Tsinghua University

Beijing Huashang Luhai Technology Co., Ltd.

Jianping Wu

Ke Xu

Bo Wu

Qi Li

Fan Yang

Ying Liu

Chao Zhang

Yuan Li

Wende Tan

Qi Cheng Li

Dan Li

Xiaoliang Wang

Ziqiang Wang

Yang Cheng

Songtao Fu

The present disclosure provides a software protection method and apparatus, an electronic device and a storage medium. By identifying the sensitive data in the software source code and determining the point of use of the sensitive data; setting the sensitive data in the read-only section of the compilation product of the software source code so that the sensitive data is stored in the read-only area when the software is running; inserting the check code into the above point of use of the sensitive data, where the check code is used to check whether the sensitive data read is in the read-only area while the software is running, and determine whether to continue running the software according to the check result, embodiments of the present disclosure realize the integrity verification of the sensitive data, and thereby prevent the sensitive data from being corrupted with low performance overheads.

Software protection method and apparatus, electronic device, and storage medium

The present disclosure provides a sensitive data reading method and apparatus, an electronic device, and a storage medium. By initiating a read request for sensitive data stored in a memory page or a memory region, determining a read-only permission result in response to the read request, where the read-only permission result indicates whether the memory page or the memory region is provided with a read-only permission, and reading the sensitive data if the read-only permission result indicates that the memory page or the memory region is provided with the read-only permission, that is, by verifying the read-only permission of the memory page or the memory region storing the sensitive data, embodiments of the present disclosure enable a fast lightweight verification of the integrity of the sensitive data, thereby ensuring that sensitive operations are not hijacked.

Sensitive data reading method and apparatus, electronic device, and storage medium

A method for hierarchical Internet trust sharing includes dividing a network into intra-domain and inter-domain layers based on a management domain; performing authentication on a central certificate through a CA and publishing the central certificate to a blockchain; managing by the central node, a certificate of each communication node based on a real address; collecting by the central node, temporary data reported by each communication node every preset time interval, generating a trust evaluation value of each communication node based on the temporary data and forming a format file from the trust evaluation values; generating by the central node, a file digest from the format file at each preset time interval, and publishing the file digest verified by central nodes in the inter-domain to the blockchain; and automatically deleting by the blockchain, data from the time interval 1 to the time interval (N-T-1) to retain blockchain header information.

Method for hierarchical internet trust sharing

A security guarantee method and apparatus for a full life cycle of a packet are disclosed. The method includes: in response to a data packet generated at a communication source, performing by a distributed network node, authenticity verification on a source address and an identity of the data packet; in a network forwarding process of the data packet, performing by the distributed network node, collaborative sampling on the data packet and performing credibility verification on related routing behaviors; in response to the data packet reaching a destination end, verifying by the destination end, the legality of the data packet.

Security guarantee method and apparatus for full life cycle of packet, and decentralized network trust system

A verification method for fast source and path embedded with random authentication is provided. The method includes: generating a corresponding verification structure for an expected path according to a predetermined path strategy, embedding different m pieces of fragment information randomly selected with same possibility from the verification structure for the expected path to a header of a data packet to be transmitted in a data flow, and transmitting the data packet to be transmitted with the embedded fragment information to a next hop of routing node of the expected path, performing a verification on the received data packet by the respective intermediate routing node on the expected path, and forwarding the data packet to the next routing node when the verification passes, performing verification on the received data packet by the data flow destination, performing a parsing verification evaluation on the expected path when the verification passes.

Verification method for fast source and path embedded with random authentication

A dynamic path verification method based on reorganization of authentication fragments is proposed. The method includes: sending an initial expected path verification structure to a data packet sending end via a guarantee service node, and sending notification information to the respective routing nodes on an initial expected path; after updating the initial expected path to a new expected path, inserting the new expected path verification structure into a subsequent data packet to be sent, verifying the data packet by other nodes except a migration node, and sending the subsequent data packet to be sent to a next hop of routing node; performing the parsing verification on the received data packet by the migration node.

Dynamic path verification method based on reorganization of authentication fragments

A method for 3D printing a prefabricated modular building includes rotating an intermediate module () by 90 degrees to obtain a fabricated module (), so that two originally vertical walls (A, C) become horizontal walls, and the other two walls (B, D) become supporting walls. This enables the building to be able to receive stresses as a whole, improving the stability of the building.

Method for 3D printing prefabricated modular buildings

The disclosure provides a method for adjusting traffic for a network, a computing device, and a storage medium. The method includes: obtaining local network state information collected by any border router node in the network; and inputting the local network state information collected by the any border router node into a corresponding first preset trained sub-model, to output a proportion of traffic dispatched on each candidate path from a source border router node to a destination border router node, in which the source border router node is the any border router node, and the destination border router node is an egress border router node in the network.

Growing community of inventors

Beijing, China

Jianping Wu