats, the system employs generative design principles to architect a restricted-functionality sub-application, deploying it instantly to engage and analyze the attack vectors without compromising sensitive production data. The sub-application is isolated through software-defined networking, ensuring that its operations do not affect the primary application's functionality. Additionally, sophisticated traffic redirection mechanisms are employed to divert suspicious traffic from the primary to the decoy application, thereby protecting the integrity while allowing detailed threat analysis. This dual-capability system not only safeguards against disruptions but also enhances adaptive security measures through continuous learning and system adjustments.

Apparatuses, methods, and computer-readable storage media for implementing a cyber-attack security action. One method includes receiving, by a processor, a cyber profile associated with a digital environment, and receiving a security posture associated with the cyber profile. The method includes determining a plurality of security actions to be implemented in the digital environment based on the cyber profile and the security posture, wherein the security posture includes a single point of failure data. The method includes determining a priority security action of the plurality of security actions, implementing the priority security action in the digital environment, and generating a user interface data structure configured to display the implemented security action on a user interface.

The invention relates to the technical field of network security awareness, in particular to a security awareness method and system for a GPU cluster, and the method comprises the steps: collecting multi-source security situation data, and providing basic information for subsequent security analysis; by constructing and updating a cluster security situation map in real time, information timeliness is updated and ensured in real time, and powerful support is provided for risk assessment; a dynamic risk assessment model is utilized to calculate vertex and edge scores, high-risk vertexes and key risk conduction paths are identified, and a basis is provided for resource isolation and scheduling; the targeted instruction is generated according to the security risk score and the preset security policy library, different security risks are effectively handled, and safe and stable operation of the cluster is guaranteed; by converting the instruction into a specific control command and distributing and executing the specific control command, effective implementation of security measures is ensured, and the cluster security protection capability is improved; by setting a finite-state machine monitoring instruction execution state, a recovery mechanism is automatically triggered, and continuous and safe operation of the cluster is guaranteed.

The invention discloses a high-real-time security measurement method for a secure and trusted controller. The method comprises the following steps: S1, determining key firmware in the controller; s2, carrying out integrity verification on the key firmware through the security chip; s3, verifying the integrity of the firmware in the external memory by using the security chip; s4, if the integrity verification of the key firmware is passed, generating an integrity report; if not, corresponding safety measures are taken; s5, for non-key firmware, a soft measurement strategy is adopted for verification; s6, when the firmware is updated, the security chip is used for recalculating the verification information; and S7, if the key firmware is updated, the system is restarted and the step S3 is executed again, and if the non-key firmware is updated, the non-key firmware is restarted. The safety of the system is improved, the starting performance is optimized, and the maintenance and updating process is simplified.

The inputs and / or outputs of a generative artificial intelligence model are monitored to determine whether they contain or otherwise elicit undesired behavior by the model such as bypassing security measures, leaking sensitive information, or generating or consuming malicious content. This determination can be used to selectively trigger remediation processes to protect the model from malicious actions. Related apparatus, systems, techniques and articles are also described.

The invention provides a traffic data statistical analysis method and system based on a large model and a computer program product, and belongs to the technical field of computer network security and data analysis. The method comprises the following steps: acquiring a resource set currently requested by a client; identifying to-be-counted resources and to-be-checked clients; analyzing traffic transmission features, web text features and / or encryption features of the to-be-counted resources within a preset duration; the large model outputs a security checking result for the to-be-checked client; and based on a security checking result, executing security measures for the subsequent resource request of the to-be-checked client. The system comprises the cloud server. According to the scheme provided by the invention, network fraud, malicious traffic and disguised attack data streams can be identified for the fraudulent data of the client by utilizing the existing large model based on network security, so that the value degree of a statistical result of traffic data analysis is improved, and the delay and blockage of cloud resource services are avoided.

The invention relates to the technical field of data security of the Internet of Things, in particular to an edge data security protection system and method based on a security chip, and the system comprises edge equipment which is deployed at the edge of a network and is used for detecting or collecting original data; the security chip is embedded in or externally connected to the edge equipment, and an encryption engine and a security storage area are integrated in the security chip; the encryption engine is integrated with an encryption algorithm, and a secret key is stored in the secure storage area; the security agent software runs on a control system of the edge equipment and is in communication connection with the security chip, and the security agent software is configured with a security policy; wherein the security agent software is configured to receive original data, call an encryption engine of the security chip according to a security policy to encrypt the original data, generate protected data, and send the protected data to a cloud or a data center; or the original data is monitored, and safety measures are taken for the original data with risks.

A system and method for simultaneous compression and encryption of data. The system analyzes input data to determine its properties and creates a transformation matrix based on these properties. Using this matrix, the input data is transformed into a modified distribution, generating a main data stream of transformed data and a secondary stream of transformation information. The main data stream is compressed, and both streams are combined into a single output. The system implements security measures to protect against various attacks, including side-channel vulnerabilities. By using a dyadic distribution algorithm, the system achieves both compression and encryption in a single pass over the data, offering significant efficiency gains. The system can operate in both lossless and lossy modes, providing flexibility for different application requirements. This approach offers a unique solution for data transmission and storage scenarios where both data reduction and security are critical concerns.

A system and method are provided that use metadata encoded in a data flow to determine security actions to perform at a policy-enforcement point based on the security-chain context for the data flow that is provided by metadata (e.g., the security-chain context can include which security operations have been performed upstream on which data packets). The policy-enforcement point receives the data flow and the metadata, including attestations of the security operations that have previously (e.g., upstream) been applied to the data flow. Based on the attested to security operations, the policy-enforcement point selects what security actions to apply next to the data flow, e.g., additional security operations to apply, allow the data flow into a workload or trust zone, drop the workload, perform dynamic load balancing.

The invention relates to the technical field of intelligent management, in particular to an underground garage intelligent management system based on a block chain, which comprises a video anomaly detection module, a block chain encryption storage module, an intelligent risk management module, a parking space demand prediction module, a parking space adjustment control module and a block chain data synchronization module. According to the invention, through real-time image monitoring, the instant identification capability of abnormal behaviors is enhanced, the response efficiency to unauthorized intrusion and speed abnormity is enhanced, the implementation of automatic access control is promoted, the potential security risk is directly reduced, the introduction of the block chain ensures the characteristics of data encryption and non-tampering, and the safety of the system is improved. The security level of monitoring data and the transparency of management are improved, the configuration of safety measures is further optimized through the automation of risk management, the response time is shortened, the utilization rate of a garage is improved through the automation of parking space monitoring, traffic congestion is reduced through effective resource allocation, and the parking space utilization rate is improved. And the overall efficiency and safety of the garage management system are improved.

Various aspects of the present disclosure involve computing environments that provide third-party access-control support. For instance, an access-control computing system can access a secure identity repository having role history data from various contributor computing systems. The access-control computing system can compare an identified set of roles with a set of roles described by role history data for a target entity. The access-control computing system can determine, from the comparison, whether the target entity poses a security risk based on inconsistencies between the sets of roles, durations associated with the roles, or both. The access-control computing system can provide a client computing system with a dynamic access-control data structure that is generated based on the comparison. The dynamic access-control data structure allows the client computing system to output the security assessment to an end user or to otherwise facilitate further security measures with respect to the target entity.

The invention relates to the technical field of emergency communication, and discloses a centralized control center emergency communication deployment method. The method comprises the following steps: collecting and analyzing historical emergency event data, analyzing information transmission contents and priorities thereof under different types of emergency events, evaluating existing communication facilities and performances thereof, formulating a diversified communication link design scheme, adding link redundancy in the design, selecting corresponding communication equipment according to link design requirements, and establishing a diversified communication link design scheme. The method comprises the following steps: configuring a channel, a bandwidth and a data format of selected equipment, designing and implementing a data encryption scheme, configuring communication access control and security measures, performing encryption strength evaluation, performing communication deployment, formulating a fault processing mechanism, monitoring link quality, data flow and a fault state in real time, and sending out communication early warning in time. After deployment is completed, drilling based on different emergency scenes is carried out, the effectiveness of a communication system and the response ability of personnel are tested, drilling data are collected, and the improvement space of emergency communication deployment is analyzed and recognized.

The invention discloses a multi-dimensional security protection method and system applied to an electric power monitoring system, which greatly improve the invasion difficulty and cost by adopting two-factor identity authentication and adding a second authentication factor on the basis of a user name and a password, and solve the problems of single and consistent authentication mode and low security. Meanwhile, through full-life-cycle encryption of the data, by means of an encryption algorithm and an integrity verification mechanism, the data security is guaranteed in the whole process, and the data in transmission and storage links are prevented from being stolen or tampered; in addition, the access control information is prevented from being tampered based on a digital signature technology, signature is carried out when authorization is changed, an identification code is generated, login verification integrity is achieved, illegal access is prevented, and access control safety is guaranteed; in addition, the integrity of the auditing log is verified through the hash value, the log is ensured to be real and reliable, the safety auditing is assisted to accurately restore events and track responsibilities, support is provided for improving safety measures, the safety auditing capability of the system is enhanced, and the safety of the power monitoring system is comprehensively improved.

The present disclosure provides techniques for identification of potential illicit activities (e.g., crimes) and / or abnormalities in large datasets. The techniques fuse data from various sources to purge normal records, analyze records using digital detective models, identify and utilize network-sequencing-chains to collect and process records, and generate reports (e.g., civic profile(s)) from the output of the digital detective models. The techniques comprise receiving data from data sources (e.g., government entities), pre-processing the data to determine records indicating illicit or abnormal behavior, determining crime types, inputting profiles into machine learning models trained to flag potential crimes, and generating encrypted data objects based on the output for review by authorized personnel. Robust security measures such as mission lock enforcement, quorum-governed privilege systems, and self-destruct capabilities may provide a digital security architecture to protect sensitive data and ensure system security.

The invention relates to an equipment remote control system and method based on computer network application, and relates to the technical field of computer networks, and the system comprises a remote control terminal, a remote control server, controlled equipment, a network communication module, a security authentication module, an equipment management module, an instruction analysis module and a data encryption module. According to the invention, security measures such as bidirectional identity verification and data encryption are adopted, illegal access and control are effectively prevented, and the security of data is ensured. Low-delay communication protocols such as an MQTT protocol are adopted, the real-time performance of a control instruction is guaranteed, and the method is particularly suitable for equipment control with the high requirement for the real-time performance. And multiple control protocols are supported, so that equipment of different manufacturers can be compatible, and the deployment cost is reduced. And a simple and easy user interface is provided, so that the user can quickly master, and the working efficiency is improved. And a modular design is adopted, so that new equipment types and functions can be conveniently expanded, and continuously increasing remote control requirements can be met.

An API security system that implements techniques for learning sensitive information fields from a group of API requests. The API security system implementing security measures for protecting the identified sensitive information fields.

An information processing system etc. that presents security evaluation results is provided. [Solution] According to one aspect of the present invention, there is provided an information processing system comprising at least one processor, the processor being configured to execute each of the following steps by reading a program, in which in an acquisition step, an evaluation value of representative answer data selected for each category in which answer data is classified is acquired from multiple answer data created by the person to be evaluated, the answer data including the person to be evaluated's answers to questions related to security, and in an index assignment step, an index indicating the level of security measures is assigned to the person to be evaluated for each category based on the evaluation value of the acquired representative answer data.