167 results about "System administrator" patented technology

XCB poly-radio devices as finders, locators, scanners, sensors, and Bluetooth (BT) radio topology reporters as part of a global lost-and-found services system. XCB devices function as “smart objects” and combine dual transceivers operating in the telecommunications and the low power ISM radio spectra, with default power management overrides under local control of the BT modem. “Familiar zones” are defined, and a “familiarity index” versus a “strangeness index” based on meta-analysis of BT radio contact logs are used to assign location. Location, in concert with other sensor data, is coupled to conditional logic rules programmable by the user or the system administrator. Locations, determined by monitoring familiar and unfamiliar BT radio topology, trigger executable commands to smartphones, to smart devices generally, and to remote machines, and can for example, generate alerts to a user if radiotagged assets, children or pets have strayed, are lost, or are left behind. When tied to cloud predictive services or increased edge computing capacity, incipient loss of radiotag objects can be detected before an owner knows the smart object is lost. In another embodiment, XCB devices having a novel chip architecture for improved power management of cellular and MCU circuits mediated by BT radio modem that achieves “situational awareness” by monitoring the BT signal environment around the device.

A system manager is implemented on one or more computing devices operating according to special-purpose instructions to detect anomalies and iteratively collect feedback for model re-evaluation. The system manager trains a machine learning model to detect anomalies and determines an accuracy score of the trained model at detecting anomalies in a set of data items. The system manager also determines a contiguous anomaly score value region that includes a threshold portion of incorrectly labeled outputs. The trained model is used to make predictions on production data, and the system manager determines an accuracy of the predictions by selecting a subset of the production data within the contiguous anomaly score value region, clustering the subset into clusters, and selectively sampling data items from the clusters. The accuracy of the predictions on the production data is combined with the accuracy score of the trained model to determine an updated accuracy score. The system manager determines whether to retrain the model based on the updated accuracy score.

A method for reducing the risk of unexpected or unintended actions during a Remote Desktop Protocol (RDP) or SSH (Secure Shell) session by automatically detecting anomalies using vaulted credentials. The method includes initiating a RDP / SSH session on a server and taking screenshots of the session. The screenshots are sent to a system that uses a computer vision algorithm to transcribe the screen information into a text-based transcription of the session. The text-based transcription of the session recording is then provided to a pre-trained LLM which is prompted to look for anomalies using in-context learning. The detected anomalies are presented to a system administrator or sent as alerts to the system administrator.

The invention discloses an application performance monitoring method and system of a linux operating system, and the method comprises the following steps: continuously monitoring a performance index of a target application, tracking a key performance index of a system in a full-link manner, and monitoring a full life cycle related to business data; if the performance index of the target application is abnormal, triggering an alarm, recording an abnormal total system index, and recording an alarm log; intelligent analysis and pre-judgment are carried out on full-amount performance index data, prediction analysis is carried out on performance data through a machine learning algorithm, and possible performance problems are found in advance; and intelligent automatic tuning is realized in combination with expert experience. According to the method, the application performance indexes and the system indexes are monitored in real time, the abnormal results of the application performance indexes and the system indexes are integrated to obtain final performance index abnormal information and record the performance index abnormal information, the problem checking and solving process of a system administrator is greatly simplified, and meanwhile automation and intelligentization of operation and maintenance work are further promoted through intelligent analysis and intelligent adjustment and optimization functions.

A system supports creation and use of cryptographic twins, which are cryptographically unique and private digital representations of entities. Twins can cryptographically encrypt and link an unlimited amount of data on behalf of their corresponding entities. The system can give entities cryptographic ownership and exclusive control over their own twins to preclude data access and tampering, even by system administrators. The system can be configured to recursively enable twins to cryptographically create, own and control other twins, to cryptographically transact with other twins, and to cryptographically transfer ownership and control of twins to other twins. As a result, the system can be configured to cryptographically chain twins to mirror complex ownership, control and transactional relationships that may exist between entities that the twins can represent in the real world.

A system, method, and computer-readable media for establishing a framework for managing application permissions in a group-based communication system. Upon receipt, from an application in a group-based communication system, of an attempt to access a target internet domain, an application manifest associated with the application is accessed. The manifest includes a list of approved internet domains previously approved by an administrator of the group-based communication system which the application may access. Following access of the manifest, it is determined whether the target internet domain is included in the list of approved internet domains. If the target internet domain is included in the list of approved internet domains, the application is allowed to access the target internet domain. If the target internet domain is not included in the list of one or more approved internet domains, access to the domain by the application is denied.

A network connected electronic lock system. The network connected electronic lock system includes a network connected electronic lock system management terminer (10), a network connected electronic lock system server (30), and a group of network interface module (50), a group of entrypads (60), and a group of lockbodies (70) are connected to the network (20) connected electronic lock system server (30) over a network (20). The network (20) connected electronic lock system is managed by a system manager over a network (20) connected electronic lock system management terminer (10) over the network (20) for one or more organizations. Each organization includes one or more branch offices (40). One or more network interface modules (50), one or more module (50), and one or more lockbodies (70) are installed in each branch office (40). Each entrypad (60) connects to the network (20) through the network interface module (50) and controls upto a predetermined number of lockbodies (70).

An illustrative data storage management system protects data in a replicated multi-node system (“cluster”). The illustrative system creates a new administrative entity (“pseudo-client”) that represents the cluster within the system. The system intelligently performs as an adaptive “set it and forget it” system. Preferences for the pseudo-client, including alternate rules that cover various contingencies in the cluster, need not be reset as the cluster undergoes node failures and / or role changes over time. Rather, the disclosed system adapts, on each successive secondary copy job, to the current configuration of the cluster without requiring a system administrator to provide further input or analysis. This approach ensures that jobs can begin promptly as scheduled or on demand. Component selection is based at least in part on geography / zone and / or network topology considerations, which improves the likelihood of job completion and success, and RPO / RTO service levels are more likely to be met.

The systems and methods disclose an automated effective template generation and recommendation for selection. A semantic similarity of a plurality of messages may be identified that at least meets a similarity threshold, each of the plurality of messages reported by a plurality of users as a potentially malicious message. The plurality of messages may be indexed under a common template identifier. One or more messages of the plurality of messages indexed under the common template identifier may be determined to have a report-to-reach ratio less than a report-to-reach threshold. Responsive to the determination, the one or more messages may be identified to be used for generating one or more simulated phishing templates. A recommendation of the one or more templates may be provided to a system administrator and / or a security awareness and simulation training platform to create and deliver simulated phishing messages using the templates.

The invention provides a supplier management system, method and device and a medium, and belongs to the technical field of enterprise supply chain digital management, and the system comprises a multi-role collaborative management module which carries out the user role authority control management of suppliers, service providers, internal inspection departments, internal purchase operation departments and system administrators; the contract and order management module is used for receiving signed electronic contracts and generating hardware and software orders; the order acceptance module is used for receiving quality inspection results of hardware and software by an internal inspection department and outputting acceptance data; the dynamic evaluation module calculates scores of suppliers and service providers according to the acceptance data and historical acceptance data; the automatic payment module is used for paying the payment amount according to the scoring results of the suppliers and the service providers and the content of the electronic contract and updating the state of the contract; and the risk control list module is used for freezing the suppliers and the service providers which exceed the set times of low-score risk early warning. The supplier management process is optimized, the efficiency is improved, and the risk is reduced.

Various embodiments provide an approach to controlled access to online content. Such control may be based on a multitude of factors including but not limited to website content, profile for the person consuming the data. In operation, machine-learning techniques are used to classify the websites based on community and social media inputs, crowd-sourced data, as well as access rules implemented by parents or system administrators. Feedback from users / admins of the system, including the instances of allowed or denied access to websites, in conjunction with other relevant parameters, is used for iterative machine-learning techniques. Embodiments may also allow for real, or near real-time, approval or denial of access to websites by registered admins.

A public toilet alarm and response system comprises a cleaning administrator mobile terminal, a system administrator mobile terminal, an alarm terminal, an alarm switch and a toilet cubicle detection module. Each toilet cubicle of each public toilet is internally provided with an alarm switch which is used for sending an alarm signal after being passively triggered or actively triggered, and a toilet cubicle detection module which is used for enabling the corresponding alarm switch to be actively triggered when the toilet cubicle is used overtime; the non-toilet-cubicle public area in each public toilet is provided with an alarm end which displays the corresponding toilet cubicle after receiving the alarm signal and uploads the alarm information to the cloud server; the cloud server receives alarm information uploaded by the alarm end, forwards the alarm information to the system administrator mobile end and the cleaning administrator mobile end managing the toilet cubicle, and stores alarm records. The system is high in response real-time performance, low in power consumption, high in reliability and convenient for system optimization based on big data, and the manual inspection burden of a cleaning administrator is reduced.

The invention provides a federal learning method for enhancing robustness and protecting medical privacy, and solves the technical problems that heterogeneous data in an intelligent medical scene is difficult to aggregate and malicious participants are poisoned and attacked. According to the technical scheme, the method comprises the steps that S10, a system administrator SM and a scientific research institution RI generate public parameters and distribute a key set; s20, the hospital uses the local data set to train model parameters, normalizes and encrypts the model, and uploads the encrypted model to a server of the RI; s30, the SM and the RI cooperatively carry out normalization judgment, and the RI evaluates a gradient ciphertext by using cosine similarity; s40, the RI uses a logistic regression function to adjust the aggregation weight of the gradient ciphertext, and then the gradient ciphertext is aggregated; and S50, the RI and the hospitals participating in training jointly update the local model. According to the method, a fully homomorphic encryption algorithm is used for protecting privacy data of medical patients, cosine similarity is used for evaluating gradient ciphertexts, and a new aggregation mechanism ensures that a training model has high accuracy.

The application discloses a kind of digital engineering cost index determination method, system, equipment and storage medium, wherein, method includes: receiving enterprise index subject and enterprise standard list uploaded by system administrator;Receive the configuration input of system administrator;According to the configuration input, the association of enterprise index subject and enterprise standard list is configured, and the calculation rule of each index in enterprise index subject;Obtain the data input by user for enterprise standard list;From the data of enterprise standard list associated with enterprise index subject, obtain the target data required for calculating the index in enterprise index subject;According to calculation rule, target data is processed, and the information for determining the index value in enterprise index subject is obtained.The application can upload enterprise index subject and enterprise standard list according to the needs of enterprise, and when calculating the index in enterprise index subject, the required data for calculation can be automatically obtained from the associated enterprise standard list.

The real-time ransom and security breach detection and prevention system empowers users and system administrators by providing real-time threat detection and prevention by detecting any phishing links, malicious executables and objects, and manipulation of authentication tokens that could potentially escalate a threat into ransom attacks, security breaches or other cyber attacks, and take immediate action by blocking and reporting the potential security breach before escalating into a real attack. The real-time ransom and security breach detection and prevention system generates a first hash of the link, executable, object, or authentication token. Utilizing this generated first hash, the real-time ransom and security breach detection and prevention system calculates a second hash upon user interaction or at runtime and compares the two unique hashes to determine if the link, executable, object, or authentication token is corrupt and terminates the gateway to prevent the cyber-threat from infecting the system.

The invention belongs to the technical field of data analysis, and relates to a data comparison method and device, computer equipment and a storage medium, and the method comprises the steps: receiving a data comparison request sent by a request terminal; constructing a data comparison task corresponding to the data source information according to a pre-configured comparison rule file; performing data conversion operation on the data source information according to a data conversion mode corresponding to the type of the data source information to obtain standard data source information; performing data preprocessing operation on the standard data source information to obtain preprocessed data source information; performing data comparison operation on the preprocessed data source information according to the metadata description to obtain a data comparison result; and carrying out difference data identification operation on the data comparison result to obtain a difference data identification result. According to the method, the user or the system administrator is effectively helped to identify and analyze the difference between the data, so that the accuracy and consistency of the data are ensured.

The invention provides a teaching evaluation system based on a sensing device, and relates to the technical field of teaching evaluation. The data processing module is used for preprocessing the original sensing data; the feature extraction and analysis module is used for extracting various behavior features of teachers and students from the video data; the teaching evaluation module is used for evaluating the teaching process of the teacher, the learning state and effect of the students and the teaching effect and atmosphere of the whole classroom according to the extracted features and data; the system comprises a back-propagation (BP) neural network, a result display and feedback module and a system management and configuration module, the result display and feedback module is used for managing users of the system and allowing a system administrator to configure various parameters of the system, the teaching ability of teachers is evaluated through the BP neural network, and the BP neural network is trained based on a large amount of actual teaching data; the influence of subjective factors in manual evaluation is reduced, and the reliability and credibility of the evaluation result are improved.

The invention discloses a resource access method and device, equipment and a storage medium, and relates to the technical field of information security, and the method comprises the steps: creating each access control strategy based on the input information of a system administrator in a target system; when a resource access request sent by a target user is received, extracting user attribute information and resource attribute information from the resource access request to determine corresponding target attribute information, and matching the target attribute information with each access control strategy to obtain a matching result; if the matching result shows that the target user has the corresponding resource access authority, generating a corresponding access authorization certificate for the target user; and when the target user performs resource access by using the access authorization certificate, determining a corresponding target resource, and encrypting and transmitting the target resource to the target user side based on a preset encryption algorithm and an HTTPS transmission protocol. Therefore, the flexibility and the security in the resource access process can be improved.

The present invention discloses a method for discovering shadow assets in an intranet, comprising the following steps: step S1, establishing an asset information database; step S2, collecting an IP address information table; step S3, screening suspicious IP addresses; step S4, refining and saving suspicious IP addresses; step S5, analyzing and judging shadow assets; and step S6, generating analysis and judgment results. The present invention can realize automatic discovery and automatic analysis of shadow assets, solving the problem of heavy workload and incomplete grasp of asset information for IT system administrators of enterprises or organizations.

The invention relates to the technical field of network security, and particularly discloses a DoS attack monitoring processing method and system in a multi-agent network and a storage medium, and the monitoring processing method comprises the following steps: collecting data of communication flow characteristics, and extracting data of key communication flow characteristics as a basis for obtaining a collection value; comparing the acquisition value of the key communication flow characteristic with a preset normal threshold value of the corresponding communication flow characteristic, if the acquisition value exceeds the normal threshold value, judging that the communication link is possibly attacked by the DoS, and sending out an alarm notice; when the alarm notification is received, adjusting the weight of the communication link and adjusting the gain of the controller; and after adjustment, the system updates the control input and state of the intelligent agent. The system quickly identifies DoS attacks by monitoring communication flow characteristics in real time, and notifies a system administrator in time; meanwhile, the system dynamically adjusts the defense strategy according to the attack intensity, and has the advantages of real-time DoS attack monitoring, rapid alarm notification and dynamic adjustment of the defense strategy.

The real-time ransom and security breach detection and prevention system empowers users and system administrators by providing real-time threat detection and prevention by detecting any phishing links, malicious executables and objects, and manipulation of authentication tokens that could potentially escalate a threat into ransom attacks, security breaches or other cyber attacks, and take immediate action by blocking and reporting the potential security breach before escalating into a real attack. The real-time ransom and security breach detection and prevention system generates a first hash of the link, executable, object, or authentication token. Utilizing this generated first hash, the real-time ransom and security breach detection and prevention system calculates a second hash upon user interaction or at runtime and compares the two unique hashes to determine if the link, executable, object, or authentication token is corrupt and terminates the gateway to prevent the cyber-threat from infecting the system.

The invention discloses an anti-quantum-attack smart park data sharing method and device and a medium, and the method comprises the steps: generating a digital signature public key and a digital signature private key through a system administrator according to an anti-quantum digital signature scheme, and generating a homomorphic encryption and decryption public key and a homomorphic encryption and decryption private key according to an anti-quantum homomorphic encryption scheme, an anonymous signature public key and an anonymous signature private key are generated through a certificate authority according to the digital signature scheme for resisting anonymity of the quantum signer; sending an access request message of the user to a system administrator so as to sign the access request message by using a private key with a digital signature and sending the signed access request message to the user; verifying the identity of the administrator based on the digital signature, signing the access request information by using a private key of an anonymous signature, sending the access request information to a system administrator to verify the identity of the user, and allowing the user to access after the identity of the user passes verification; a system administrator selects plaintext data to encrypt and generate a ciphertext, and sends the ciphertext to a data requester, so that the data requester performs homomorphic operation on the ciphertext to complete data security sharing.

Provided is a remote facility management system that can remotely determine the cause of a trip of a circuit breaker and acquire information for constructing countermeasures according to the cause of the trip. 【Solution means】When the circuit breaker 25 provided in the circuit breaker unit 2B of the electro-optical display facility 2 trips, the cause of the trip is determined, and information on the cause of the trip is provided to the management device 4 via the IP network N. As a result, the system administrator can recognize the cause of the trip, and by taking appropriate measures according to the cause of the trip, it is possible to effectively suppress the repeated trips of the circuit breaker 25. In addition, since it is no longer necessary for the facility maintenance worker to go to the site to determine the cause of the trip, the burden on the facility maintenance worker can be reduced and the time required to determine the cause of the trip after the trip occurs can be shortened.

To provide a system.SOLUTION: A system comprises: means for automatically detecting a modification point from, say, transaction data, an operation status, a query log, and law revision information; means for transmitting a prompt statement to a generated AI model on the basis of the modification point to generate a concrete modification plan; means for submitting the generated modification plan to a person in charge of the system as an opinion; and means for automatically creating business requirements and system requirements.SELECTED DRAWING: Figure 1

An integrated computer network security and threat prevention and detection platform includes a central processor and a display operable to aggregate and present data from a plurality of network security applications in an integrated dashboard format to a system administrator. The network security applications may be hardware, software, or hybrid applications running on local machines, local networks, remote machines, or remote networks, in communication with the central processor. In one embodiment implementation of the integrated computer network security and threat prevention and detection platform is performed on premises, in an alternative embodiment the integrated computer network security and threat prevention and detection platform is provided in an Internet or cloud-based environment, in other embodiments the computer system security platform is a hybrid configuration having both on-premises and cloud base components.

The application discloses a kind of based on blockchain's pedigree data dynamic permission access control system and method, rely on attribute-based access control paradigm, and combine pedigree data access constraint to carry out dynamic access control.First, user sends access request to policy decision point;Decision point according to the policy loaded from policy management point, request relevant information to blockchain, and call user historical behavior verification module based on pedigree data, the legality of current access request is verified using dependency relationship and pedigree data graph.System administrator records access request and verification result to blockchain, to support the fast verification of same query, reduce query overhead.In addition, the system passes access information such as query user, time, result, operation content to management node, for subsequent user access tracking and management.The method uses the anonymity and non-tamperability of blockchain, provides strong evidence for user supervision, realizes efficient management and reasoning to source information.

A method for securely moving secret data from a first enclave (8; 108) to a second enclave (10) comprises a first procedure and a second procedure. The first procedure includes, within the first enclave (8; 108), encrypting secret data using an administrator encryption key (12a; 112) and sending the encrypted secret data to an administrator system. The administrator system decrypts the encrypted secret data using an administrator decryption key (12b; 113) corresponding to the administrator encryption key (12a; 112), and re-encrypts the secret data using a destination encryption key (14a) received from the second enclave (10). The second procedure includes the administrator system sending the re-encrypted secret data to the second enclave (10) and, within the second enclave (10), decrypting the re-encrypted secret data using a destination decryption key (14b) corresponding to the destination encryption key (14a), and storing the secret data in the second enclave (10).

The present invention discloses a method, system, device and storage medium for asynchronous federated learning with front-end and back-end separation, wherein the method comprises: according to the service to be trained, the service user sends service request information to the back-end; the service request information received by the back-end is pushed to the system manager; the system manager sets the global training strategy of the task to be executed corresponding to the service to be trained, and sends the global training strategy to the back-end, and the back-end starts the asynchronous federated learning of the task to be executed; the back-end sends a training notification to the training participants; the training participants train the local model and upload the trained local model to the back-end; the back-end generates a global model according to the received local model, and evaluates the global model; when the evaluation is passed, the back-end updates the use status of the service to be trained, and returns the updated use status to the service user. The front-end and back-end of the asynchronous federated learning system proposed in the embodiment of the present application are relatively independent and loosely coupled, which can effectively improve the compatibility of the system.

The invention relates to a time slot compliance test method and system for analyzing a TDMA signal based on a sequence space neighborhood. The method comprises the following steps: acquiring a TDMA signal received by a satellite communication system; preprocessing the obtained TDMA signal to obtain TDMA signal data with time slot information; constructing a sequence space array according to a TDMA signal communication structure; extracting a time slot feature vector by applying a neighborhood analysis algorithm; constructing a standard sequence space array for the original TDMA signal data according to a user time slot, comparing an extracted time slot feature vector with a preset time slot compliance standard, judging whether the time slot of the TDMA signal is compliant or not, and if the time slot feature vector meets the preset time slot compliance standard, considering that the time slot of the TDMA signal is compliant; otherwise, considering that the time slot is not compliant; and if the time slot of the TDMA signal is not compliant, an alarm mechanism is triggered, and a system administrator is notified to carry out corresponding processing. According to the method, the time slot compliance of the TDMA signal can be accurately detected, and the detection precision is improved.

The invention provides a data warehouse supply data storage configuration implementation method and system and electronic equipment. The method comprises the steps that S1, an underlying database uses kudu to create a customer dimension large-width table; s2, the front end uses a vue framework to create supply data storage configuration newly-added and modified pages; s3, the system administrator configures information of names, types and modes of the transmission data on the front-end configuration page and then completes storage; s4, the background logic completes information corresponding files and message fields configured at the front end, and a client table insertion record in the kudu; and S5, after the data warehouse supplies data, the kafka message is received and automatically and correspondingly stored in the background database, or the file is automatically and correspondingly stored in the background database after being analyzed. According to the method disclosed by the invention, aiming at the real-time kafka message sent by the data warehouse and the generated T-1 data file, data storage is directly completed through a configuration management interface function in an application service system, so that repeated and time-consuming development work is omitted.