Method for monitoring abnormal logins and abnormal operations of electricity utilization information acquisition system account

Abstract

The invention discloses a method for monitoring abnormal logins and abnormal operations of an electricity utilization information acquisition system account. The method includes the following steps: separately establishing data models for recording account logins and account operations in a system background, and performing log recording on login and operation information of the electricity utilization information acquisition system account; by periodically judging whether the number of logins and operations of the same account within a minute or an hour exceeds a certain threshold and/or whether repeated logins and operations exist within the same second, judging the login anomaly and operation anomaly of the account, and performing access restriction on the account; and recording the login anomaly or the operation anomaly of the account in a log table, wherein the anomalies include the abnormal time, anomaly types and the number of restrictions. According to the method disclosed by the invention, the login and operation conditions of the system account are monitored in real time, the account with the abnormal logins and operations can be restricted in real time, and thus the stability and security of the system operation can be improved.

Description

technical field [0001] The invention belongs to the technical field of information system security and monitoring, and relates to a monitoring method for abnormal account login and abnormal operation of an electricity consumption information collection system. Background technique [0002] The electricity consumption information acquisition system is a comprehensive quasi-real-time information acquisition, analysis and processing system integrating modern digital communication technology, computer software and hardware technology, electric energy metering technology, electric load management technology and electric power marketing technology. It uses mobile communication network, 230MHz Wireless private network and optical fiber network are the main communication carriers. Data communication between the system master station and field terminals is realized through various communication methods. It has data collection, remote meter reading, abnormal power consumption informati...

AI Technical Summary

Problems solved by technology

[0005] According to statistics, normal account manual operations are generally within 10 times per minute, and the above-mentioned frequent operations of such accounts consume a large amount of system resources, which have a great impact on the life of the master server, greatly increase the probability of system downtime, and cause waste of system resources and loss, bringing serious security risks to the collection system

After investigation, it was found that some accounts automatically log in to the collection system page through plug-in program software to automatically perform preset operations. Due to the high frequency of login and operation using this method, it has a great impact on the security, stability and efficient operation of the system: the average load of the system Reached 49.8%, the highest load was 98.6%, the system load of the day was as attached figure 1 shown

Images