1093 results about "Source address" patented technology

The invention relates to the technical field of network security, in particular to a network security situation awareness method and system, and the method comprises the following steps: extracting a source IP address and a target IP address based on a network behavior record, carrying out the statistics of the number of used ports, the transmission direction and the time interval value, analyzing the direction change times and the time interval difference, and screening abnormal communication pairs. And generating an abnormal communication pair set. According to the invention, through analyzing port usage, transmission direction and time interval value, deeply mining communication features, screening abnormal communication pairs and improving identification accuracy, dividing a time sequence window, analyzing rate fluctuation and frequency distribution, locking an unstable time window, combining with a multi-dimensional data classification behavior mode, and extracting a switching path and priority, a multi-dimensional data classification behavior mode is combined. Potential threat paths are identified independently, global threat situations are identified through node interaction relation statistics and correlation analysis and an expansion range, threat assessment precision and efficiency are enhanced, and comprehensive and reliable risk protection capability is provided for network managers.

The invention discloses a door lock and card cooperative processing method and system, and the method comprises the steps: triggering a robot calling process according to preset times of doorbell button operation detected by a first door lock and read neighbor RFID card information, verifying a matching result of an RFID card and a resident registration form, and generating an authority verification passing signal; calculating a target multicast address based on the ID number of the RFID card, and converting the ID number of the RFID card into a false source IP address to obtain a communication parameter set; sending an IGMPv3 report message to the router according to the communication parameter set; according to the triggering operation of the same RFID card detected by the assisted second door lock, an assistance multicast request message is generated, the (S, G) forwarding table item is matched through the router and forwarded to the first door lock, the first door lock sends an assistance confirmation message to the second door lock, and robot calling authorization is completed. By utilizing the embodiment of the invention, efficient, safe and low-delay cross-door-lock cooperative operation can be realized.

Examples described herein include one or more processors; a network interface; and a direct memory access (DMA) engine communicatively coupled to the one or more processors. In some examples, the DMA engine is to receive a DMA data access request and based on an address in the DMA data access request corresponding to a remote memory device, the DMA engine is to cause the network interface to generate at least one packet for transmission to the remote memory device. In some examples, if the source address corresponds to a local memory device and the destination address corresponds to a remote memory device, the DMA engine is to cause the network interface to generate at least one packet for transmission to the remote memory device.

The invention relates to the technical field of government affair information management, in particular to a cloud-based government affair information management method, which comprises the following steps of: S1, adding a sensitivity label for each piece of government affair data in a cloud storage layer; s2, extracting data from the government affair database and generating a dynamic data view with an authority mark; s3, establishing a mapping relation table between routing keys and data source addresses; s4, acquiring a requester department function code, a business scene code and a target data identifier; s5, matching a target data source, and based on the authority mark in the dynamic data view, executing a desensitization operation on the sensitive field; and S6, if the genetic marker bit of the original data is true, superposing the data security classification in the original tag and the current security classification to form a new tag. According to the method, by constructing the sensitivity label and the dynamic authority control mechanism, safe inheritance and accurate access of government affair data in cross-department circulation are achieved, and the safety and compliance of data management are remarkably improved.

The invention relates to the technical field of chips, and discloses a hardware accelerator and a data handling method, the hardware accelerator comprises a doorbell processing module, a descriptor cache module and at least one DMA engine module; wherein a target engine module in the at least one DMA engine module is configured to read a target descriptor from effective descriptors in the descriptor cache module and analyze the target descriptor to obtain a source address field, a source address space identifier, a destination address field and a destination address space identifier, and carrying the target data block in the first user space to the second user space based on the source address field, the source address space identifier, the destination address field and the destination address space identifier, wherein the effective descriptor is read from a descriptor ring in the first user space through the doorbell processing module and is written into the descriptor cache module. Therefore, through cooperative work of all the modules, full-hardware acceleration of user mode data carrying is completed, and therefore the data carrying efficiency is remarkably improved.

The invention aims to provide a communication method of a multi-core system and the multi-core system, and relates to the technical field of computers. The method applied to the Mailbox hardware module in the multi-core system comprises the following steps: receiving an operation configuration instruction of a processor core to the Mailbox hardware module; under the condition that an interrupt trigger signal of the processor core corresponding to the source address is received, sending an interrupt request signal to the processor core corresponding to the destination address according to a communication channel expected to be used so as to transmit the data to be sent until a first preset condition is met, and sending a source interrupt signal to the processor core corresponding to the source address; the first preset condition is that the communication channels of the mailbox source registers recording the source addresses are all used, and the destination addresses recorded by the mailbox target registers of the communication channels are all transmitted. Therefore, the communication concurrency and throughput of the multi-core system can be improved. And meanwhile, the communication reliability of the multi-core system can be improved.

A storage device includes a non-volatile memory and a storage controller, wherein the storage controller includes a cache memory storing some of data stored in the non-volatile memory, an interface circuit receiving, from a first external host, a first request including a source address related to the external storage device, a destination address related to the storage device, and cache update information indicating an update method of the cache memory, provide a second request including the source address to the external storage device, and receive, from the external storage device in response to the second request, a response including first data corresponding to the source address, an address translation circuit generating a physical address of a first type based on the destination address, and a cache controller updating a cache area indicated by the physical address of the first type based on the cache update information.

The invention relates to the technical field of Internet, and discloses a bandwidth control method and device, equipment and a storage medium, and the method comprises the steps: determining a target resource address corresponding to a current request based on the address information of the current request in response to the issuing of the current request; the current request number and the request number threshold value of the target resource address are obtained, and the request number threshold value is determined based on the real-time bandwidth and the redundant bandwidth of the target resource address; and if the current request number is smaller than or equal to the request number threshold value, scheduling the current request to a target resource address, so that a target machine corresponding to the target resource address serves the current request. Therefore, the request number threshold value of the target resource address is determined based on the real-time bandwidth and the redundant bandwidth of the target resource address, so that prediction control is performed on the number of requests which can be borne by a machine, the bandwidth of the machine is controlled to fluctuate in a small range near the bandwidth threshold value, and the service quality of a service is not influenced while the bandwidth utilization rate is guaranteed.

The invention belongs to the technical field of Ethernet high-speed interconnection, and provides a high-speed low-delay 10-gigabit switching method and system based on an FPGA, and the method comprises the steps: receiving Ethernet data frames, storing effective data frames in a data caching module, and generating a caching write-in address and a control signal; reading a destination address, a source address and a type field of the analyzed data frame from the data caching module, and updating a forwarding address table through a dynamic learning mode or a preset mode; based on the updated forwarding address table, a three-level assembly line framework is adopted to complete address searching; reading the data frame from the cache according to the forwarding decision, repackaging the Ethernet header information and the check code, and controlling the sending standard rate; and meanwhile, the sending rate is dynamically adjusted, and VLAN division, port rate and queue scheduling parameters are optimized in combination with an external configuration command. According to the invention, the onboard processor is utilized to cooperate with the FGPA to realize the fast search of the forwarding table, the residence time of the data packet in the switching unit is reduced, and the operation efficiency of the side application is improved.

The embodiment of the invention provides a network application access method and related equipment, a security protection system receives a first message from a terminal, the first message comprises an application layer message header, the application layer message header in the first message carries a first virtual IP address corresponding to a user identifier, and the user identifier is an identifier of a user logging in the terminal; the first virtual IP address is an IP address in a second network; the security protection system obtains a second message based on the first message, the second message comprises an IP basic header, and a source IP address field in the IP basic header in the second message carries a first virtual IP address; and the security protection system sends the second message to the server. According to the embodiment of the invention, the difficulty of tracing to the user based on the message source IP can be reduced.

Multiple roots of trust are described under a super Root of trust (SROT). One embodiment includes: cores of a host processor; a host processor memory subsystem to provide access to a host processor memory; a home agent to provide access by the cores to the host processor memory subsystem and an expansion memory subsystem, a source address decoder to decode memory requests generated from the plurality of cores to determine whether the memory requests are to be directed to the host processor memory subsystem or the expansion memory subsystem. Host-based security circuitry encrypts and decrypts memory requests directed to the expansion memory subsystem, the host-based security circuitry to perform the encryption and decryption based on a second key stored in a cache maintained by the host-based security circuitry.

The invention relates to the technical field of network security, in particular to a network security threat perception recognition response method based on a security knowledge graph, and the method comprises the steps: obtaining data; determining temporary nodes and concerned nodes; determining a marked node; determining risk nodes and suspicious nodes; obtaining a corrected risk node; connecting map edges; determining an abnormal node; adjusting the threshold value and giving an alarm. According to the method, various key indexes are obtained in real time, marked nodes are determined according to the flow change rate in combination with the inlet and outlet flow ratio and the source I P address, risk nodes and suspicious nodes are further determined, the suspicious nodes are corrected through the inlet and outlet flow ratio, map edges are connected, abnormal nodes are determined, and then the threshold value is dynamically adjusted. And finally, giving an alarm based on the abnormal node, and optimizing the judgment standard in real time according to the change of the network environment, thereby effectively solving the problems of low danger identification accuracy and slow response speed caused by overlarge data volume and excessive dependence on the model.

The invention discloses a communication method and system of a serial port network, a storage medium and a program product, and relates to the technical field of communication, the method comprises the following steps: receiving a serial port data packet through a first serial port or a second serial port, and analyzing the serial port data packet to obtain a source address, a destination address and request data; when the destination address is greater than the local address, forwarding the serial port data packet through the second serial port; when the destination address is smaller than the local address, forwarding the serial port data packet through the first serial port; when the destination address is equal to the local address, executing a corresponding task according to the request data, and generating response data; packaging the response data by taking the local address as a response source address and the source address as a response destination address to generate a response data packet; and returning the response data packet through the first serial port or the second serial port receiving the serial port data packet. According to the invention, the communication efficiency of serial port communication among multiple devices can be improved.

The invention relates to the field of network traffic analysis, and particularly discloses a network traffic aggregation analysis method based on deep learning, which comprises the following steps: extracting a traffic data packet subset of a specified source I P address from an original data packet captured by a network interface, and carrying out time sequence modeling on the historical traffic data packet subset by utilizing a deep learning algorithm to obtain a network traffic aggregation analysis result; the method comprises the following steps: dynamically screening a plurality of historical network traffic behavior mode time sequence fragments most related to a current behavior mode based on a latest network traffic time sequence characteristic to form a candidate attribution group by using a source IP address as a source IP address to capture a reference behavior mode of the network traffic of the source IP address; and flow mode incremental aggregation learning is carried out on the newest network flow time sequence mode characteristics and the candidate group characteristics, and behavior migration of the newest flow mode is mined, so that dynamic updating and accurate description of the network flow behavior of the source IP address are realized. According to the method, the time sequence evolution rule of the network traffic behavior can be effectively captured, and the timeliness and accuracy of abnormal traffic detection and behavior pattern analysis are improved.

The invention relates to a data replication method and device based on DMA, equipment and a storage medium. The method comprises the following steps: receiving a data copying instruction, wherein the data copying instruction comprises an initial source address, an initial destination address and a copying data length; determining an alignment difference between the initial source address and the initial destination address; an association ID table is determined according to the data copying instruction and the alignment difference, and in the association ID table, the association ID of one write request corresponds to the association ID of one or two read requests; and for one write request, obtaining a corresponding read request according to the associated ID table and the alignment difference, and writing a target result corresponding to the read request into a target storage medium according to the address of the write request. By adopting the method, the problem that the initial address is not aligned during data copying can be effectively solved.

According to the kernel indirect control flow transfer dynamic verification method based on the eBPF, an eBPF attachment point of an indirect call instruction is positioned, a verification program is dynamically attached, a source address and a target address are captured to generate a compound key, and the legality of a control flow is verified in a pre-constructed BPF hash table; and meanwhile, three indirect addressing modes of a differential strategy adaptive register, an immediate operand and a memory are adopted. Based on an eBPF technology, an EV program can be dynamically loaded into a running kernel as required during running, and the characteristic of dynamic expansion of a modern kernel can be perfectly adapted; all the capabilities are constructed on a universal software mechanism of a Linux kernel and do not depend on any hardware extension; while powerful security defense is provided, extremely low overhead during operation is realized. Benefited from an innovative hybrid verification strategy and an efficient CFG storage scheme, control flow hijacking attacks in the real world can be effectively defended with extremely low performance loss.

A data processing method using a scatter gather direct memory access (SG DMA), the method comprising: obtaining information for a rule table for specific subtasks of a SG DMA from a host, deriving the rule table for the specific subtasks based on the information, deriving source addresses, destination addresses and data sizes for the specific subtasks based on the rule table, and performing a SG DMA operation to transfer data of the data sizes located at the source addresses of a first memory to data spaces of the data sizes located at the destination addresses of a second memory.

The embodiment of the invention provides a trusted IoT (Internet of Things) access method and equipment based on a block chain. The method is applied to the technical field of communication, and comprises the following steps: firstly, generating a key for the Internet of Things in a TEE environment of an intelligent gateway, encrypting a resource address of an Internet of Things device, preventing the key from being acquired by malicious software, preventing the key from being counterfeited, and ensuring the security of the Internet of Things device accessing a block chain network, and a block chain stores a key index instead of the key, so that the security of the Internet of Things device accessing a block chain network is ensured. The risk of key leakage is further reduced; by setting a device management contract and a policy authority contract, the authority of a user for accessing the Internet of Things device is inquired and managed, fine control of the access authority is realized, and only the user having the authority can obtain a corresponding secret key from an intelligent gateway to decrypt an encrypted resource address provided in a block chain. According to the arrangement, leakage of the resource address is effectively prevented, and sensitive information is prevented from being leaked.

Embodiments of the present application disclose a CAN bus-based group parallel address allocation method, a CAN bus node device, and a storage medium. The method comprises: each node device reporting a group identifier of a group to which the node device belongs, and obtaining group identifiers of groups to which other nodes belong; performing group address sorting on the basis of each group identifier, to obtain an address segment corresponding to each group; taking a head address of an address segment corresponding to a group to which a node belongs as a source address of the node; reporting a node identifier of the present node on the basis of the source address, and obtaining source addresses and node identifiers of other nodes; performing intra-group address sorting on the basis of the node identifier of each node in the group to which the node belongs, to obtain an offset serial number of each node in the group to which the node belongs; and modifying the source address of the node into the head address of the address segment corresponding to the group to which the node belongs plus the offset serial number of the node in the group to which the node belongs. By using the method of the present application, automatic grouping and allocation of unique source addresses for same devices belonging to different subsystems or groups on a CAN bus is realized.

The invention belongs to the technical field of data synchronous processing and storage, and particularly relates to a data synchronous conversion method, device and equipment based on a message queue and a big data processing framework and a medium. The method comprises the steps that a data source address is configured, and data needing to be synchronized is selected; configuring a target source address of the received data, and matching table structure information of the data source and the target source; selecting a middleware type, and configuring message queue information; sending the data needing to be synchronized to a message queue; the big data processing framework obtains the data in the message queue, processes and converts the data into a data format expected by a user according to the demand of the user, and then sends the data to the message queue; when the data are stored, the target source reads the processed data in the message queue and stores the processed data; and when the data is exported, reading the processed data in the message queue, reading the data as stream data, and then generating a file format selected by a user for exporting. Real-time synchronization and conversion of the data are ensured, and meanwhile the accuracy of the data is kept.

A computer-implemented method for management of an application on an enterprise network which accesses external networks via a web proxy. The method comprises obtaining enriched metadata concerning an application executed on the enterprise network, the enriched metadata including at least source code information and ownership information, identifying application traffic on the enterprise network based on proxy log data, source IP and destination URL, generating an access control list (ACL) based on the enriched metadata and identified application traffic, the ACL including a source address of the application and a list of allowed destination addresses, converting the ACL into a proxy policy that can be processed by a web proxy to permit access by the application to the destination addresses in the ACL, and establishing data communication between the application and an external network based on the proxy policy.

Disclosed in the present application are a data access control method and device based on semantic support, and a medium. The method comprises: a data provider establishing an ontology model of data semantics on the basis of ontology knowledge of each piece of distributed data source data, and uploading the ontology model to a blockchain network; providing rule information of the data source data, and writing a distributed data source data address and the rule information into a smart contract on the blockchain network, wherein the rule information is used for representing an access control policy for the distributed data source data; receiving a data access request uploaded by a data access end by means of the blockchain network, and acquiring authorization information for the data access request on the basis of the rule information in the smart contract; and if it is determined that the authorization information indicates that access is allowed, on the basis of a data access method corresponding to the ontology model, acquiring fine-grained data corresponding to the data access request, encrypting the fine-grained data, and then sending same to the data access end.

The invention discloses a public opinion home address standardization method and system, and the method comprises the following steps: S1, obtaining and processing multi-source address original data to obtain an address data block, processing the data block based on a pre-trained text embedding model to obtain a corresponding semantic vector, and storing the address data block and the corresponding semantic vector, establishing a multi-source address knowledge base; s2, processing public opinion text data through the text embedding model to obtain a query vector of the public opinion text data; s3, querying the multi-source address knowledge base based on the query vector to obtain a plurality of address data blocks related to the query vector; and S4, constructing a cue word template based on the public opinion text data and the address data blocks, and inputting the cue word template into a large language model to perform public opinion attribution address standardization analysis.

The invention discloses an industrial AI model security management and control system, and the system comprises a permission granularity control module which is used for declaring a required minimum permission set when an AI model is registered, and generating a dynamic access token containing a permission list for the model; wherein the identifier is a resource operation authority identifier; the permission mapping table module is used for maintaining a mapping relation from the resource operation permission identifier to the actual resource address; the access verification module is used for verifying the validity and the permission range of the dynamic access token when the model requests the system resources, and refusing the non-permission access; and the dynamic permission recovery module is used for removing the target permission identifier in the authorized permission set of the model in real time to update the permission set, marking that the old token is invalid, and generating a new token containing a timestamp based on the new permission set. According to the method, the industrial AI model can be effectively prevented from abusing the authority, and the system security is improved.

Network monitoring system (100) comprising: a communication network (NT) comprising a plurality of nodes (N1-NN) and a plurality of node connections (E1-EP); wherein each node comprises an asset (AS1-ASF) configured to receive / transmit packets; a plurality of software agents (AG1-AGN) each installed in at least part of said plurality of nodes; each software agent being configured to redirect packets from a respective asset; at least one monitoring computer (CS) provided with software resources configured to: receive the packets sent by each software agent (AG1-AGN); extract from said packets source addresses and destination addresses; identify the plurality of nodes (N1-NN) and the plurality of node connections (E1-EP) from said source and destination addresses and associate each node to a corresponding node identifier; constructing an abstract model (200) representing said communication network (NT), wherein each node is represented by the corresponding node identifier and each node connection is represented by a corresponding link between respective nodes.

The invention provides an intelligent computing center path distribution method, a data transmission method and a network system. According to the technical scheme, based on the time sequence characteristics of the AI training data flow and the characteristic that each set communication library only selects one communication algorithm to drive data flow transmission in the same communication period, the data flow identification capable of identifying the data flow and the communication algorithm corresponding to the data flow identification are obtained, and path planning is carried out based on the communication algorithm. In this way, during actual communication, data streams driven by different communication algorithms on the same path cannot be transmitted at the same time, the link congestion risk is reduced, and idle links are reserved for subsequent data streams of the same communication algorithm; different links are allocated to data flow identifiers with the same source IP address or the same destination IP address corresponding to the same communication algorithm in the same set communication domain, multi-path load sharing is carried out, data flow dispersed transmission based on the same communication algorithm drive is ensured, the congestion risk of a single link is further reduced, and the transmission efficiency is improved. The communication efficiency of an intelligent computing center network is expected to be improved.

An embodiment of the present application discloses a data encryption method and related devices. When a terminal device and a server perform network communication through an interaction message, the source addresses in the message request message and the traffic message exchanged between them are encrypted by the public key of the receiving end, and the real source address of the message can be obtained only after being decrypted by the private key of the receiving end. By encrypting the source address of the message, even if an attacker obtains the message, the attacker can only know the receiving end of the message and cannot determine the sending end of the message, so that the attacker can only obtain fragmented information and cannot splice the fragmented information, thereby reducing the possibility of leaking user privacy through the source address and destination address of the message. Moreover, as a terminal device serving as the data receiving end, it can also restore the real source address of the received message through its own private key, ensuring the security of message reception.

The invention provides a geographic information system data management method and device and electronic equipment, and relates to the technical field of geographic information system data management. The method comprises the following steps: encrypting a first uniform resource address of a service resource related to geographic space data according to a preset rule to obtain a second uniform resource address; when request information including a second uniform resource address from a client is received and the client accords with preset authorization information, determining a first uniform resource address corresponding to the second uniform resource address, and obtaining response data including service resources corresponding to the second uniform resource address according to the first uniform resource address, and returning the response data to the client. Through encryption processing, address decryption, conversion and the like, effective management and access of the geographic information system data are realized, the management difficulty of the geographic information system data is reduced, and the management efficiency of the geographic information system data is improved.

The invention provides a communication method and device and a computer readable storage medium, and the method comprises the steps that a third network element receives a first message from a first network element, and the source IP address of the first message is the first IP address of the first network element; and when it is determined that the first message satisfies the first filtering condition, a first request is sent to a fourth network element, the first request is used for requesting establishment of a voice dedicated bearer, the first request comprises first PCC rule information corresponding to the first filtering condition, and a source IP address of the first filtering condition comprises a first IP address of the first network element. According to the embodiment of the invention, interaction can be carried out through network elements such as SBC, UPF / PGW-U, SMF / PGW-C and the like in allusion to the PCF / PCRF fault condition, the establishment of the special voice bearer is realized, and the reliability of the voice service can be improved.

The embodiment of the invention discloses a source address verification method and device, electronic equipment and a storage medium, and relates to the technical field of network security, and the method comprises the steps: carrying out the identity authentication of an access network and a source PoP node through a bidirectional authentication mechanism, obtaining the source prefix information of the access network, and binding an entrance interface, the method comprises the following steps: acquiring state information of all PoP nodes and links to calculate a plurality of independent paths, determining an optimal path set according to a path dispersity score and optimizing traffic distribution, receiving a data packet through a source PoP node, fragmenting and marking the data packet, transmitting each fragment to a target PoP node based on the optimal path set, and performing integrity and authenticity verification. And recombining the verified fragments to obtain an original data packet, executing source address verification and legality verification on the original data packet, and forwarding the original data packet after passing the verification. The problems that the prior art depends on a single path, malicious traffic cannot be accurately recognized, the defense effect is poor, attacks cannot be quickly responded, and deployment is difficult are solved.