Abnormal traffic detection device and method for energy Internet information support network

An energy Internet and abnormal traffic technology, applied in the field of energy Internet information support network communication traffic detection module, can solve the problems of abnormal threshold judgment, inherent characteristics of traffic and low detection accuracy, and failure to use energy Internet, etc., to achieve the effect of improving performance

CN112134871AInactive Publication Date: 2020-12-25TIANJIN UNIV +2
2 Cites 5 Cited by

Patent Information

Authority / Receiving Office
CN · China
Current Assignee / Owner
Publication Date
2020-12-25
Estimated Expiration
Not applicable · inactive patent

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention discloses an abnormal traffic detection device of an energy internet information support network, which realizes identification of abnormal traffic by performing traffic sampling, feature extraction and classification on the information support network. According to the method, frequency-domain features of uplink traffic and downlink traffic data between a server and a core switch are extracted based on a wavelet packet analysis theory, an energy Internet information support network traffic time-frequency domain mixed feature set is constructed, and an artificial bee colony optimized support vector machine is used as a classification model. According to the device, support is provided for accurate and rapid verification of traffic anomaly and security situation awareness of the communication network of the intelligent substation and guarantee of stable operation of an information physical tight coupling power system.
Need to check novelty before this filing date? Find Prior Art

Description

Technical field

[0001] The present invention relates to an abnormal flow detection device for an energy internet information support network. The present invention relates to energy internet information support network communication flow detection, and in particular to an energy internet information support network communication flow detection based on mixed characteristics of time domain and frequency domain Module, the device device includes: a flow collection module, a flow feature extraction module, and an abnormal flow identification module.Background technique

[0002] The construction of an information support network injects new impetus into the operation of the energy Internet more efficiently and conveniently. The real-time collection and transmission of measurement data is of great significance to operation and maintenance personnel. Energy companies use modern, informatized, and digital means to integrate energy Internet and information support networks to achieve the converge...

Examples

Embodiment Construction

[0043]The following describes in detail an information-supported network abnormal traffic detection method based on time-frequency hybrid characteristics of the present invention with reference to the embodiments and the drawings.

[0044]Such asfigure 1 As shown, the present invention provides an abnormal flow detection device of an energy Internet information support network, which is composed of a device body, and the device components include: a flow collection module, a flow feature extraction module, and an abnormal flow identification module; the flow collection module includes Message parsing unit, microprocessor and communication interface; said flow feature extraction module includes statistical analysis unit, system database and data management module; said abnormal flow identification module includes MCU unit, digital signal processing unit, power supply unit, graphics processing Device and display; among them:

[0045]The flow collection module connects the core switch of the...