21 results about "System integrity" patented technology

The invention discloses a large model security evaluation method based on multi-dimensional adversarial attack, and the method comprises the steps: generating an adversarial sample sequence through constructing multi-dimensional attack scene description and combining the characteristics of data availability damage and system integrity violation, optimizing sample parameters in a black box attack mode, and precisely positioning a weak link of a model. And meanwhile, based on a risk quantized value sequence and a safety portrait mechanism, reinforcing demand data is extracted and a protection path is generated through reverse optimization, and finally, the protection capability of the model is remarkably improved. Through a closed-loop mechanism of scene generation, sample optimization and risk assessment, a complex attack environment is effectively dealt with, and the safety and stability of the system are guaranteed.

This invention discloses a method for measuring the integrity of a spaceborne embedded system based on link symbol topology. In the static injection phase, a linker script is configured to inject symbols at critical memory segment boundaries, generating hierarchical hybrid fingerprints and redundantly persisting them to non-volatile storage. In the dynamic verification phase, a lightweight program is started before the operating system takes over, performing hierarchical dual-dimensional and SEU-resistant temporal redundancy verification, supporting multi-container dedicated isolation verification. In the linkage blocking phase, anomalies are forcibly blocked and primary / backup linkage is triggered, collecting eight types of fault contexts and supporting on-orbit updates. This invention solves the problems of traditional hash methods failing to detect layout anomalies and high time consumption, reducing complexity to O(K), achieving sub-millisecond-level measurement decoupled from image volume, adapting to spaceborne radiation-resistant, cloud-native, and redundancy scenarios, and meeting the high reliability requirements of aerospace.

Systems and methods for mathematical modeling of the hardware and software stack of commodity computer platforms are provided, enabling provable guarantees on memory, device, and program execution. This approach addresses the technical problem of reliance on system agents that rely on implicit trust in the operating environment, which can be exploited by sophisticated attackers using complex threats such as memory access exploits and code / data integrity exploits. The solution provides a proactive, mathematically-backed security solution that eliminates entire classes of cyberattacks by design, ensuring realizable guarantees on commodity computer platforms running hardware and software stack elements at the lowest operating level. This approach has significant advantages over current reactive cybersecurity methods, including reduced complexity and overhead, and increased confidence in the integrity of the system. The solution's main uses include providing mathematically-backed security and availability guarantees for critical infrastructure, financial institutions, and other organizations vulnerable to cyberattacks.

The application discloses an intelligent perception anchor rod system and a supporting state dynamic evaluation method, belongs to the technical field of underground engineering safety monitoring, and relates to the technical field of underground engineering safety monitoring.The system comprises a multi-physical perception unit, a power module, an edge processing and communication module and a data processing terminal.The multi-physical perception unit comprises a thermal pulse sensor, a three-dimensional stress perception unit and a distributed optical fiber acoustic wave sensor which are integrated in a hollow anchor rod body; the power module and the edge processing and communication module are installed in the inner cavity of the hollow anchor rod body; and the data processing terminal is installed in a roadway sidewall or a chamber and is connected with the edge processing and communication module in a wireless communication mode.The method comprises the following steps: a heterogeneous sensor array is synchronously triggered and collected; on-orbit demodulation and feature compression are carried out; a grouting body spatial form and thermal physical property evolution is reconstructed; an anchor rod axial force field and a transverse supporting stress field are reconstructed; an anchoring system integrity index is calculated; a surrounding rock and supporting structure interaction stability index is calculated; and multi-level early warning triggering and decision output are carried out.The application can realize synchronous perception of multi-source information, dynamic and accurate diagnosis of a supporting state and multi-level early warning.

Embodiments described herein include a system, apparatus, article of manufacture, method and / or computer program product embodiments, and / or combinations and sub-combinations thereof, for delay-based physical unclonable functions (PUFs) for chiplets to verify system integrity. A die may include a plurality of chiplets including a first chiplet and a second chiplet. The first chiplet may be connected to the second chiplet via an interposer. As part of an authentication process, the first chiplet may request the second chiplet to transmit a signal via one or more wires of the interposer. A first signature based on the characteristics of the transmitted signal may be measured at a first time, which constitutes the first evaluation of the PUF. The first signature may be used as a baseline comparison for subsequent signatures as a means to confirm that the chiplets, interposers, and / or interconnects have not been altered or modified.

Systems and methods for seamless network communication reconfiguration, comprising a device that includes physical media dependent (PMD) devices, incorporating a digital signal processor (DSP) configured to handle both in-band and out-of-band communication traffic, a plurality of primary analog crossbars connected to the DSPs for routing operational data, and a set of redundant analog crossbars configured to establish auxiliary communication channels. The system includes a controller operable to dynamically activate the auxiliary communication channels during reconfiguration events, enabling a make-before-break protocol by transitioning traffic from primary channels to auxiliary channels. The redundant crossbars support out-of-band signaling to coordinate transitions and maintain system integrity. The auxiliary channels remain in a low-power state during steady operation, ensuring resource efficiency, while the controller monitors signal integrity and initiates reconfiguration upon detecting a fault or network event, maintaining uninterrupted traffic flow.

A constraint-driven trust state orchestration system intercepts proposed actions at execution boundaries prior to execution, deterministically evaluates trust states against constraints, enforces execution exclusively based on cryptographically verifiable qualification outcomes, and immutably records all decisions and outcomes to ensure consistency, auditability, reduced rollback costs, and improved system integrity across distributed decision networks.

The application discloses a kind of underground ultra-wideband system integrity threshold calculation method based on Gaussian mixture model, it is applicable to the new integrity evaluation system of underground large space.This method uses the hyperframe of Gaussian mixture model GMM to process the ultra-wideband ranging error sample based on TOA positioning, reflects the superiority of flexible Gaussian mixture model processing bimodal distribution, and fully considers the correlation between ranging error and distance under the environment of underground large space, introduces distance factor when establishing error model, clearly deduces the method for calculating protection level PL in position domain, continuously convolves double-component hyper GMM, obtains multi-component GMM, and the hyper nature still holds after convolution.This application solves the contradiction between traditional Gaussian hyper model and non-gaussian characteristic error under complex environment, tightens PL with small calculation cost, and improves system availability.

The invention discloses an endogenous behavior constraint method and device for a dynamic physical system. The method comprises the following steps: fusing state confidence coefficients of a plurality of heterogeneous function units in a system in real time, and generating system integrity continuous scalar measurement; resolving the measurement into a dynamic constraint boundary parameter through a parameterized nonlinear mapping function; and the on-line instruction arbiter carries out optimized projection on the original instruction and outputs a safety instruction. Correspondingly, the invention provides a dynamic behavior constraint system which comprises a multi-source confidence fusion module, a nonlinear boundary mapping module and an online instruction arbitration module which are in communication connection in sequence. According to the method, security constraints are changed from dependence on external information into'endogenous attributes' derived from internal state evaluation, real-time, dynamic and non-linear adaptive adjustment of security boundaries is realized, the problem that a static model inevitably loses efficacy under system uncertainty is fundamentally solved, and a verifiable general technical framework is provided for meeting the requirement of'continuous security '.

A security system and method implements proactive defense through host operating system isolation and virtualization. The security system and method include a host computer running a host operating system and multiple hosted virtual machines that serve as intermediate connections to isolate the host operating system from external networks. The virtual machines systematically back up data to cloud services having indirect connections to the host computer. An internal virtual private network interconnects the virtual machines, with a designated virtual machine serving as a network gateway to manage traffic flow. A secure controller within the host computer functions as a bridge between user applications and the host operating system, enforcing security protocols and managing core operations to ensure system integrity. The secure controller manages interactions between the virtual machines and cloud services, providing security measures while maintaining operational efficiency through parallel processing architecture.

The application provides a kind of intelligent question and answer method, device, equipment and medium, it is related to computer technical field, the method includes: to multiple source data executes pre-processing, and based on the multiple source data of pre-processing adopts multi-level attention mechanism to build knowledge representation;Based on the intention modeling of attention guide, the intention of user question is parsed, and the intention of user question parsed is matched with knowledge representation;Based on the knowledge retrieval of user question intention and knowledge representation matched, by semantic compression and index strategy, output corresponding target answer with user question.The application can realize knowledge dynamic incremental update, cross unit semantic association, multi-modal deep fusion, accurate understanding of intention, improve the integrity, coherence and accuracy of intelligent question and answer system.

The application discloses a kind of drive-by-wire steering control method, system, electronic equipment and medium, the scheme includes: by obtaining system fault code, system fault code is analyzed, determines first fault information;First fault information is matched with preset fault relationship, to determine second fault information;Second fault information includes fault state information, system integrity information, steering function information and feedback function information;According to the state of the current drive-by-wire steering system determined by second fault information, corresponding control operation is executed when drive-by-wire steering fails;Different faults of drive-by-wire steering system are set to corresponding control operation, and the corresponding control operation of the fault is executed when the drive-by-wire steering system fails, to control the different faults of drive-by-wire steering, reduce the risk of damage caused by system failure, improve driving safety.The application embodiment can be widely applied to vehicle steering control technical field.

The invention discloses a flexible simulation agent configuration software implementation method and device, and belongs to the technical field of simulation system information interaction. Through a three-level visual interface of a communication protocol parameter configuration module, a simulation resource protocol packaging module and a simulation agent protocol configuration module, protocol definition, resource input / output protocol packaging and agent data interaction relation generation are completed in sequence, and automatic conversion and flexible adaptation of data protocols among heterogeneous simulation resources are achieved. Compared with the traditional method for customizing and developing agent software for each type of resources, the method has the advantages that programming is replaced by configuration, dynamic generation and multiplexing of parameters, protocols and agent levels are supported, the joint test preparation period is remarkably shortened, the system universality, adaptability and maintainability are improved, and the system development cost is reduced. Interconnection and intercommunication of cross-domain and cross-level simulation resources can be rapidly completed on the premise that the integrity of an original system is kept.

A system and method for providing a remote user with verifiable proofs of a secure computing environment. The system comprises a secure execution environment, an attestation manager, and an attestation reporting interface. The attestation manager generates verifiable proofs regarding the integrity of the execution environment, the software running within the environment, and the effectiveness of access 5 control measures. These proofs are provided to the remote user via the attestation reporting interface, enabling them to independently verify the security of the environment. The method involves establishing a secure execution environment, monitoring system integrity, implementing access controls, and generating attestation reports. By combining trusted execution environments, integrity measurement architectures, and access control mechanisms, the invention provides a robust solution for securing remote computing, enabling 10 users to confidently entrust sensitive data and applications to remote infrastructure.

The application provides an Android application trusted environment detection method, device and equipment and a storage medium, and belongs to the technical field of computer security, which comprises the following steps: obtaining environment information of an Android application; the environment information comprises device fingerprint information, emulator information or system integrity information; the device fingerprint information comprises an Android ID, hard disk information or a MAC address; performing device fingerprint detection, emulator detection and system integrity detection according to a preset method; and if the device fingerprint detection, emulator detection and system integrity detection all satisfy preset conditions, determining that the running environment of the Android application is trusted. The application collects the characteristics of a mobile phone in multiple ways, and combines multi-dimensional detection technology in multiple levels to detect the trusted environment of the Android application, thereby greatly improving the accuracy of the trusted environment identification of the Android application, and effectively resisting attacks such as emulators, disguising tampering and simulated clicks.

The invention provides a distributed data storage method and system based on an intelligent terminal, and the method comprises the steps: collecting a security module state, system integrity and a historical behavior log of the intelligent terminal, and outputting a corresponding credible score through an improved analytic hierarchy process; the intelligent terminal is correspondingly divided into a core credible node, a common credible node and a credible node to be verified according to the credible score, data content and data attributes of distributed data are collected, and sensitive data and non-sensitive data are divided according to the data content and the attributes; collecting a target data set contained in the sensitive data, and generating a dynamic secret key matrix corresponding to the target data set through the core trusted node; and performing encryption processing on the sensitive data through the dynamic secret key matrix so as to complete storage of the distributed data. The encryption storage efficiency of the distributed data can be effectively improved.

A system embedded in and for monitoring the integrity of a computer architecture. The system receives and compiles offline data into registration objects. A comprehensive database tests multiple parcels of the offline data relative to corresponding benchmarks. A reporter component determines which test results, if any, should be escalated as a warning of anomalous behavior. The reporter component directly communicates with a graphical user interface and an enforcement component. The enforcement component takes mitigative action relative to the external component(s) which are the subject of the warning(s). Preferably a prioritization component is interposed between the database and the reporter. The prioritization component prioritizes the warnings from the database for processing by the reporter component.

The invention relates to the technical field of petrochemical engineering, in particular to a special-shaped redundant structure SIS system integrity evaluation method. Comprising the following steps: determining an evaluation object and basic data; common cause failure parameters are analyzed; correcting the anisotropic redundant structure factors; evaluating the MDBN model through the special-shaped redundant structure; carrying out SIL and reliability evaluation; carrying out whole life cycle cost analysis; the engineering case is used for verification, and a result is output; by exploring the influence of the common cause failure parameters on the evaluation result, the SIL evaluation model of the SIS system suitable for the special-shaped redundancy architecture is constructed, accurate quantification of SIL levels is realized, and help is provided for selection of the redundancy structure of the SIS in combination with the configuration cost.

The application discloses a kind of big model safety evaluation methods based on multi-dimension confrontation attack, by constructing multi-dimension attack scene description, in combination with the characteristics of data availability destruction and system integrity violation, generate confrontation sample sequence, and optimize sample parameters in black box attack mode, accurately locate model weak link.Meanwhile, based on risk quantification value sequence and security image mechanism, extract reinforcement requirement data and reverse optimization to generate protection path, finally realize that model protection ability significantly improves.The application generates through scene, sample optimization and the closed-loop mechanism of risk assessment, effectively deal with complex attack environment, guarantee system safety stability.

Some embodiments of the teachings herein include a monitoring system for checking an integrity of a reconfigurable system with a plurality of components. An example monitoring system includes: a receiving unit to receive a plurality of data sets, wherein each data set of the plurality of data sets originates from one of the plurality of components and describes a configuration change made to a respective component using change information indicating a type of the configuration change made; a checking unit to check a permissibility of the configuration changes made on the basis of the change information by checking the permissibility of whether the type of the configuration change made is permissible and / or plausible; and an output unit to provide an output based on the permissibility check.