Huawei Technologies Co., Limited

Zhongke Jingyuan Electron Limited

State Grid Corporation of China

China Electric Power Research Institute Company Limited

Shiguang Li

Wu Jiang

Zhihui Xue

Jie Guo

Linghong Ruan

Shiguang Wan

Wei Wang

Kun Wu

Chen Bo Li

Wei Han

Lixin Li

Zechen Wei

Lijuan Jiao

Tianjiao Pu

Yijun Yu

Mengwen Xu

Zhenhui Wang

Shixiong Fan

Ting Yu

Xingwei Liu

Xinjing Wu

Jiatong Du

Mingcheng Zong

A network attack detection method and apparatus is provided. The network protection device obtains first key data from received first network traffic, and matches the first key data with an attack signature in a signature database to obtain a first matching result; if the network protection device determines, based on the first matching result, that the first network traffic is aggressive, the network protection device obtains a target attack detection model based on the first network traffic, where the target attack detection model is used to identify one or more attack signatures that are different from the attack signature in the signature database; and when the network protection device receives second network traffic, the network protection device determines, based on the target attack detection model, whether the second network traffic is aggressive.

Network attack detection method and apparatus

A packet processing method. A protection device receives a first access request packet. The first access request packet includes a packet sent based on a TCP/IP protocol. The protection device extracts a first fingerprint feature from a transport-layer packet header and/or a network-layer packet header of the first access request packet. The first fingerprint feature corresponds to an operating system type of a terminal device that transmits the first access request packet. The protection device recognizes the first fingerprint feature based on a fingerprint feature database to determine whether to allow the first access request packet to access a server. The protection device allows the first access request packet to pass through when the first access request packet is allowed to access the server. The protection device blocks the first access request packet when the first access request packet is not allowed to access the server.

Packet processing method and apparatus, device, and computer-readable storage medium

A method and an apparatus for determining the distributed power supply capacity to be accessed by a feed line of a power distribution network, and a storage medium, the method comprising: determining feed line loss on the basis of load information of power distribution network feed line access nodes and circuit parameters; on the basis of the feed line loss, determining three-phase voltage change values of the feed line circuit; using a single phase having the greatest voltage change amongst the voltage change values, determining a maximum active power for distributed power supply access under voltage constraints; comparing the current of the feed line corresponding to the maximum active power with a circuit current limit, and determining the distributed power supply capacity to be accessed by the feed line; the apparatus comprises a feed line information collection unit, a voltage drop unit, a quantitative calculation unit, and a results analysis unit. The present method can be used for dispatching operation control of a distributed power supply in a power grid, and can ensure safe access to the distributed power supply and safe operation of the power grid, improving the access capacity of the power distribution network to the distributed power supply.

Method, apparatus and storage medium for determining distributed power supply access capacity

A method, an apparatus, and a non-transitory computer-readable medium for measuring a height of a sample includes: receiving, by an optical sensor having pixels, an optical grating image of an illuminated optical grating reflected by a surface of the sample; determining, by a processor, a digital grating image by keeping values of first pixels of the optical grating image and resetting values of second pixels of the optical grating image; and determining the height based on a relationship between an integrated intensity of a portion of the digital grating image and the height.

Sample height measurement using digital grating

Methods and apparatuses for laser-assisted electron-beam inspection (EBI) are provided. The apparatus includes an EBI device and a laser illumination device. The EBI device includes an e-beam source configured to emit an incident e-beam, a deflector configured to deflect the incident e-beam to be projected onto a surface of a semiconductor device, and an electron detector configured to detect emergent electrons generated by the incident e-beam projected onto the surface. The laser illumination device includes a laser source configured to generate a laser, and a guiding device configured to guide the laser to be projected onto the semiconductor device. The laser changes the emergent electrons to cause, in a positive mode of the EBI apparatus, a PN junction of an NMOS of the semiconductor device to be in a conduction state.

Laser-assisted electron-beam inspection for semiconductor devices

A method and a system for identifying a file type. A modification interface may be provided so that a user inputs a file feature parameter, and the file feature parameter input by the user is added to a file type configuration file, then the file type configuration file is loaded to a state machine to perform file type identification. Therefore, the user can modify a file feature parameter in the original file type configuration file, and when a file feature parameter of a file of a certain type is changed or a file of a new type appears, the user can update a file feature parameter in the state machine in time to identify the changed file or the file of the new type. In this way, the user does not need to search for an identification tool on the Internet.

Method and system for identifying file type

A data detecting method and apparatus for a firewall device connected with a network to identify security threat in the data, where the method is implemented by a fast forwarder in the firewall device and includes: the fast forwarder receives application data; obtains application information in the received application data; determines an application protocol type corresponding to the application data according to the application information and an application identifying table; queries a configuration item for threat detection according to the application protocol type to determine whether the application data requires threat detection; and if the application data does not require threat detection, forwarding the application data. The data detecting method avoids a problem that performance of a firewall is degraded because all application data is sent to a detecting processor in the firewall device for detection, thereby improving an performance of the firewall device.

Data detecting method and apparatus for firewall

An IPS detection processing method, a network security device and a system are disclosed. The method includes: determining, by a network security device, whether an internal network device is a client or a server; if the internal network device is the client, simplifying an IPS signature rule base to obtain an IPS signature rule base corresponding to the client, or if the internal network device is the server, simplifying the IPS signature rule base to obtain an IPS signature rule base corresponding to the server; generating a state machine according to a signature rule in the IPS signature rule base obtained through simplifying processing; and performing IPS detection on flowing-through traffic by applying the state machine. In embodiments of the present invention, the network security device performs IPS detection by adopting the state machine with a redundant state removed, thereby improving IPS detection efficiency.

IPS detection processing method, network security device, and system

A method and an apparatus for filtering a uniform resource locator (URL). According to the method, a first category corresponding to a URL connection request can be found in a pre-stored category information table; when the first category conforms to a predetermined URL passing through policy, the URL connection request is allowed to pass through; the URL connection request is forwarded to a corresponding server; a second category corresponding to a URL is determined according to web page content returned by the server; if the second category conforms to the predetermined URL passing through policy, the web page content is sent to a client; if the second category does not conform to the predetermined URL passing through policy, the web page content is blocked. A category to which a URL belongs can be determined in real time, and implementing a function of accurate category filtration.

Method and apparatus for filtering URL

Growing community of inventors

Beijing, China

Shiguang Li