17 results about "Trojan horse" patented technology

The invention provides a Trojan threat intelligence acquisition method and device, electronic equipment and a storage medium, and relates to the technical field of Trojan threat identification. The method comprises the following steps: determining key features of a first Trojan family based on a first connectivity coefficient ratio of the first Trojan family to each feature type; wherein the first connectivity coefficient ratio is a capability value, used for representing the distinction degree between the first Trojan family and other Trojan families, of each feature type; and searching based on the key features to obtain potential Trojan threat intelligence of the first Trojan family. According to the scheme, based on the first connectivity coefficient ratio, rapid positioning of the key features of the first Trojan family is realized, so that the mining production efficiency of Trojan threat intelligence can be improved.

A satellite-borne safety intelligent computing system is used for guaranteeing safety of a satellite edge computing system and comprises a host processor, an AI accelerator and a safety bus connected with the host processor and the accelerator. The satellite-borne safe intelligent computing system further comprises a bus stream encoding and decoding engine which is embedded in the interface controller of the data bus and used for encrypting and decrypting transmission data of the data bus. By encrypting the cache stream on the data bus, key data such as Bias bias cache and the like can be protected. In addition, an attacker can be prevented from stealing structural information of the neural network model through interrupt signals by interrupting obfuscated codes, dual protection of'signal + data 'is formed, and time sequence detection Trojan horse and side channel attacks can be effectively resisted.

The present disclosure describes various embodiments of hardware trojan triggering (HTT) signal analysis. As such, an exemplary method comprises capturing switching activity of nodes for a design of an integrated circuit during a simulation of an application of a test pattern to the design; identifying one or more nodes in a graphical representation of the design that do not toggle within an individual window of time across multiple windows of time; determining unique paths that can be formed by the identified nodes within each of the multiple windows of time; determining one or more unique paths that occur across consecutive windows of time; appending the one or more unique paths that occur across consecutive windows of time in a set; and outputting the one or more unique paths in the set as rare trojan horse triggering paths for the design. Other systems and methods are also presented.

The invention relates to the technical field of mobile terminal safety monitoring, and discloses a risk signal screening monitoring method and system for a mobile terminal. The method comprises the following steps: collecting intensity change sequences of various risk signals of the mobile terminal, calculating cosine similarity and propagation momentum factors of deviation rate vectors, counting time sequence mutual information of the risk signals to determine a causal propagation relationship, constructing a directed propagation graph to predict a future risk evolution value, and calculating the risk evolution value of the mobile terminal. And calculating a weighted distance, dynamically adjusting a judgment threshold and judging a multi-step progressive attack. The technical problems that in the prior art, staged progressive attacks cannot be recognized, risk evolution cannot be pre-judged in advance, the detection sensitivity cannot be adaptively adjusted, and the response strategy is extensive and single are solved. According to the method and the device, the recognition accuracy and the response timeliness of the multi-step progressive Trojan horse attack are improved.

The invention discloses a quantitative analysis method and device for hardware Trojan key node and path characteristics, a medium and equipment. The quantitative analysis method comprises the following steps: performing quantitative analysis on 0, 1 distribution probability characteristics of each LUT initialization vector based on information entropy; driving a suspicious Trojan horse module by automatically generating a script to obtain a behavior list file, and analyzing the behavior list file to count the number of times of overturning of the signal in the simulation process to obtain a low-overturning signal and a corresponding security attribute; constructing a directed graph; smoothing the distribution of the signal overturning times in an interpolation mode, converting node overturning times data after smoothing into a dictionary structure, and constructing a three-dimensional continuous distribution network of the signal overturning times in combination with a directed graph; according to the method, static structure characteristics and dynamic behavior analysis can be fused, node overturning characteristics are quantized through information entropy, and suspicious Trojan units are accurately positioned.

The invention provides a financial data processing method and system, and relates to the technical field of financial data processing. Comprising a data acquisition module, a data storage module, a data security extraction module, a data processing module, a trend analysis module, a risk prediction module, a user side storage module, a user side display module, a security login module and a cloud data storage recovery module, comprising transaction records, market quotation data, customer information and the like; and the data storage module is responsible for safely and reliably storing the collected data into a database. The system has the advantages that the dynamic code is generated in real time through the dynamic verification code generation module in the working process, so that the data extraction module can perform data extraction only when the data in the data storage module is extracted according to the verification code, and data leakage caused by stealing the data in the system by viruses such as crawlers and Trojan horses is avoided.

The embodiment of the invention provides a Trojan horse fishing detection method and device. The false alarm rate of Trojan horse fishing detection can be reduced. The method can comprise the steps that first feature information, second feature information and third feature information of a target application program which is started and runs are extracted, the first feature information is used for indicating the number of icon resources of the target application program, and the second feature information is used for indicating the suspiciousness of icons of the target application program; the third feature information is used for indicating the suspiciousness of the file name of the target application program; on the basis of the first feature information, the second feature information and the third feature information, Trojan horse fishing detection is conducted on the target application program, a detection result is obtained, and the detection result comprises whether the target application program is a Trojan horse fishing or a normal application program.

1. Name of the product in this design: Small Trojan Horse. 2. Purpose of this design: For children to play with. 3. The key design feature of this product is its shape. 4. The image or photograph that best illustrates the design's key points: a 3D model. 5. The bottom surface of this product is a part that is not easily seen or cannot be seen during use, so the bottom view is omitted.

The invention discloses a deep learning Trojan horse detection method, and relates to the field of network security. The method comprises the following steps: firstly, selecting a specified layer of a to-be-detected deep learning model as a detection object, introducing random noise into input data to reduce an overfitting risk, and then generating initial feature intermediate representation of a corresponding category through a feature extraction function; then, combining a classification objective function and a regular term to construct an optimization model, and solving by utilizing a gradient descent method to obtain an optimal feature intermediate representation of the specified layer and a corresponding optimal objective function value; and finally, calculating a Trojan horse detection index BTc based on the obtained target function value, and judging whether the category corresponding to the model has a Trojan horse hidden danger or not by comparing the BTc with a preset threshold value. According to the method, the adaptability of the detection accuracy and the original task of the model is considered, and a safety protection barrier is built for the deep learning model.

The embodiment of the invention discloses a file processing method and device, a storage medium and electronic equipment, and the method comprises the steps: obtaining a target file hash value and target file signature data corresponding to a to-be-detected target file, extracting a target message digest from the target file signature data, and sending the target message digest to a server; and performing signature verification on the target file based on the target message digest, determining that the signature verification of the target file is passed, and performing white utilization signature behavior verification on the target file based on the hash value of the target file and the target message digest to obtain a white utilization signature behavior verification result. And performing Trojan horse processing on the target file based on the white utilization signature behavior detection result.

The invention discloses a method and system for detecting and terminating a remote control Trojan horse in an island state based on an ETW event, and relates to the field of network and information security. In order to solve the defect that high-precision and low-overhead detection and timely termination cannot be carried out on the remote control Trojan horse in an island state in the prior art, the technical scheme provided by the invention comprises the following steps of: capturing an ETW event in real time, constructing an event sequence according to a process identifier, and extracting characteristics such as reconnection frequency, receiving and transmitting event quantity, receiving and transmitting proportion and memory use; quickly screening out high-confidence Trojan horses through a threshold model; and constructing an event Markov matrix for other sequences, and inputting the event Markov matrix into a depth detection model to carry out further discrimination, thereby identifying the remote control Trojan horse in the island state. If the Trojan horse is judged to be the remote control Trojan horse at any stage, the corresponding process is immediately terminated according to the process identifier, and alarm information is sent. The method is used for real-time detection and automatic processing of the remote control Trojan horse in the island state by the terminal host, and the system safety is improved.

1. The name of the design product: computer check graphical user interface for electronic equipment. 2. The use of the design product: for an electronic device. 3. The design points of the design product: in the graphical user interface. 4. The picture or photo that best indicates the design points: design 1 front view. 5. Other views are conventional designs, and other views are omitted. 6. Design 1 is designated as the basic design. 7. The use of the graphical user interface: this interface is used for computer physical examination, Trojan horse killing, memory cleaning, system repair. Design 1 interface change state diagram is the interface presented after clicking "one-key cleaning" in design 1 front view. Design 2 interface change state diagram is the interface presented after clicking "quickly kill" in design 2 front view. Design 3 interface change state diagram is the interface presented after clicking "one-key repair" in design 3 front view. Design 4 interface change state diagram is the interface presented after clicking "quickly kill" in design 4 front view.

The invention relates to the technical field of network security, and discloses a network security situation prediction method and system based on artificial intelligence, and the method comprises the following steps: implanting controllable Trojan horse data in user-side-oriented software in a mode of uploading network data; the data acquisition module is used for acquiring hardware information data of bearing software and software state data oriented to a user side based on the data acquisition module; and extracting feature vectors of the hardware information data and the software state data, and evaluating the safety coefficient of the controllable Trojan horse data by a third party. According to the method, the authorized Trojan with controllable behaviors and hidden fingerprints is actively implanted in a real software environment for attack and defense drilling, and the passive mode that traditional security detection depends on historical attack characteristics or a static rule base is overturned, so that attack clues of unknown threats and advanced persistent threats can be sensed and found in advance; and the predictability of the system for potential risks is greatly improved.

The application aims to provide a one-way code generation semi-quantum key distribution system and method, wherein the coded photons are transmitted in a one-way manner in a channel, and the returned photons are used to quantify the information amount of a eavesdropper, and the security of the protocol is proved based on a collective attack. The one-way loading key is realized by using a Michelson interferometer, the Trojan horse attack problem commonly existing in the existing two-way system is solved, the security of the real system is improved, and the key generation rate is improved under certain distance conditions. The system and method provided by the application have high security and practicability.

The invention relates to the technical field of computer security, in particular to a protection method and device for trust propagation of Trojan horses by using a game platform, a medium and equipment. Monitoring a process started through the game platform in real time; when it is detected that the process calls related information of a non-game function, preset virtual information is returned to the process. According to the method, virtual information is returned by accessing non-game related data, Trojan viruses can be prevented from acquiring real user privacy and system configuration information, and real user information is protected from being stolen.

The application provides a Trojan horse attack method based on neural network image classification and related equipment, the method comprising: randomly selecting part of training data in a training set; performing a poisoning operation on the training data to obtain poisoned data; adding an adversarial perturbation to the poisoned data to obtain perturbed data; adding the perturbed data to the training set to obtain a training sample; training a neural network model using the training sample, implanting a backdoor in the neural network model to obtain a poisoned neural network model; and triggering the poisoned neural network model using the perturbed data to implement a Trojan horse attack. The application provides a Trojan horse attack method based on neural network image classification for a deep neural network Trojan attack and defense technology platform, which is used to actually demonstrate the attack process of a Trojan horse and verify the effect of Trojan defense.