Power monitoring system network security policy arrangement and disposal method and system

Abstract

The invention discloses a power monitoring system network security policy arrangement and disposal method and system. The method comprises the following steps: monitoring security events of internal equipment of a power monitoring system; matching the security event with a preset strategy library, if matching succeeds, obtaining a security disposal strategy corresponding to the security event from the preset strategy library, and if matching fails, calculating a strategy approximate solution based on a genetic algorithm; a security disposal strategy corresponding to the security event is visually arranged according to the strategy approximate solution; and realizing safe disposal based on the obtained safe disposal strategy. According to the invention, behavior analysis and monitoring early warning of internal equipment of the power monitoring system are realized, an approximate disposal strategy is efficiently calculated from massive alarms based on a matching method of a genetic algorithm, and active defense of the power monitoring system is truly realized; the main security threat faced by the current power monitoring system is solved from the angles of monitoring early warning and emergency disposal.

Description

technical field [0001] The invention relates to a method and a system for arranging and handling network security policies of a power monitoring system, and belongs to the field of network security control. Background technique [0002] For the power monitoring system, the number of information assets is increasing day by day, and the relevance and complexity of the system are increasing. There are still challenges in transformation: too many network security event alarms, effective alarms are submerged, and cannot effectively help security operation and maintenance and research and judgment personnel; lack of professional security attack and defense, analysis capabilities, and disposal personnel have experience in security analysis, research and judgment Difficult to fix; security response and disposal time is too long, low efficiency; lack of standardized response and disposal process; lack of quantifiable indicators for security operation and disposal efficiency; lack of ...

AI Technical Summary

Problems solved by technology

[0002] For the power monitoring system, the number of information assets is increasing day by day, and the relevance and complexity of the system are increasing. There are still challenges in transformation: too many network security event alarms, effective alarms are submerged, and cannot effectively help security operation and maintenance and research and judgment personnel; lack of professional security attack and defense, analysis capabilities, and disposal personnel have experience in security analysis, research and judgment Difficult to solidify; safety response and disposal time is too long and inefficient; lack of standardized response and disposal process; lack of quantifiable indicators for safety operation and disposal efficiency; lack of overall design and planning, limited linkage between equipment and platforms, etc.

Images