Dual-network interleaving anomaly detection method and system

Abstract

The invention provides a dual-network interweaving anomaly detection method and system, and the method comprises the steps: obtaining network topology baseline data of dual networks, storing the network element information of each subnetwork of the dual networks, and enabling the dual networks to be ring networks which are redundant to each other; and monitoring network element information change and producing change information, and determining whether dual-network interleaving abnormity occurs according to the change information and the network topology baseline data. Network changes are dynamically monitored based on network topology baseline data, and dynamic abnormal interleaving detection for an existing signal security data network networking scheme is achieved.

Description

technical field [0001] The invention belongs to the field of rail transit communication, and in particular relates to a double-network interweaving abnormality detection method and system. Background technique [0002] In the high-speed train control network, the current network design is physically isolated and redundant. The purpose is to avoid communication abnormalities or communication interruptions when the network fails. And ground equipment cannot obtain real-time information, resulting in operational accidents or train control safety accidents. At present, a dual-network structure is adopted to ensure the normal communication of the entire rail transit network. Each train control system is connected to the dual-network respectively, and the dual-networks belong to different IP network segments. Such as figure 1 As shown, the dual network in the signal safety data network topology is the left network and the right network. In the dual-network redundant network arc...

AI Technical Summary

Problems solved by technology

[0003] Since the current high-speed rail train control safety data network does not have traffic collection equipment, it is impossible to collect the traffic of the left (right) network, analyze the source network address, and judge whether the datagram sent by the host of the left (right) network is in the right (left) network. middle transmission

[0004] The existing network management server only has the ability to collect and manage network element information. If a device crosses the network, it cannot make an alarm action, locate the cross-network device, and fail to quickly recover from the fault.

Images