50 results about "Security metric" patented technology

The invention belongs to the technical field of AI large model evaluation, and particularly relates to an AI large model performance and risk automatic evaluation platform and method fusing multiple normal forms. According to the AI large model performance and risk automatic evaluation method fusing multiple normal forms, multi-dimensional evaluation and accurate repair of the AI large model in a complex scene are achieved, the performance index of the model is considered, the safety index and the reliability index are introduced, and therefore the actual situation of the model can be reflected more comprehensively, and the risk of the AI large model can be evaluated more accurately. By implementing a progressive pressure test and monitoring a performance attenuation curve and a failure critical point of the model in real time, potential problems of the model can be found in time, major faults in practical application are avoided, meanwhile, fragile links of the target model can be accurately positioned through backtracking analysis and iterative repair, iterative repair is performed according to a repair priority, and the fault detection accuracy of the target model is improved. Therefore, the stability and reliability of the model are effectively improved.

Methods, systems, and computer storage media for providing brand-focused security administration in an item listing system are described. Using a brand-focused machine learning model, the brand-focused security administrator engine supports generating different comprehensive reports and analytics on brand-related security metrics, including brand compliance rates, infringement incidents, enforcement actions taken, and overall item listing system integrity. The brand-focused security administrator engine also supports visualizing the brand-focused security analytics results data in a manner that enhances usability and decision-making by presenting complex brand-focused security analytics results data in a clear, actionable format. In operation, brand-focused security data is accessed. The brand-focused security data is analyzed using a brand-focused machine learning model that is trained based on a multi-dimensional authenticity analysis dataset. Brand-focused security analytics results data is generated. The brand-focused security analytics results data is communicated to cause display of one or more visualizations based on the brand-focused security analytics results data.

Techniques for optimizing routing decisions based on security metrics within a network environment are described herein. In some cases, by using various security metrics, such as encryption indicators, attestation indicators, secureness metrics, and reliability metrics, an exemplary system can assess the security level and reliability of network paths. These metrics may provide valuable insights into the trustworthiness and integrity of participating nodes and links and enable informed decision-making regarding path selection.

Systems and methods of handling sessions between client devices and one or more server based on session classifications are provided. A device identifies a time series of security metrics corresponding to requests received during a session established by a client device to access a resource provided by one or more servers. The device generates security features from the time series of security metrics based on one or more time windows. The device classifies the session as one of anomalous or genuine using the security features generated from the time series of security metrics based on the one or more time windows. The device handles subsequent requests received during the session based on the classification of the session as the one of anomalous or genuine.

A method (400) for generating a security metric for a target system is disclosed. The security metric provides a quantitative representation of the security of the target system, which representation is non-specific to any given component of the system or point of attack. The method involves generation of an analogical model of the target system (410), and mapping of the analogical model to a directed graph of the target system (430). A distance metric is then calculated (440) between the directed graph of the target system and directed graphs of a plurality of reference systems. The method further comprises inputting a tensor comprising the calculated distance metrics to a trained ML model (450), wherein the ML model has been trained using a training data set that is based on the same plurality of reference systems (450a) and wherein the ML model is operable to process the input tensor and to generate an output comprising a value of the security metric for the target system (450b). Also disclosed is a method (300) for training an ML model to generate a security metric.

Systems and methods for migrating users and modifying workspace definitions of persona groups are described. In some embodiments, a memory storage device may have program instructions stored thereon that, upon execution by a workspace orchestration service, cause the service to: distribute a first workspace definition based upon a first persona group associated with a user to a client device operated by the user, where the user IHS is configured to instantiate a first workspace based upon the first workspace definition; and in response to a change in a productivity or security metric of the first workspace, determine whether to: (a) migrate the user to an existing second persona group, (b) create a third persona group and migrate the user to the third persona group, (c) modify the first persona group and migrate the user to the modified first persona group, or (d) identify a potential security threat.

The present invention belongs to the technical field of power information security operation and maintenance management and control, and relates to a power information security operation and maintenance management and control system. The present invention helps to timely discover network security risks in the power grid by analyzing the network security indicators of the power information of the target power grid within a preset monitoring period, formulate targeted operation and maintenance plans, and avoid the blindness and inefficiency in traditional operation and maintenance methods. By analyzing the operation safety indicators of the power equipment operation information of the target power grid, it helps to timely discover abnormal conditions in the operation of the power equipment, quickly locate potential problems, achieve precise operation and maintenance, improve the efficiency and accuracy of the operation and maintenance work, and ensure the stable operation of the power grid. By analyzing the safety indicators of the power dispatching information of the target power grid within the preset monitoring period, it helps to timely discover the safety hazards in the power grid dispatching process, and helps to take measures in time to adjust the dispatching strategy to ensure the safe and stable operation of the power grid.

The invention relates to the technical field of network information security, in particular to a network element verification method and device, computer equipment and a storage medium. The method comprises the following steps: sending a security verification request to a to-be-verified network element; receiving a first security metric value fed back by the to-be-verified network element based on the security verification request, and performing security verification on the to-be-verified network element according to the first security metric value; and determining the to-be-verified network element as the security network element belonging to the trust domain under the condition that the security verification result is that the verification is passed. According to the method and the device, security detection can be carried out on the to-be-verified network element according to the first security metric value of the to-be-verified network element, one-to-one detection on the to-be-verified network element is ensured, untrusted network elements in a trust domain are prevented, SRv6 network security is ensured not to be influenced, and an SRv6 security model is prevented from losing a trust basis.

There is provided an apparatus suitable for use for facilitating trustworthiness assessment. The apparatus can include a first module and a second module. The first module can be configured to receive at least one input signal which can be processed by the second module to generate one or more output signals. The input signal(s) can be associated with at least one user requirement and / or at least one security objective. The input signal(s) can be processed by manner of identifying at least one security metric associated with at least one security requirement. The security requirement(s) can be based on at least one user requirement and / or at least one security objective, determining a positive determination, a negative determination or an indeterminate determination concerning fulfillment of a security metric in respect of at least one security objective and / or at least one user requirement and deriving at least one trustworthiness score accordingly.

To provide a method for determining a threat scenario using a generative AI.SOLUTION: A method includes: selecting a plurality of target API events from user's API event information obtained in a cloud environment, according to a predetermined condition; mapping each of the target API events to threat behaviors classified by type; determining at least one threat behavior set including at least one of the threat behaviors; determining at least one candidate scenario out of a plurality of reference scenarios stored in advance in a database, on the basis of the threat behavior set; calculating security index information by comparing the candidate scenario with the threat behavior set; determining an expected threat scenario out of the candidate scenarios on the basis of the security index information; and providing solution information to a user terminal on the basis of the expected threat scenario.SELECTED DRAWING: Figure 2

A method of quantifying the satisfaction of security requirements is provided via characterizing a security feature; matching the security feature to a security metric; computing a quantification score that indicates the exploitability of a system to which the security feature is applied; and outputting the quantification score to a security analyst.

It is provided a method for determining a security metric of isolation between different domains (11). The method comprising: determining (40) a scope (11, 12, 13) for a security metric; determining (42) a security control set comprising a plurality of security controls; evaluating (44), for each security control in the security control set, whether the security control is implemented in the scope (11, 12, 13), wherein an implemented security control in the scope (11, 12, 13) defines coverage of the security control; determining (46), for at least each covered security control in the security control set, a correctness value indicating how well the security control is implemented; and calculating (48) the security metric based on both the coverage of the security controls and the correctness values.

The invention provides a comprehensive security index evaluation method based on multi-task learning, and belongs to the technical field of network security management, and the method comprises the steps: synchronously collecting original data from a plurality of heterogeneous security data sources; a multi-task learning neural network model is constructed, and the model comprises a shared feature coding network for outputting shared features; the at least two heterogeneous task decoding networks are used for respectively mapping the shared features into preliminary security assessment results with different attributes; the fusion network is used for carrying out weighted fusion on the preliminary security assessment result to generate a comprehensive security index; using the multi-source security data set to train the multi-task learning neural network model; and inputting real-time security data of a to-be-evaluated system into the trained model, and outputting a comprehensive security index. The method has the advantages that the shared feature coding network can extract high-level feature representations with commonality from different data sources, and feature engineering dependence for a single data source or a single task is avoided.

The present invention provides a software heterogeneous security evaluation method and device. The method includes: performing heterogeneous processing on the original software by using multiple software heterogeneous technologies with different granularities to correspondingly obtain multiple different software variants; respectively extracting gadget feature information affected by the software heterogeneous technologies from the original software and the multiple software variants, and measuring the differences in the difficulty of constructing a gadget attack chain, the potentially available computing power of the attacker, and the cost of the attacker searching for gadgets in the original software and the software variants according to the gadget feature information; obtaining a security metric value of the software heterogeneity according to the differences in the difficulty of constructing a gadget attack chain, the differences in the potentially available computing power of the attacker, and the differences in the cost of the attacker searching for gadgets.

This application discloses a method for full life-cycle damage detection and safety assessment of tunnel structures, belonging to the field of damage detection and safety assessment technology. The method includes: installing and configuring a mobile detection platform along the tunnel's axial direction; generating the mobile detection platform's trajectory and detection point distribution scheme; controlling the mobile detection platform to move sequentially to each detection section position according to the detection path, simultaneously activating each detection module for continuous data acquisition during the movement; generating a three-dimensional mathematical model of the tunnel, a lining thickness distribution map, a thermal radiation anomaly distribution map, and a crack damage distribution map; dividing the tunnel's three-dimensional model into N detection segments at preset intervals, and statistically analyzing the average lining thickness, the number of thermal radiation anomaly points, the crack length density, and the damage level of each segment as safety assessment indicators; performing statistical analysis and trend judgment on the safety indicators of each segment, identifying abnormal segments exceeding safety thresholds, and determining their risk levels.

The application provides a real-time security evaluation method and device. The method comprises the following steps: acquiring a monitoring data stream, and extracting security level information corresponding to each time point of all data blocks from the monitoring data stream; updating the weight change of the security index based on the security level information through a KernelSHAP method; incrementally updating an evaluation model by using the updated security index and weight, and predicting a security evaluation result by using the updated evaluation model; and determining a security evaluation result according to a preset decision threshold and the security evaluation result. By using the KernelSHAP method, the importance of the newly collected monitoring data stream is determined based on a wide learning system structure, the negative influence caused by the approximation error is reduced, the drift detection is combined with the adaptive and generated explanation ranking preference, and therefore the result of the real-time security evaluation task can be better predicted.

The invention belongs to the technical field of intelligent transportation, and relates to a test case generation method for single-intersection multi-subject cooperative passage. Aiming at the problems that an existing test case generation method is insufficient in authenticity in a complex interaction scene and coupling parameters are difficult to model effectively, the method comprises the following steps: firstly, analyzing real natural driving data, and extracting deep coupling time-varying parameter characteristics in a left turn-straight conflict scene of the intersection; further providing a safety index-expected collision distance ACD for quantifying the conflict risk; on the basis, a Markov method is combined to carry out sampling estimation on probability distribution of scene parameters, a Markov chain is utilized to construct a state transition probability matrix, and dynamic trajectory generalization generation of coupling parameters is realized; for a complex scene, an independent parameter combination strategy is further fused to generate a complete test case set, and a reliable test benchmark is provided for an IVCPS system. According to the method, the generation efficiency and authenticity of the test case in a complex interaction scene are remarkably improved, and the technical blank in the field is filled.

The invention relates to a software performance evaluation method and device, computer equipment and a storage medium. The method comprises the steps of obtaining software measurement data in a target software development process; the software measurement data comprises code measurement data, demand data, compiling construction data, test data and production deployment data; performing statistical analysis on the software measurement data to determine a software measurement value; the software metric value comprises a quality metric value, an efficiency metric value and a security metric value; and evaluating the efficiency of target software development according to the software metric value. By using the software effectiveness evaluation method provided by the invention, the safety of target software development can be evaluated, so that the effectiveness of the target software development process can be comprehensively evaluated.

Apparatus receives configuration information. The configuration information is for monitoring at least one security event and transmitting a security report including at least one security log for the at least one security event. The configuration information indicates at least one security event to be monitored and a criterion to transmit the security log report (SLR). The configuration information may be received from a policy control function (PCF). The security log report may be transmitted to a continuous security monitoring and analytics function or an edge computing server. The configuration may also be used for computing security metrics. The configuration may indicate a parameter, a layer, an interface, a level of detail or a format of the security log report which are to be monitored. The format of the report may comprise a plurality of key value pairs. The criterion to transmit the security log report may include a threshold, a periodicity, or a geographic area. The apparatus may be a user equipment (UE) which may be of the smart phone, internet of things (IoT), extended reality (XR), unmanned aerial vehicle (UAV) type. Also disclosed, receiving security policies. Translating the security policy into configuration information, and transmitting the configuration information.

The invention relates to the technical field of safety assessment, and particularly discloses a smart campus safety assessment method based on the Internet of Things, and the method comprises the steps: data collection and processing, safety index selection, evaluation matrix construction, index weight calculation, index comprehensive evaluation and result decision. According to the scheme, the random forest is constructed, the feature set is screened out through split bagging ensemble learning, the new random forest model is constructed based on the feature set for training, and it is ensured that the finally selected features have high importance in all data; the information entropy is calculated, the dispersion degree of each safety index is measured, the scientificity of weight evaluation is improved, the weight of each safety index is quantified, the redundancy is calculated, and the effectiveness of the indexes is better understood; the weighted decision matrix is calculated to enhance the accuracy of security assessment, so that more important indexes play a greater role in assessment, the relative advantages and disadvantages of each index are quantified, subsequent sorting and decision making are facilitated, and a reliable basis is provided for security improvement.

The invention discloses a terminal operation method and a terminal, and belongs to the technical field of terminals. The operation method of the terminal comprises the following steps: under the condition that a trusted chip controls a first gating chip to switch a communication channel to a first channel, after reading and loading a boot program in a nonvolatile flash memory chip, performing first security measurement based on a first encryption algorithm built in the trusted chip; under the condition that the first security measurement is passed, the trusted chip controls the first gating chip to switch the communication channel to a second channel; and under the condition that the main control module is controlled to be started, the main control module executes an operation corresponding to the target control scene on the boot program in the nonvolatile flash memory chip based on the target control scene. According to the terminal operation method, the security of each link in each terminal control scene is remarkably improved, the trusted chain is established to realize the terminal trusted control in the whole process, and the terminal operation method is applied to various control scenes and has wide application scenes.

The invention relates to a shield tunneling control method based on safe adjustable space and Euler spiral planning. The shield tunneling control method comprises the following steps that S1, current shield attitude information and target attitude information are obtained; s2, based on the current attitude information, the target attitude information and a mapping relation between a preset shield attitude variation and a plurality of safety constraint indexes, analyzing an attitude variation adjustable range when the shield completes current ring tunneling under all safety constraint conditions; according to the method, by establishing the mapping relation between the attitude variation and the security index, the attitude adjustable space conforming to the security constraints of all equipment is analyzed, and the physical security of the decision basis is guaranteed; and furthermore, performing optimization decision in the safe space, generating a smooth path with continuous curvature by using an Euler spiral, and finally realizing accurate tracking through closed-loop control. According to the method, the transformation from artificial experience decision-making to model-driven automatic optimization is realized, and the safe and efficient optimal tunneling attitude can be automatically found under multiple constraints.

Techniques for optimizing routing decisions based on security metrics within a network environment are described herein. In some cases, by using various security metrics, such as encryption indicators, attestation indicators, secureness metrics, and reliability metrics, an exemplary system can assess the security level and reliability of network paths. These metrics may provide valuable insights into the trustworthiness and integrity of participating nodes and links and enable informed decision-making regarding path selection.

This disclosure describes techniques for identifying the criticality of an asset in a network. In an example method, a first security metric of a first asset in a network, as well as network data that identifies data flows associated with a second asset in the network are identified. The second asset is a nearest neighbor of the first asset in the network. The method includes determining, based on the network data, a number of hosts in the network that exchanged data traffic with the second asset during a time period and generating a second security metric of the second asset based on the first security metric and the number of hosts. A security policy of the second asset is adjusted based on the security metric.

The invention relates to the technical field of network security, in particular to a security detection scheduling strategy and method based on a multi-vector factor. According to the method, by integrating multi-dimensional information such as system performance, security events, malicious software history detection, security policies and access records, a dynamically adjusted security detection scheduling policy is constructed. According to the technical scheme, the method comprises the steps of receiving a system detection point vector of multi-dimensional information, and performing data preprocessing; carrying out classification and weighted calculation on the preprocessed data, and combining historical vectors and dynamic monitoring point vectors which are smoothed by Kalman filtering to obtain a system security metric value through entropy calculation; calculating a regional environment safety influence factor by using a statistical method, and fusing the historical vector and the influence factor to obtain a dynamic safety threshold value; and establishing and executing a targeted security detection scheduling model according to a comparison result of the system security metric value and the dynamic security threshold value. The method has the beneficial effects that the detection strategy can be dynamically adjusted according to the overall security of the network environment and the historical data of the equipment, the accuracy and efficiency of security detection are improved, potential security threats are found and coped with in time, and the security of the whole network area is improved.

Systems and methods for identifying session hijacking in computer networks and web applications. The systems / methods comprise a combination of algorithms and techniques that enable real-time detection and mitigation of unauthorized access to user sessions. The systems / methods provide a robust solution to safeguard user data and system integrity by proactively identifying and preventing session hijacking attempts. This is achieved by, first, collecting and storing TLS fingerprint components, using JA4, JA4H, and JA4L fingerprinting methods. Then the fingerprint components are analyzed and compared to previously stored fingerprint data that provide historical context to produce a context-based risk score. This risk score is provided to downstream applications for decision-making such as real-time session revoking, alerts, and security metrics.

The present invention enhances the security visibility of private network resources within a telecommunications network operated by a mobile network operator (MNO). A private network resource is provided to an entity and network security metrics are determined for multiple hops / links within the private network resource. Device security metrics are also determined for multiple wireless devices connected to the private network resource. The network security metrics indicate the security posture of the multiple hops / links, including at least one intermediate hop between the telecommunications network and an endpoint where the entity receives wireless communication data. The device security metrics indicate the security posture of the multiple wireless devices. The network security metrics and device security metrics are output on an individual basis to the entity via a dashboard on a user interface. This allows the entity to view respective security metrics associated with each hop / link and each wireless device.

In some implementations, a system is provided for asynchronously performing and monitoring cybersecurity investigations. A scheduler selects event detection jobs to be performed during a specified time interval, and provides the selected event detection jobs to an orchestrator. For each event detection job, the orchestrator executes a corresponding event detection job worker instance. Performing the event detection job includes querying at least one event data log for event data that represents events that have occurred over a specified time range, processing the event data to generate a detected security metric, and in response to the detected security metric meeting a threshold value, publishing a cybersecurity alert to a cybersecurity investigation result repository. A response system subscribes to the cybersecurity investigation result repository to identify cybersecurity alerts that have been published to the repository, and in response to identifying a cybersecurity alert, performs a security response.

The invention discloses a path planning system for dike breach rescue equipment, and the system comprises an environment sensing module which is used for obtaining environment data and position information, and constructing a rescue environment digital model; the path planning model is used for determining path planning based on the rescue environment digital model; the path planning model is formed by coupling a reward function of a strategy network and a security prediction network, fusing a reliability security index to form an agent decision-making model, and performing training construction based on a PPO algorithm; wherein the policy network is used for acquiring shared features, outputting an action mean value to the security prediction network, and determining a path trajectory of an equipment target according to a total reward; and the interaction module is used for outputting the real-time path planning result, the risk probability and the security classification. According to the technical scheme, dynamic coupling of geological bearing capacity, water flow power, pontoon bridge stability and equipment dynamics is comprehensively considered, and global safety constraints are formed; the transportation safety of the equipment in a complex environment is guaranteed, and the rescue efficiency is greatly improved.

The invention belongs to the technical field of artificial intelligence, and relates to a security policy arrangement method and system based on a large model, and the method comprises the steps: S1, constructing a security component library which is provided with a plurality of security components; s2, constructing an environment state vector; s3, setting different priorities for each security index and forming a user preference vector; s4, constructing a multi-target reward function; s5, training a security policy arrangement model based on reinforcement learning; and S6, when a current user request is received, utilizing the trained security policy arrangement model to dynamically generate a security component calling sequence according to the current environment state vector and the user preference vector, and gradually examining and processing the current user request and candidate replies based on the security component calling sequence. According to the method, normal form transition from a static rule link to dynamic intelligent arrangement can be realized, so that a large model has high safety, high availability, low cost and self-adaptive capability.