Power network information security active defense system based on big data

Abstract

The invention provides a power network information security active defense system based on big data. The system comprises the following parts: a basic data collection module, configured to collect device data and related personnel data in the power network and provide protection levels and threat events; a data collection engine, configured to perform centralized operation status monitoring on devices in the power network; a security configuration management platform, configured to receive data collected by the basic data collection module and the data collection engine, and perform performance and operation status monitoring on all devices according to the collected data; a big data analysis module, configured to process and analyze the monitored data of the security configuration management platform, and perform security situational awareness and prediction to sense the threat situation; and an intelligent defense module, configured to match appropriate defense measures for executionfrom a defensive measures library according to the threat situation acquired by the big data analysis module. The invention adapts to the current needs of the power network for information security protection.

Description

technical field [0001] The invention relates to the technical field of enterprise network security protection, in particular to a big data-based power network information security active defense system. Background technique [0002] Facing the increasingly severe security situation at home and abroad and the rapidly developing information security issues, various security systems, including the power information security system, are facing various new threats. With the continuous development of network attack technology, conventional attacks continue to evolve, and new types of attacks such as advanced persistent threats continue to emerge, with the characteristics of faster attacks, more professional means, more hidden processes, and more complex technologies. There are still serious loopholes in the security system in the application business of key control products, and it is conceivable that the chills of people, assets, environment and even national security can be imag...

AI Technical Summary

Problems solved by technology

With the continuous development of network attack technology, conventional attacks continue to evolve, and new types of attacks such as advanced persistent threats continue to emerge. They have the characteristics of faster attacks, more professional means, more hidden processes, and more complex technologies. The industrial control system led by the power industry There are still serious loopholes in the security system of the key control product application business, and it is conceivable that it is afraid of people, assets, the environment, and even national security. Therefore, it is extremely necessary to invent a complete active defense system for power network information security

Images