620 results about "Web application" patented technology

A system and method is described for internationalization of web pages by extracting translatable content from extensible mark-up language (XML), or similar data-centric meta-language representations of web pages or data used to build web pages. The extracted translatable content is stored in a translation task repository (TTR) accessible by the web developer and the translator. The XML representation is then modified to include selection control logic to select the appropriate translations for insertion into the final web page. The translator accesses the TTR to translate the appropriate content and saves the translations back to the TTR associated with the original translatable data. The translations are obtained from the TTR as selection cases for the selection control logic of the XML representation. As the XML is converted into the web source code, the selection logic and translations are embedded therein facilitating building the web site in multiple different languages.

Systems, methods, and frameworks for detecting malicious WebAssembly (Wasm) modules under source code obfuscation are provided. The system is configured to accurately identify malicious behavior in Wasm modules irrespective of the specific malicious functionality and in the presence of source code obfuscation techniques. The detection process leverages a Vision Transformer (ViT) model to classify a Wasm module as benign or malicious, enabling robust identification of threats across diverse attack patterns. The system operates with substantially low runtime overhead on computing resources, making it suitable for integration into real-time web application environments.

The invention provides a file uploading attack interception method based on semantic entropy enhancement, and aims at overcoming the defects of an existing file uploading security protection technology in the face of complex attacks. The method specifically comprises the steps that S1, file format analysis and content extraction are conducted, hidden scripts are mined through nested content recognition, and intermediate representation is generated through grammar cleaning and coding specifications; s2, constructing an abstract syntax tree and semantic entropy calculation, tracking a pollution chain, analyzing a high-risk function, identifying a high-entropy character string, modeling and controlling flow complexity, and generating a semantic entropy vector; s3, dynamic scoring and decision making are carried out, and accurate judgment is carried out in combination with white list perception, feature comparison, multi-modal model scoring, adaptive threshold and sandbox observation; and S4, carrying out real-time interception and feature synchronization, blocking malicious file landing, generating an attack log and synchronizing an attack fingerprint. The method takes the semantic entropy vector as a core, breaks through the limitation of static features, remarkably improves the recognition rate of complex attacks, reduces missed judgment, and guarantees the safety of Web applications.

An offline collection system comprises a pipeline for storing metadata of user interface (UI) elements at web pages of a web application. The pipeline comprises crawling uniform resource locators (URLs) of web pages of the web application for content and rendering screenshots of the web pages. The pipeline then prompts a multimodal large language model (LLM) to generate database entries for the web pages comprising UI element metadata derived from the crawled content and rendered screenshots. A response system receives user queries to navigate the web application and augments prompts to an LLM to respond to the user queries with metadata of UI elements relevant to the user queries stored by the offline collection system.

The invention discloses an iframe two-way encryption communication method and system based on a network target range, and belongs to the technical field of network security. In the aspect of data communication of iframes of a front-end platform and a third-party platform, security is enhanced, a digital certificate is generated through an ECDH key pair, and a foundation is laid for identity verification; then TCP handshake is simulated to establish a reliable channel, and two-way identity authentication resisting replay attack is achieved through two-way certificate verification and random number exchange; then negotiating a shared key by using ECDH, deriving a dynamic session key through an HKDF algorithm, and ensuring forward confidentiality; and finally, real-time data encryption and integrity verification are carried out by adopting AES-GCM, and the anti-leakage capability is continuously improved through a timing key rotation mechanism. The whole process fuses the characteristics of quantum computing resistance, low resource consumption, efficient transmission and the like, an end-to-end secure communication normal form is provided for Web application, and cross-session key confusion is prevented.

The invention provides a Web application-based slow denial of service attack path acquisition method and device and a medium. The method comprises the following steps of: constructing a program analysis chart of a target Web application program; extracting all program execution paths from an entry node to an exit node based on the graph; calculating the weight of the path by analyzing the key characteristics of the path, and screening candidate paths of which the weight is higher than a threshold value; and further through path state value evaluation, data flow continuity detection and type compatibility detection, finally determining a target path which may have a slow denial of service attack risk. According to the method, a potential attack path is efficiently identified through a static analysis technology, accurate positioning is provided for Web application security protection, and the risk that a system is attacked is reduced.

The invention discloses a self-adaptive web application interaction method and system and intelligent equipment. The method comprises the following steps: acquiring multi-modal sensing data based on a multi-modal sensor; performing dual verification by combining the motion features and the physiological features of the user, and performing real-time analysis to obtain the current activity type of the user; counting operation behaviors of a user in the application interaction system, and performing analysis based on the operation behaviors to obtain a screen use hotspot; sensing a scene context by adopting an intelligent rendering engine, and automatically switching an interface normal form, so that the interface normal form is matched with an activity type; and dynamically optimizing the distribution density and the spatial position of interface elements by continuously learning a user interaction mode based on a screen hot area self-adaptive layout algorithm. According to the technical scheme, self-adaptive adjustment of the application interaction interface layout is achieved through double verification of user activity types and a screen hot area self-adaptive layout algorithm in combination with user interaction behavior habits, and interface personalization is achieved while the interaction experience feeling is improved.

The invention belongs to the field of Web application technology, XML document processing technology and online editor technology, and discloses an XML semantic editing system based on an aviation knowledge graph. The system comprises a front-end application module, an XML processing engine module, a DTD rule verification module, a visual editing module, a plug-in extension module, a collaborative editing module and an aviation knowledge graph integration module. According to the method, professional and efficient editing of XML documents in the aviation field is achieved through the full-process design of front-end interaction, XML processing, DTD verification, visual editing, semantic assistance and collaborative management, and the Web technology, the XML processing technology, the DTD verification technology, the knowledge graph technology and the collaborative editing technology are integrated, so that the XML documents in the aviation field are edited in a professional and efficient mode. The problems that an existing XML editing tool is difficult to deploy, poor in compliance, low in efficiency and weak in cooperation in the aviation maintenance field are solved, and a specialized and efficient XML semantic editing scheme is provided for the aviation maintenance industry.

The invention provides a software supply chain risk component calling identification method, and belongs to the technical field of basic safety. The method comprises the following steps: loading components in a Java Web application, and dynamically capturing a loaded component list; storing the component list locally and sending the component list to an external intelligence system, acquiring risk component information, and generating a risk calling interface signature according to the risk component information; a preset instrumentation rule file is loaded based on the risk calling interface signature, and accurate monitoring of the risk interface is realized through dynamic method matching and byte code enhancement; screening risk interfaces triggered during operation according to cross comparison of static data and dynamic calling data, and marking high-risk components which must be repaired and risk components which can be postponed to be repaired; the risk report generation module generates repair suggestions and priority reports. According to the method, the accuracy of risk assessment is fundamentally improved, meanwhile, the unnecessary repair cost is remarkably reduced, and an efficient and innovative technical solution is provided for supply chain risk management.

The invention discloses a data collection method of a hybrid application program and a related device, and relates to the field of data processing. In the running process of the hybrid application program, based on an SDK inserted in a native application program of the hybrid application program in advance, native data of the native application program are collected; the method comprises the following steps: based on an SDK (Software Development Kit) inserted in a Web application program in advance, collecting page data generated by calling an H5 page by the Web application program; injecting a script code into the Web application program by the SDK inserted into the native application program; based on the script code, the SDK inserted in the Web application transmits the page data to the SDK inserted in the native application; and uploading the native data and the page data to a server based on the SDK inserted in the native application program. In a data acquisition process, on the premise of ensuring that the running logic of the hybrid application program is not changed, automatic data acquisition of the complete hybrid application program is realized.

The present invention relates to a photovoltaic module layout region extraction method based on the web. The method comprises the following steps: (1) establishing a digital elevation model; (2) setting slope and aspect parameters; (3) performing slope and aspect analysis; (4) extracting pixel units that meet a condition; (5) calculating layout spacing values; (6) performing area screening; and (7) arranging photovoltaic modules. In the present invention, terrain analysis is performed by means of a web application system, an available region for photovoltaic module layout is visually presented in combination with a graphical visualization tool and a three-dimensional technique, a rendering technique is used to simulate changes in form of illumination over time, and terrain structure information is interpreted, such that the optimal sunlight region of a site is extracted, the maximum power generation benefit of the site is achieved, and rational photovoltaic module layout regions can be provided for various complex terrains.

The invention relates to the technical field of engineering structure health monitoring and artificial intelligence, and discloses an offshore wind turbine tower drum base three-dimensional stress distribution prediction and visualization method, which comprises the following steps: generating batch working conditions by presetting a bending moment range and an interval, and calling a finite element software automation script to execute static analysis; node stress values are extracted and integrated into a structured training data set; customizing neural network training: constructing a full-connection network, and training a model by adopting a standardized preprocessing and early stop mechanism; generating an interactive cloud picture: generating a 3D stress cloud picture HTML (Hypertext Markup Language) file supporting rotation / zooming / data query based on a spatial interpolation algorithm and a Plotly tool, and automatically marking the coordinate and the numerical value of a maximum stress point; and end-to-end system deployment: packaging as a Flask Web application, and inputting a bending moment value by a user to generate an interactive cloud picture in real time. The stress analysis period is greatly shortened, the engineering application threshold is reduced, and rapid evaluation and remote cooperation of the offshore wind turbine tower drum base can be efficiently supported.

The invention discloses an RNA (Ribonucleic Acid) binding protein enrichment analysis method based on single cell expression profile data, which comprises the following steps of: writing an interactive online Web application program by using Shiny, carrying a data visualization tool, and using an RBP (Reactive Binding Protein)-gene database as a database; the method is specially designed for single cell data, different single cell data can be integrated for enrichment analysis, and expression profiles and RBP dynamic changes in single cells can be effectively captured and analyzed; rBP enrichment analysis is customized for single cell data, a single group and multiple groups of single cell expression data are preprocessed, including normalization processing, and a statistical model is used to evaluate enrichment significance at each time point, so that the analysis accuracy and biological correlation are improved; a dynamic visualization tool is provided, the dynamic visualization tool comprises a customizable network diagram, an interactive bar diagram and detailed table display, and a user can adjust a plurality of parameters of a view according to needs and directly download images and data from an interface.

The present invention relates to systems, apparatus, and methods of using usage data to determine the dependency structures of a web application, including dependency structures between follow-on objects of an initial object in a web transaction. In one embodiment, an input URL and associated dynamic response data are analyzed for such nested or dependent relationships. In further embodiments, analysis of these relationships are used to improve prefetching operations to lower overall page load times.

The invention discloses a WEB application availability alarm linkage verification method, system and device, and relates to the technical field of WEB application availability alarm verification, and the method comprises the following steps: obtaining account data of a service system, pushing the account data to a performance dial test system through an interface, and obtaining a unique identification code of the service system through Hash processing based on the account data of the service system; when the system availability abnormity is triggered, the availability abnormity prediction model is driven based on the unique identification code; performing judgment, optimally selecting a response optimal path based on an improved Dijkstra algorithm according to a judgment result, and sending an availability detection instruction to the front acquisition equipment; obtaining feedback data after detection is completed, combining the output of the availability exception prediction model, constructing a consistency verification matrix, carrying out fusion judgment, and constructing a dynamic alarm triggering strategy; according to the method, a dynamic alarm triggering strategy is formed through unified identification, multi-source prediction verification and a topology perception path scheduling mechanism, and the accuracy and the real-time performance of Web application availability alarm are remarkably improved.

The invention relates to the technical field of network security, in particular to a Web server intrusion detection method, which comprises the following steps of: dividing a web request in an audit log into a plurality of request units by utilizing a unit division technology; carrying out API classification on the plurality of request units by utilizing an API classification engine based on a prefix tree algorithm to obtain a plurality of APIs, wherein each API maintains a detection window containing the plurality of request units; calculating feature similarity among the plurality of request units in each detection window, and identifying whether abnormal request units deviating from group behaviors exist in the detection windows or not according to the feature similarity; if the abnormal request unit deviating from the group behavior exists, it is judged that Web server intrusion is detected, and the abnormal request unit is removed. Therefore, the problems that an existing web application anomaly detection technology is limited in application scene, rough in detection granularity, lack of self-adaptive comparison reference and prone to collaborative poisoning attack are solved.

A method for voice-based interaction between a user (e.g., a shopper) and online stores includes capturing an initial voice input from a user and converting the voice input to text. The text is analyzed and initial search terms are created such as product name, product description, product category, product brand name, product manufacturer and retailer. One or more searches are conducted using the initial search terms to identify one or more retailers meeting the search terms. One or more identified online retailers are accessed and searches are executed at the one or more identified retailers, generating search results. The identified online retailers have a user interface allowing purchases of the identified product or item. The search results are returned to the user.

A computing services environment may include application gateways receiving application-layer request messages from various sources. The computing services environment may also include an autonomous agent platform configured to instantiate and execute an autonomous agent to evaluate network traffic associated with a portion of the computing services environment. The computing services environment may also include an orchestration engine configured to determine one or more mitigation policies corresponding with one or more of the application gateways based on identification of the application-layer distributed denial of service attack by the autonomous agent. The computing services environment may also include application-layer web application firewalls corresponding to the plurality of application gateways and implementing the one or more mitigation policies to prevent a subset of subsequent application-layer request messages from the subset of the sources from reaching one or more components of the computing services environment.

Methods and systems of providing a universal privileged access management solution to enable users to securely share web applications through remote browser isolation (RBI). The web applications may be hosted in a SAAS (Software As A Services) cloud or in a private network. For privileged access of web applications that do not support SSO, the universal privileged access management solution implements cloud-based software services including Remote Browser Isolation (RBI), Zero Trust Network Access (ZTNA) and password vault. For privileged access of web applications that support SSO, the universal privileged access management solution implements cloud-based software services including Remote Browser Isolation (RBI) and ID brokers. In the access authentication process, by leveraging the data loss prevention (DLP) feature of RBI, the actual access credentials for accessing web applications are not disclosed to the user for mitigating security risks.

The invention discloses a Web application vulnerability automatic scanning method based on a security agent. The method comprises the following steps that S0, security knowledge is collected, and a penetration tool is combined with a large model to construct the security agent; s1, a user inputs a vulnerability scanning task into the security agent; s2, the security agent disassembles the vulnerability scanning task, generates a tool as required, and calls the tool; s3, vulnerability scanning and blasting are executed in sequence based on the disassembled tasks; s4, processing the data after vulnerability scanning and blasting, and performing information extraction; and S5, aggregating the extracted information as structured data, analyzing the structured data and generating a visual report. According to the method, a large model is adopted to understand task requirements, task steps are intelligently disassembled, corresponding safety tools are dynamically called, and end-to-end automatic vulnerability scanning is achieved.

A computing services environment may include application gateways receiving application-layer request messages from a plurality of sources. The computing services environment may also include an orchestration engine configured to identify an application-layer distributed denial of service attack based on input data characterizing network traffic received at the application gateways and to determine a mitigation plan update to address the application-layer distributed denial of service attack. The computing services environment may also include an autonomous AI agent platform configured to instantiate and execute an autonomous AI agent instance configured to determine whether to approve or reject the mitigation plan update by evaluating the mitigation plan update via a generative language model. The computing services environment may also include application-layer web application firewalls corresponding to application gateways. The orchestration engine may instruct the application-layer web application firewalls to implement the mitigation plan update upon approval by the autonomous AI agent instance.

The invention discloses a Web application anti-debugging method based on dynamic code distribution and full-link verification, which comprises the following steps of: segmenting a front-end core code, and carrying out dynamic code distribution; mixing and encrypting the segmented core code; equipment fingerprints are generated regularly to be bound with the Token; dynamic loading and execution are carried out through WASM; the server side constructs an interface calling atlas according to the service logic, and full-link verification is carried out; the terminal obtains a device fingerprint; when the server side receives the request, dynamic Token generation and verification are carried out; the request content is dynamically encrypted and returned to the front end for decryption; and real-time connection between the front end and the server end is carried out, and defense is carried out based on distributed fusing control. By combining a plurality of advanced technical means such as module dependence atlas, interface calling atlas constraint, dynamic Token and equipment fingerprint binding and the like, the difficulty of code reverse engineering is remarkably improved, illegal requests are intercepted, and a set of all-around and multi-level comprehensive defense method is constructed for Web application.

The invention discloses a web application firewall attack real-time traceability system based on real-time monitoring, and relates to the technical field of monitoring analysis, and the system comprises the steps: carrying out the attack behavior fingerprint clustering analysis according to the attack technique difference data, obtaining the attack behavior fingerprint clustering data, carrying out the cross-session attack association evaluation based on the attack behavior fingerprint clustering data, and carrying out the cross-session attack association evaluation based on the cross-session attack association evaluation. Cross-session attack association data is obtained, and attacker group portrait estimation is carried out according to the cross-session attack association data to obtain attacker group portrait data; performing context influence factor identification on the attacker group portrait data to obtain a context influence factor, and performing portrait correction on the attacker group portrait data based on the context influence factor to obtain corrected attacker group portrait data; and carrying out attacker traceability model construction on the corrected attacker group portrait data to obtain an attacker traceability model so as to execute attack real-time traceability and alarm response. The method has the effect of improving the attack tracing efficiency.

The invention provides a front-end high-frequency data security interaction method and system based on a Wasm, and relates to the technical field of network programming, network front ends and brain-computer interfaces, and the method comprises the following steps: securely storing protocol decoding parameters of Internet of Things equipment in a Wasm isolation environment; a composite authentication mechanism of JWT verification logic, domain name IP check and API authentication is provided in the Wasm through the closed characteristic of network assembly; parallel iterative processing is carried out on the multi-channel biological data in the wasm virtual environment, and analysis operation is executed; dynamically calculating a data time scale through a timestamp generation function, wherein the function comprises an index rewinding compensation mechanism; and each piece of parsed plaintext data is returned to the JavaScript calling end through an asynchronous data stream. According to the method, an authentication and authorization mechanism of the Wasm and the rear end, authentication and authentication in a Wasm isolation environment, analysis and a bridging architecture of the Wasm and the JavaScript are provided, so that the Wasm module is not called by the unauthorized Javascript.

Network systems integration and method inspect network traffic to enable secure access to internal and Internet websites from managed mobile devices. The integrated networks system implements a secure split tunneling to allow users of mobile devices managed by an organization Mobile Device Management system to securely browse only safe websites on the Internet or on an intranet resource of the organization. The system includes an internal firewall, a reception firewall, internal and external web application firewalls, a reverse proxy, an Internet proxy, and an enterprise mobility management system having a VPN-Tunnel system to implement the secure split tunneling method.

Apparatus and method for predictive protection of cloud-based applications and services. For example, a web application firewall (WAF) detects vulnerabilities in the data traffic and collects relevant information including, for example, the payload type, structure, and specific vulnerability information. For certain vulnerabilities associated with views, the view document object model (DOM) and history of views may be collected. For vulnerabilities related to API calls, the corresponding the API path and history of API calls may be retrieved. The WAF includes a signature controller which decodes the payload (e.g., the JavaScript Object Notation (JSON) structure) and creates a signature of the vulnerability based on the relevant information including, but not limited to, the API path, the web application domain, and / or the URL path. The WAF distributes collected and generated vulnerability information to web browser extensions of the web application which perform mitigations such as generating notifications when a vulnerability is encountered.

The invention relates to a Web application firewall rule generation method and device, equipment and a medium, and the method comprises the steps: obtaining attack feature description information based on log information, latest vulnerability information and user demand information through a large language model; the log information comprises Web request information sent by the client; the newest vulnerability information represents newest vulnerabilities injected in the Web request information; the user demand information represents Web request information needing to be protected by the Web application firewall; calling a target tool through a model context protocol module; generating a Web application firewall rule based on the attack feature description information through the target tool; the target tool is a tool related to Web application firewall rule generation, and the efficiency and accuracy of Web application firewall rule generation are improved.

The invention discloses an intelligent diagnosis and typing method for pneumonia-related ARDS, and relates to the technical field of intelligent diagnosis and typing methods for ARDS, and the method comprises the steps: employing a data preprocessing method to carry out cleaning and standardization processing on pneumonia patient clinical data from MIMIC-IV and eICU databases, and obtaining a standardized data set; a correlation weight algorithm is adopted to screen 52 candidate variables in the standardized data set, and 18 key prediction factors are obtained; carrying out model training on the screened key predictive factors by adopting a machine learning stacking method to obtain a pneumonia-related ARDS diagnosis model; performing clustering analysis on the clinical data of the pneumonia-related ARDS patients by adopting a k-means clustering method, and dividing the patients into three clinical phenotypes based on nine input factors to obtain a subtype classification result; verifying a subtype classification result by adopting a random forest method to obtain a clinical subtype prediction model with high accuracy; and integrating and deploying the diagnosis model and the subtype classification model by adopting a webpage application program.

The technology disclosed teaches performing biometric app free authentication or authorization of a user to access a web-based application, with the user interacting with a workstation browser running on a workstation to access the web-based application using built-in resources of a smart / mobile device. A web application uses methods to authenticate and authorize users before the users are permitted to access the application. A demand exists for improving the security and ease of use of authentication and access management. Access management and authentication of users has evolved to more than just entering a username and password. Multi-factor authentication (MFA) is common. The numerous paths involved in authentication use numerous forms of identification of users during the authentication journey. An opportunity arises to combine paths used for non-standard circumstances with device codes and biometrics for users to log into web applications conveniently and securely without installing another app for authentication and authorization.

The method for generating mitigation policies may include receiving, by a large language model (LLM), a plurality of inputs including textual description of vulnerabilities, code with one or more vulnerability exploits, and meta-data; generating, by the LLM, API and application vulnerability mitigation policies based on the received inputs; generating, by a feedback loop automation engine (FLAE), feedback data based on the API and application vulnerability mitigation policies and the code with one or more vulnerability exploits; and updating, by the LLM, the API and application vulnerability mitigation policies based on the feedback data generated by the FLAE.