Method for constructing information system running rule libraries on basis of association rule mining

Abstract

The invention discloses a method for constructing information system running rule libraries on the basis of association rule mining. The method is characterized by comprising steps of S01, acquiring network topology architectures of information systems and dynamic monitoring indicators and static monitoring indicators of all devices; S02, generating network fault trees by the aid of the network topology architectures and the dynamic monitoring indicators and the static monitoring indicators of the devices and generating basic rule libraries by the aid of the network fault trees; S03, executing association rule mining algorithms on historical data of the information systems to acquire association rule libraries; S04, combining the basic rule libraries with the association rule libraries and generating extension rule libraries by means of reasoning. Retrieval priority of the basic rule libraries is superior to retrieval priority of the association rule libraries, and the retrieval priority of the association rule libraries is superior to retrieval priority of the extension rule libraries. The method has the advantages that the information system running rule libraries can be intelligently generated by the aid of fault tree technologies and association rule mining technologies, rules can be optimized by the aid of machine learning technologies, three-domain structures of the rules are further designed, and accordingly the rules can be automatically sorted and adjusted.

Description

technical field [0001] The invention relates to a construction method of an information system operating rule base based on association rule mining. Background technique [0002] In order to ensure the safe, stable, and effective operation of the information system, the State Grid Corporation of China launched the construction of an integrated information operation and maintenance supervision system (hereinafter referred to as "IMS") covering "integrated network management, desktop management, security management, and operation and maintenance services" in 2008. In 2011, the whole network promotion of the system was completed, and in 2012, the in-depth application construction of the IMS system was completed with the six modules of "deep collection, equipment management, one order and two tickets, alarm center, display center, and green computer room" as the core. The work fully covers the network, network equipment, host, database, middleware, desktop terminal, security equ...

AI Technical Summary

Problems solved by technology

[0004] 1. The operation performance monitoring of IT infrastructure and business systems still requires operation and maintenance personnel to set monitoring threshold rules based on historical operation and maintenance experience and professional knowledge, which cannot adapt to the operating rules of IT infrastructure and business systems. The monitoring threshold rules solidified in the segment do not conform to the actual operating conditions, which is prone to false positives and false positives;

[0005] 2. The set operation monitoring rules cannot be rationally judged, and it is impossible to verify whether the set operation monitoring rules fit the actual operation of IT infrastructure and business systems;

[0006] 3. The setting of operation monitoring rules has no self-learning function, and cannot be adjusted and optimized according to the historical operation conditions of IT infrastructure and business systems

Images