116 results about "Security solution" patented technology

Systems and methods for mathematical modeling of the hardware and software stack of commodity computer platforms are provided, enabling provable guarantees on memory, device, and program execution. This approach addresses the technical problem of reliance on system agents that rely on implicit trust in the operating environment, which can be exploited by sophisticated attackers using complex threats such as memory access exploits and code / data integrity exploits. The solution provides a proactive, mathematically-backed security solution that eliminates entire classes of cyberattacks by design, ensuring realizable guarantees on commodity computer platforms running hardware and software stack elements at the lowest operating level. This approach has significant advantages over current reactive cybersecurity methods, including reduced complexity and overhead, and increased confidence in the integrity of the system. The solution's main uses include providing mathematically-backed security and availability guarantees for critical infrastructure, financial institutions, and other organizations vulnerable to cyberattacks.

Current OT security solutions mostly provide defensive security involving monitoring and network segmentation. However, offensive security, proven effective in IT systems, is not easily applicable to OT systems due to its sensitive nature and high availability requirements. To conduct offensive security measures in OT networks, the concept of Digital Twins emerges as a viable solution but with limited progress in developing virtual replicas that accurately simulate real environments. Further, the process of creating such replicas is inherently complex and time-consuming, often involving extensive manual work. The present invention discloses an environment named as “Battle Twin,” a specialized playground designed for breach and attack simulations specifically designed for OT networks. Battle Twin focuses on mimicking the security posture of the underlying network rather than replicating its production or behavioral aspects. By leveraging Battle Twin, security experts may effectively test and evaluate offensive security strategies without even touching real OT environments.

The invention discloses a communication method and device, which are used for realizing a security scheme in the process of establishing MPQUIC connection between a terminal device and a user plane function. In the present application, the method comprises: after a first MA PDU session of a first terminal device is established, the first terminal device negotiates with a first user plane function to establish a first MPQUIC connection, and the first MPQUIC connection is associated with the first MA PDU session. The first terminal device deduces a key for protecting data of the first MPQUIC connection according to the pre-configured key, and the data of the first MPQUIC connection is transmitted through a plurality of paths between the first terminal device and the first user plane function. Wherein the pre-configured key is also used for the first terminal device to establish a second MPQUIC connection with the second user plane function, and the first user plane function and the second user plane function are located in the same public land mobile network.

The invention discloses a brain-like edge calculation-driven multi-mode intelligent security method and system, and aims to improve the security capability in a complex dynamic scene. According to the method, multi-modal data of videos, audios, sensors and the like are collected, preprocessing is carried out by utilizing a brain-like edge computing gateway, dynamic behavior characteristics are extracted, secondary confirmation is carried out through a lightweight visual large model, and then formal early warning is generated. And the system executes intelligent linkage operation according to the early warning information risk level, and records false alarm information for model optimization. According to the invention, brain-like calculation and multi-modal fusion are adopted to improve the recognition precision, edge calculation reduces delay, an intelligent closed loop realizes differentiated treatment, a low-power design and a modular architecture reduce the cost, and the system has a self-learning capability. The defects of an existing security and protection system in the aspects of dynamic behavior recognition, response speed, disposal intelligence, cost control and the like are effectively overcome. The system is suitable for scenes such as a campus and a community, and provides an accurate, efficient and intelligent security solution.

The invention relates to the technical field of smart home security and protection, and discloses a smart home security and protection system based on a body, and the method comprises the steps: collecting real-time sensing data through Wi-Fi multipath scattered waves, constructing a body sensing network, recognizing behavior feature information, optimizing a preset security and protection model decision architecture, and obtaining an optimized security and protection process. The method comprises the following steps: firstly, generating a security response path, determining a personnel activity space-time distribution state, calculating a security efficiency value, then determining an optimization direction according to the security efficiency value, generating a dynamic protection organization unit, calculating a misjudgment attenuation rate, and finally determining a security state and analyzing a security dimension according to the misjudgment attenuation rate, thereby constructing a more accurate and intimate intelligent security scheme. According to the invention, the intelligent level of autonomous decision making and active protection of home security can be improved.

A method for providing quantum computation-based security solutions for generative artificial intelligence content includes generating an item of new content based on an input, and using a generative artificial intelligence foundation model that has been trained to generate items of new content having characteristics that mimic characteristics of content included in a set of training data, storing the item of new content in a quantum temporal blockchain, detecting an action performed by the generative artificial intelligence foundation model against the item of new content, and logging the action in the quantum temporal blockchain.

A system and a method to build a recovery capability for a compromised network based on user controlled ad-hoc randomness combined with simplicity; immunized against stealth cryptanalysis which overshadows the prevailing security solutions. Using a randomized polar lattice geometry as a secret arrangement for the key bits, to approach one-time-pad security through built-in equivocation.

The invention discloses a data governance security solution method based on artificial intelligence, and relates to the technical field of data management, and the method comprises the following steps: S1, data asset list and classification; s2, data risk assessment; s3, making a data access control strategy; s4, performing data encryption and desensitization processing; s5, data transmission security management; s6, performing data storage security management; s7, performing data use and sharing security management; s8, monitoring and responding to a data security event; and S9, performing data governance security compliance auditing. According to the data governance security solution based on artificial intelligence, by introducing an AI-driven dynamic label management mechanism, a self-adaptive transmission protocol selection mechanism and a dynamic authorization mechanism based on behavior analysis, real-time adjustment and fine management of a data security policy are realized, and potential threats can be quickly responded and prevented; therefore, the security, flexibility and efficiency of data management are greatly improved.

The invention provides a weak password detection method based on multi-modal feature fusion and dynamic behavior analysis. According to the method, multi-dimensional feature extraction is innovatively introduced, including password entropy, semantic relevance, user historical behaviors, system login frequency and the like, so that user feature adaptation is improved, and dependency on a static dictionary is reduced; in addition, through real-time interactive feedback, instant pushing of password strength evaluation and safety suggestions can be realized. Therefore, by means of the method, the problems that in an existing weak password detection technology, the static dictionary dependency is high, the user feature adaptation is insufficient, and real-time feedback is lacked can be solved, the weak password detection precision and defense efficiency of colleges and universities are remarkably improved, and an efficient and easy-to-deploy password security solution is provided for the education industry.

The invention discloses a data security management device based on a medical data operation mode, and relates to the technical field of data security management, and the device comprises a management background system, a data encryption module, a data desensitization module, a sensitive identification module, a data authority module, a data security auditing module and a database. According to the application, the technical means of data desensitization, encryption and the like are adopted to enhance the protection of the data in the processes of acquisition, transmission, storage, processing, retrieval, exchange, display and propagation, so that the data are ensured to be used according to laws and regulations in each link and are not illegally pretended, stolen, tampered, deleted and denied, the confidentiality, authenticity, integrity and non-repudiation of data information are ensured, and the security and reliability of the data are improved. And a security solution integrating identity authentication, access control, data encryption, data desensitization, communication encryption, resource control and security audit is provided.

This disclosure describes techniques for orchestrating implementation of a security solution among network devices. The techniques include determining capabilities of routers of the network and capabilities of a cloud security service to perform security features of a security solution. Based at least in part on the capabilities, the techniques include configuring a router of the network to execute a first subset of the security features on data traffic of the network, and configuring the cloud security service to execute a second subset of the security features on the data traffic. The techniques may also include causing the security solution to be presented to a security administrator via a display, the display providing representations of the first subset and the second subset of the security features.

A method to manage domain-based security profiles in a content delivery network (CDN) is disclosed. The method includes receiving security events detected by one or more security solutions implemented by one or more CDN instances of the CDN, determining, for each of a plurality of domains, a risk score for the domain based on the security events, determining possible next level domains for a CDN instance of the CDN, determining an updated order of an auto-adjusting list maintained by the CDN instance based on risk scores for the domains included in the auto-adjusting list and the possible next level domains for the CDN instance, and sending an update to the CDN instance to cause the CDN instance to update the order of the auto-adjusting list to reflect the updated order, wherein the order of the auto-adjusting list indicates an eviction priority for the domains included in the auto-adjusting list.

The invention discloses a shore power system network security operation and maintenance recommendation method, which belongs to the technical field of electric power engineering informatization, and comprises the following steps: constructing a shore power network security operation and maintenance knowledge base, extracting multi-modal data related to shore power network security operation and maintenance from multiple data sources, dynamically generating a structured knowledge graph by utilizing the pre-trained large model and a preset cue word; performing lightweight fine tuning on the pre-trained large model by using an LISA method; and shore power network security operation and maintenance recommendation: based on the fine-tuned pre-trained large model, searching a related community abstract in a community structure of the knowledge graph by using a retrieval enhancement generation method, and generating an operation and maintenance suggestion or a security solution. According to the method, the network security protocol data, the operation and maintenance log and the user behavior data are analyzed to dynamically adapt to changes of the network security risk and the operation and maintenance environment, so that the operation security and reliability of the shore power system are improved, and the operation and maintenance efficiency and economic benefits are improved.

The invention relates to the technical field of threat analysis, in particular to a threat analysis and reduction method based on an industrial field environment, and the method comprises the following steps: S1, detecting asset equipment in a whole network range to obtain asset equipment information, and obtaining vulnerability scanning data according to the asset equipment information; s2, the AI model determines a network asset attack priority according to the asset equipment information, obtains asset risk data according to the network asset attack priority, and carries out threat analysis through a red team perspective to obtain threat attack coverage data; and S3, establishing a threat model according to the asset risk data and the threat attack coverage data, and outputting a security solution according to the threat model. By detecting the asset equipment and performing vulnerability scanning, the method has the advantages of accurate data and wide data source; through AI model analysis, the analysis surface and the analysis depth of related attacks are greatly enriched; and establishing a threat model and outputting a security solution to prevent omission of security reinforcement points due to incomplete consideration.

The invention discloses a privacy enhanced access control method for an industrial internet of things. The method comprises the following steps: step 1, generating and registering a key; step 2, data encryption and storage; step 3, access control and verification; and step 4, data calculation and decryption. According to the method, the security of a private key is protected through the uniqueness and non-replicability of a physical unclonable function (PUF), encryption state data operation is realized in combination with Paillier homomorphic encryption, and distributed access control and auditing are performed by using a block chain smart contract, so that security storage, access management and privacy protection of device data are realized, the security and efficiency of a system are effectively improved, and the security of the system is improved. The problems of security and privacy protection in the prior art are solved, and a more perfect security solution is provided for an industrial Internet of Things environment.

In some embodiments, a system, process, and / or computer program product includes encapsulating an original traffic header for a monitored flow from / to an entity in a virtualized environment; rerouting the flow from the entity in the virtualized environment to a security platform of a security service, wherein the security platform includes a virtualized firewall; performing security analysis at the security platform using the original traffic header; and rerouting the flow back to the entity in the virtualized environment for routing to an original destination based on the original traffic header, wherein the flow is rerouted over a network tunneling protocol to the security platform of the security service to isolate and protect workloads, application stacks, and / or services, and wherein an enforcement point is remote from a decision point using distributed traffic steering and enforcement via a distributed set of virtualized firewalls provided by the security service to facilitate application level segmentation.

Provided are techniques for a secure IaC solution for deploying cloud resources. A signed Infrastructure as Code (IaC) solution is received. A policy check is performed to determine that the signed IaC solution conforms to one or more policies. An automated validation of the signed IaC solution is performed to check for one or more compliance or security issues. A signature check of the signed IaC solution is performed to determine that the signed IaC solution has not been tampered with. It is determined that the signed IaC solution is authorized to be deployed by checking a trusted profile. The signed IaC solution is executed to deploy cloud resources.

The present invention relates to a system and method for enhancing the security of smart contracts within blockchain networks by utilizing a hardware secure enclave for monitoring and suspending contract activities in response to detected security breaches. The system establishes a trust relationship between the hardware secure enclave and the smart contract, providing the smart contract with a unique enclave signature to ensure secure communications. A modular data monitoring application within the enclave is configured to detect suspicious activities, while an attestation process ensures the integrity of the enclave's code. Upon detecting a security threat, the system initiates a pause function to suspend contract operations and mitigate potential damage. The invention further leverages blockchain relayer modules to witness and transmit contract activity, and consensus mechanisms such as Proof-of-Work (PoW) or Proof-of-Stake (PoS) for transaction verification. This method provides a scalable, secure solution for preventing attacks on smart contracts and safeguarding digital assets in decentralized applications.

The invention relates to the field of network security, and particularly provides a security cooperation system and method in a hybrid cloud environment. The system comprises a unified security management module, a security solution cooperation module and a security function module. The unified security management module analyzes a self-healing algorithm through a policy graph, carries out graph modeling on a multi-cloud security policy, automatically identifies policy conflicts and drifts through graph difference analysis, and realizes continuous consistency and self-healing of a cross-cloud policy. And the security solution cooperation module is embedded into a reinforcement learning agent, dynamically decides an optimal deployment scheme of security resources according to a reward function by sensing a threat situation, a resource utilization rate and response delay, and realizes intelligent self-adaptive arrangement of protection resources. The security function module is used for micro-servitizing and containerizing security capability based on a cloud native technology, transparent injection is realized through a service grid, an automatic compliance repair and verification mechanism is built in, and a compliance closed loop for detection, repair and verification is formed. And the management efficiency and the protection accuracy of the security policy are improved.

The present disclosure provides for systems and methods for assessing security in a computing environment. The system may comprise two or more attacks simultaneously. The system may comprise one or more attack simulations wherein the results are displayed in substantially real time. The system may comprise one or more performance indicators. The performance indicators may provide insight into what attacks are blocked, detected, logged, or alerted. The system may comprise one or more prioritized recommendations for security solutions, which may comprise one or more tool recommendations. The attack path may comprise an aggregation of one or more attack techniques. The system may comprise one or more endpoint solutions or recommendations. The system may integrate as a third-party software into an existing company or security infrastructure. The system may comprise at least one security validation test configured to target at least one security infrastructure of a scoped computing environment.

To enable securing safety at a corresponding intersection even when an automatic operation vehicle itself becomes a communication impossible state.SOLUTION: An information management system 100 includes: communication devices 23, 53 for performing communication of management information MI with an automatic operation vehicle VE1; and a determination device for transmitting an emergency control signal ES for securing safety under a predetermined condition to a first traffic light TL1 when communication is interrupted with the automatic operation vehicle VE1 existing in the neighborhood of the first traffic light TL1.SELECTED DRAWING: Figure 1

Systems and methods for mathematical modeling of the hardware and software stack of commodity computer platforms are provided, enabling provable guarantees on memory, device, and program execution. This approach addresses the technical problem of reliance on system agents that rely on implicit trust in the operating environment, which can be exploited by sophisticated attackers using complex threats such as memory access exploits and code / data integrity exploits. The solution provides a proactive, mathematically-backed security solution that eliminates entire classes of cyberattacks by design, ensuring realizable guarantees on commodity computer platforms running hardware and software stack elements at the lowest operating level. This approach has significant advantages over current reactive cybersecurity methods, including reduced complexity and overhead, and increased confidence in the integrity of the system. The solution's main uses include providing mathematically-backed security and availability guarantees for critical infrastructure, financial institutions, and other organizations vulnerable to cyberattacks.

The invention discloses a binocular recognition all-in-one machine, and relates to the technical field of intelligent security and protection. Comprising a bifocal binocular vision acquisition module, a self-supervised dynamic calibration module, a heterogeneous intelligent calculation module, a multi-modal fusion identification module and a linkage response module, and the identification method comprises the steps of multi-source data acquisition, dynamic calibration, feature extraction and fusion, multi-task parallel processing and intelligent decision and response. According to the invention, cooperation of large-range monitoring and long-distance detail identification is realized through a bifocal lens group, environmental interference is eliminated in combination with a self-supervised dynamic calibration mechanism, personnel identification, vehicle identification and unmanned aerial vehicle detection tasks are efficiently processed in parallel by adopting a CPU + GPU + FPGA heterogeneous architecture, depth, motion and semantic features are fused to construct a multi-target threat assessment model, and the multi-target threat assessment model is established. And a hierarchical linkage response is triggered. According to the invention, the problems of limited field of view, poor environmental adaptability, low multi-task processing efficiency and the like of traditional equipment are solved, and a full-scene, high-reliability and intelligent security solution can be provided for key areas.

To prevent inconsistencies in the quality of response work related to elevator car troubles, which can arise due to differences in the experience and abilities of workers, by using a simple configuration, thereby achieving high-quality remote monitoring and improving the safety of elevator users. [Solution] The remote monitoring support device 120 acquires a signal output from a pressure sensor 137 installed in the elevator car 131 of the elevator 130, determines the position of the car 131 based on the acquired signal, and transmits notification information regarding the determination result to the management server computer 110. This makes it possible to properly determine the position of the car 131 with a simple configuration, and to properly determine whether the car 131 is operating normally, whether it is stopped between floors, etc.

Achieve both cost and safety. [Solution] An information processing system that utilizes a generation AI that generates answers to prompts acquires a prompt, determines whether an on-premise generation AI or a cloud-based generation AI will be the destination generation AI for the prompt, inputs the prompt into the destination generation AI based on the determination result, acquires an answer to the prompt from the destination generation AI that input the prompt, and outputs the answer.

To provide a contractor management system that, while ensuring security of a facility equipped with a security system, such as an apartment house, allows a contractor to smoothly perform work within the apartment house.SOLUTION: In a door sensor device 100, an information processing device 3 includes: a work attribute information acquisition unit that acquires work attribute information indicating an attribute relating to work of a person detected by a human detection sensor 2; an orderer authentication information acquisition unit that acquires orderer authentication information indicating work authentication for a contractor from an orderer; a determination unit that determines whether or not the person detected by the human detection sensor 2 is an authenticated contractor by comparing the work attribute information with the orderer authentication information; the human detection sensor 2 that detects a person entering a prescribed area of a door of a facility; and a door control unit that controls locking / unlocking or opening / closing of a door D. If the determination unit determines that the person detected by the human detection sensor 2 is the authenticated contractor, the door control unit causes the door D to be in an unlocked state or an opened state.SELECTED DRAWING: Figure 3

To provide a system for improving the safety of an area by quickly and efficiently detecting and coping with abnormal behavior.SOLUTION: The system includes means for patrolling crime prone areas with drones, means for mounting sensors and generating AI to detect unusual behaviors and situations, means for alerting and advising upon detection of unusual situations, and means for reporting to police in emergencies.SELECTED DRAWING: Figure 1

Disclosed is a blockchain-based security method that is performed by an integrated web security solution (web application and API protection, WAAP) and using WAAP and application programming interface (API) level management. The blockchain-based security method may comprise: receiving an API safety grade check request from the blockchain under a session establishment with the blockchain, wherein, in the checking of the API safety grade, a security level for vulnerability of the API is checked by itself in management API data of the WAAP with a highest level of safety; and transmitting information on the API safety grade to the blockchain.

The invention discloses a quantum hybrid security chip based on an integrated real-time quantum random source and a security processing unit and a key management method, the chip binds a quantum random stream with security data from a PUFF / encryption chip through a cryptographic binding processing unit to obtain an equipment binding result, and derives an anti-quantum key according to the equipment binding result. The corresponding method protects key generation and equipment authentication processes. According to the security chip and the key management method, a full-stack security scheme from a physical entropy source to an application is provided, and the security chip and the key management method have anti-quantum computing and anti-physical cloning capabilities.

The invention belongs to the technical field of robot control, and discloses an intelligent control method and related equipment for a sweeping robot, home safety monitoring of elderly people living alone is realized through a non-visual sensor carried by the sweeping robot, the elderly people can intelligently adjust a security strategy according to the activity space of the elderly people, safety monitoring and privacy protection are both considered, and the safety of the elderly people is improved. The method has the advantages that resources in the prior art are fully utilized, the development cost is reduced, and a more friendly and natural intelligent security solution is provided for the elderly living alone.