Power Internet of Things network security risk prediction method

Abstract

The invention relates to the field of network security prediction, in particular to a power internet of things network security risk prediction method. Comprising an acquisition module, a filtering module, a prediction module and a display module. The method specifically comprises the following steps: firstly, taking an attack source IP, an attack behavior and an attack target IP in a single alarm event as effective alarm information; obtaining all alarm information through an acquisition module; for each piece of alarm information, taking the current alarm event as a result, and searching six closest alarm events before the occurrence time of the alarm event as causes, thus building a piece of causal data; and storing the causal data in a database to form a causal database; secondly, filtering low-frequency causal data in the causal database through a filtering module; then, predicting the alarm event through a prediction module adopting a Levenshtein distance algorithm; and finally, displaying effective alarm information of the predicted alarm event and the risk size and risk degree of the predicted alarm event in real time through a display module. The problem of poor long-term prediction effect in the system in the prior art is solved.

Description

technical field [0001] The invention relates to the field of network security prediction, in particular to a network security risk prediction method of the electric power Internet of Things. Background technique [0002] When the scale of the power Internet of Things network gradually increases, the number of accompanying network attack events also gradually increases. The research on network security is very necessary. The traditional protection methods represented by intrusion detection technology and firewall have been difficult to meet the needs of large-scale network attacks. Security protection requirements. Network security protection is based on security situation analysis and security risk prediction. The risk prediction link is in the final stage of the network security situation awareness system. Only by predicting possible alarm events can we do To prevent problems before they happen, and better maintain the network security situation. [0003] Accurately predic...

AI Technical Summary

Problems solved by technology

[0004] Based on the above problems, the present invention provides a network security risk prediction method of the electric power Internet of Things, which solves the problem of poor mid- and long-term prediction effect of the existing technology on the system

Images