The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Oct. 07, 2025
Filed:
Dec. 21, 2023
Nanjing Nari Information & Communication Technology Co., Ltd., Jiangsu, CN;
Weiyong Yang, Jiangsu, CN;
Haotian Zhang, Jiangsu, CN;
Wei Liu, Jiangsu, CN;
Xingshen Wei, Jiangsu, CN;
Peng Gao, Jiangsu, CN;
Yongjian Cao, Jiangsu, CN;
Shishun Zhu, Jiangsu, CN;
Chao Wu, Jiangsu, CN;
Qiuhan Tian, Jiangsu, CN;
Jian Zhou, Jiangsu, CN;
Yiming Zhu, Jiangsu, CN;
Longyun Qi, Jiangsu, CN;
Yibin Huang, Jiangsu, CN;
Zengzhou Ma, Jiangsu, CN;
Huishui Li, Jiangsu, CN;
Yongming Cao, Jiangsu, CN;
Nannan Guo, Jiangsu, CN;
Abstract
Disclosed are a method and system for detecting a complex multi-step attack in an electric power system. The method includes: collecting interaction behavior data of a network entity; preprocessing the interaction behavior data of the network entity based on a heterogeneous graph to obtain input data; and inputting the input data into a complex multi-step attack detection module to obtain an attack detection result. Information is extracted from the interaction behavior data to construct a node and an edge of the heterogeneous graph. Timestamp information of a destination node and an adjacent source node of the destination node is input into a Time2Vec layer to obtain a first time embedding representation. Data that fuses node feature information and the first time embedding representation is input into a Heteformer layer, and a second node embedding representation is obtained as input data and input into the complex multi-step attack detection module.