Network security situation awareness device for power distribution communication network

Abstract

The invention belongs to the technical field of network information, in particular to a network security situation awareness method for a power distribution communication network. The method comprisesthe following steps: dividing data of the power distribution communication network into real-time data and historical data, collecting the data by event triggering and periodic collection separately,and uploading the data; performing duplication removal on the collected data by fingerprint extraction algorithm and simhash dimensionality reduction, performing denoising by proximity algorithm, organizing different features of the data into a vector form, and distinguishing the real-time data from the historical data by status bits; performing data fusion and situation assessment on the real-time data from the historical data by a Bayesian network security situation awareness model and a ball vector machine classifier model with parameters optimized and trained by quantum genetic algorithmseparately; and performing security prediction on the power distribution communication network, and visually displaying the security situations, including real-time security situation prediction, real-time situations, history and other information.

Description

technical field [0001] The invention belongs to the technical field of network information, and in particular relates to a security situation awareness method for a power distribution communication network. Background technique [0002] The distribution communication network is an important part of the power communication network, and the distribution network communication system undertakes the transmission of a lot of business data at the end of the power grid. With the widespread access of new energy power, after the distribution network is connected to renewable power sources, the data necessary for the scheduling, control, management and other services of the micro-grid system will inevitably need to be transmitted through the distribution network communication system. As the "nerve ending" of the entire smart grid system, damage to the power distribution communication system will inevitably lead to the paralysis of the entire smart grid. [0003] However, with the rapi...

AI Technical Summary

Problems solved by technology

[0004] (1) The breadth and depth of data collected by traditional security products are insufficient, which leads to deviations in analysis and prediction, and cannot effectively monitor and prevent the operations of internal users of the system. Many enterprise security incidents are caused by illegal operations of internal users

[0005] (2) Traditional security products can only defend against specific security threats, resulting in a situation of "separate efforts", unable to effectively use each other's information, and unable to efficiently integrate multi-dimensional information security data

[0006] (3) Traditional security products continuously generate a large number of security logs and events during operation, which will cause inconvenience for operators to use, lack of a unified multi-product interface for operation, and greatly reduce the work efficiency of staff

Images