The present application relates to a method for monitoring the host security of an
electric power monitoring system. The method comprises: obtaining a flow data packet in a
network communication, wherein the flow data packet includes at least one flow data; performing
feature extraction on the flow data to obtain a flow feature corresponding to the flow data, wherein the flow data is flow data in the
application layer of a monitoring host corresponding to the
network communication; inputting the flow feature into a pre-trained
support vector machine model to obtain at least one
data type corresponding to the flow data, and performing a security judgment on the flow data based on the
data type to obtain a first judgment result; if the first judgment result is that the flow data is malicious data, obtaining the security status information corresponding to the host, and saving the security status information to a security status area to generate a security status log. The use of this method can improve the accuracy and credibility of
security monitoring.