Network risk perception method and system for power monitoring system

Abstract

The invention discloses a network risk perception method and system for a power monitoring system, and relates to the technical field of network security. The method comprises the steps: collecting network threat information perceived by network security equipment of multiple types or multiple manufacturers at a network boundary of the power monitoring system, analyzing the network threat information, calculating the network threat recognition accuracy, and displaying the network threat information to the user when the network threat identification accuracy exceeds the threshold value. The network risk perception capability does not depend on a single device or manufacturer but depends on a system composed of multiple devices, the overall stability is higher, the anti-risk capability is higher, and the technical problem that the network risk identification capability of the power monitoring system is not high due to the fact that the network threats are easily missed or misjudged because the network threats are independently perceived by network security protection equipment at the network boundary when the power monitoring system identifies the network threats at present is solved.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method and system for network risk perception of a power monitoring system. Background technique [0002] The existing power monitoring system deploys a large number of various types of network security protection equipment at the network border. These network security protection equipment detect and analyze the behavior in the network based on different network threat signature databases of their respective manufacturers, and obtain corresponding threat alarms. . However, due to the technical barriers and commercial protection factors of different manufacturers, there is currently no solution to integrate all network security device features. Therefore, network threats can only be detected by relying on the maturity of the network security protection equipment itself. This may be due to the technical level of the manufacturer or the technical characteristics of the n...

AI Technical Summary

Problems solved by technology

[0003] The present invention provides a network risk perception method and system for a power monitoring system, which is used to solve the problem that the current power monitoring system's identification of network threats depends on the network security protection equipment at the network boundary to perceive network threats independently, and network threats are prone to exist The omission or misjudgment of the power monitoring system leads to the technical problem that the network risk identification ability of the power monitoring system is not high

Images