Power equipment-based network security system intelligent operation and maintenance method and device

Abstract

The application discloses a kind of network security system intelligent operation and maintenance method and device based on electric power equipment, the method includes: determining all network security detection items under each system detection class of monitoring system, and generate system detection plan accordingly;According to system detection plan, each network security detection item is detected, and project detection result is obtained;According to project detection result, the operation and maintenance of monitoring system is carried out.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to an intelligent operation and maintenance method and device for a network security system based on power equipment. Background Art

[0002] As my country's electricity consumption continues to rise, the number of power equipment installed nationwide is increasing, and this equipment is becoming increasingly connected to cybersecurity systems. As a crucial component of the power network, the proper and sustainable operation of cybersecurity systems can reduce or even prevent cybersecurity incidents within the power network, thereby ensuring its safe operation.

[0003] Currently, to ensure the normal and sustainable operation of network security systems, timely operation and maintenance of network security systems is required. Currently, the operation and maintenance of network security systems for power equipment is primarily achieved through manual management and control of online monitoring system parameters and operation and maintenance plan information for power equipment using office software. However, practice has shown that this traditional operation and maintenance method for network security systems for power equipment requires the transmission of these parameters and information layer by layer, resulting in low management and control efficiency. This makes it difficult to carry out timely operation and maintenance of network security systems for power equipment. Therefore, it is particularly important to provide a method for timely operation and maintenance of network security systems for power equipment. Summary of the Invention

[0004] The technical problem to be solved by the present invention is to provide a method and device for intelligent operation and maintenance of a network security system based on power equipment, which can form a closed-loop tracking of the detection plan, thereby ensuring the effectiveness of the generated detection plan and improving the management and control efficiency of the detection plan, so as to timely and efficiently operate and maintain the monitoring system and ensure the safe and stable operation of the network security system.

[0005] In order to solve the above technical problems, the first aspect of the present invention discloses an intelligent operation and maintenance method for a network security system based on power equipment, the method comprising:

[0006] According to at least one system detection category of a preset monitoring system, determining at least one network security detection item under each system detection category;

[0007] Generate a system detection plan that matches the monitoring system based on all the network security detection items; the monitoring system has corresponding monitoring equipment, and all the network security detection items include at least one of identity authentication detection items, access control detection items, audit record detection items, prevention setting detection items, and trusted verification detection items;

[0008] According to the system detection plan and the preset project detection rules, each of the network security detection items is detected to obtain the project detection results of all the network security detection items;

[0009] According to the project detection results of all the network security detection projects, matching operation and maintenance operations are performed on the monitoring system to obtain the target operation and maintenance results of the monitoring system.

[0010] As an optional embodiment, in the first aspect of the present invention, before determining at least one network security detection item under each system detection class according to at least one system detection class of the preset monitoring system, the method further includes:

[0011] Determine a target device to be monitored, and determine a monitoring device that matches the target device based on the target device; the monitoring device is used to monitor the operation of the target device;

[0012] Determining a monitoring system corresponding to the monitoring device according to the device type of the monitoring device;

[0013] At least one system detection class matching the monitoring system is determined according to the configuration type of the monitoring system.

[0014] As an optional implementation manner, in the first aspect of the present invention, determining the target device to be monitored includes:

[0015] Determining, based on a predetermined device type, whether there is an association relationship between the device and target information; the target information includes at least one of first thermal information, first electrical information, first optical information, first force information, first magnetic information, and first acoustic information; and the association relationship is a direct association relationship or an indirect association relationship;

[0016] When it is determined that the device has the association relationship with the target information, determining whether the association relationship is a preset association relationship;

[0017] When it is determined that the association relationship is the preset association relationship, determining the device as a target device to be monitored;

[0018] And, determining a monitoring device that matches the target device according to the target device includes:

[0019] analyzing, according to the operating condition of the target device, operating characteristic information corresponding to the operating condition; the operating characteristic information comprising at least one of second thermal information, second optical information, second electrical information, second force information, second acoustic information, and second magnetic information generated in response to the operating condition of the target device;

[0020] According to the operation characteristic information, a monitoring device matching the operation characteristic information is determined as the monitoring device matching the target device; the monitoring device matching the operation characteristic information indicates that the monitoring device can monitor the operation characteristic information.

[0021] As an optional implementation manner, in the first aspect of the present invention, generating a system detection plan matching the monitoring system based on all the network security detection items includes:

[0022] Determine, based on all the network security detection items, a first item weight corresponding to each of the network security detection items; a greater first item weight indicates a greater detection difficulty of the network security detection item;

[0023] determining a detection level of the monitoring system according to all weights of the first items;

[0024] Determining a unit level of each of the detection units based on a plurality of predetermined detection units;

[0025] Filter out all the testing units whose unit level is greater than or equal to the testing level from all the testing units as all the pending testing units;

[0026] Determining a detection matching degree between each of the pending detection units and the monitoring system according to a detection range corresponding to each of the pending detection units;

[0027] Filter out all the pending detection units whose detection matching degree is greater than or equal to a preset matching degree threshold from all the pending detection units as all target detection units;

[0028] A system detection plan matching the monitoring system is generated based on the detection ranges corresponding to all the target detection units.

[0029] As an optional embodiment, in the first aspect of the present invention, performing matching operation and maintenance operations on the monitoring system based on the project detection results of all the network security detection projects to obtain target operation and maintenance results of the monitoring system includes:

[0030] Analyze the test results of all network security test items to obtain the test analysis results of all network security test items;

[0031] Determine a second item weight corresponding to each of the network security detection items; a larger second item weight indicates a greater impact of the network security detection item on the operation of the monitoring system;

[0032] Determining a target detection result of the monitoring system based on the detection and analysis results of all the network security detection items and the weights of all the second items; the target detection result of the monitoring system includes the security level of the monitoring system and / or the detection score of the monitoring system;

[0033] Determining whether the target detection result of the monitoring system indicates that an operation and maintenance operation needs to be performed on the monitoring system;

[0034] When the judgment result is yes, all network security detection items corresponding to the detection and analysis results indicating that the detection does not meet the standards are screened out from the detection and analysis results of all the network security detection items, as all first operation and maintenance items required for operation and maintenance of the monitoring system;

[0035] Performing a matching operation and maintenance operation on each of the first operation and maintenance items to obtain operation and maintenance status corresponding to all of the first operation and maintenance items; the operation and maintenance status corresponding to each of the first operation and maintenance items includes an operation and maintenance completion degree and / or an operation and maintenance quality status corresponding to each of the first operation and maintenance items;

[0036] Analyze the operation and maintenance situation corresponding to each of the first operation and maintenance items to obtain operation and maintenance results corresponding to all of the first operation and maintenance items;

[0037] Determine a target operation and maintenance result of the monitoring system according to the operation and maintenance results corresponding to all the first operation and maintenance items.

[0038] As an optional implementation manner, in the first aspect of the present invention, determining the target operation and maintenance result of the monitoring system according to the operation and maintenance results corresponding to all the first operation and maintenance items includes:

[0039] Filtering out all first operation and maintenance projects for which the operation and maintenance results indicate that the operation and maintenance have met the standards from all first operation and maintenance projects, as all operation and maintenance standard-meeting projects;

[0040] Determine a third item weight corresponding to each of the operation and maintenance standard-compliant items; a larger third item weight indicates a greater degree of impact of the operation and maintenance standard-compliant item on the operation of the monitoring system;

[0041] According to the third item weights corresponding to all the operation and maintenance standard-compliant items, the target operation and maintenance situation corresponding to the monitoring system is analyzed, and an analysis result of the target operation and maintenance situation is obtained as the target operation and maintenance result corresponding to the monitoring system.

[0042] As an optional embodiment, in the first aspect of the present invention, the method further comprises:

[0043] Determining whether the target operation and maintenance result indicates that the operation and maintenance meets the standards;

[0044] When it is determined that the target operation and maintenance result indicates that the operation and maintenance has met the standard, the system inspection plan is deleted from the predetermined plan list to update the plan list;

[0045] When it is determined that the target operation and maintenance result indicates that the operation and maintenance does not meet the standard, all first operation and maintenance items corresponding to the operation and maintenance result indicating that the operation and maintenance does not meet the standard are screened out from all the first operation and maintenance items as all second operation and maintenance items;

[0046] According to all the second operation and maintenance items, the system detection plan is updated to obtain the updated system detection plan, and the operation of re-executing the operation according to the system detection plan and the preset project detection rules to detect each of the network security detection items and obtain the project detection results of all the network security detection items; the system detection plan is the updated system detection plan, and all the network security detection items are all the second operation and maintenance items.

[0047] A second aspect of the present invention discloses an intelligent operation and maintenance device for a network security system based on power equipment, the device comprising:

[0048] a determination module, configured to determine, based on at least one system detection class of a preset monitoring system, at least one network security detection item under each of the system detection classes;

[0049] A generation module for generating a system detection plan that matches the monitoring system based on all the network security detection items; the monitoring system has corresponding monitoring equipment, and all the network security detection items include at least one of an identity authentication detection item, an access control detection item, an audit record detection item, a prevention setting detection item, and a trusted verification detection item;

[0050] A detection module, configured to detect each of the network security detection items according to the system detection plan and preset item detection rules, and obtain item detection results of all the network security detection items;

[0051] The operation and maintenance module is used to perform matching operation and maintenance operations on the monitoring system according to the project detection results of all the network security detection projects, and obtain the target operation and maintenance results of the monitoring system.

[0052] As an optional embodiment, in the second aspect of the present invention, the determination module is also used to determine the target device to be monitored before determining at least one network security detection item under each system detection class according to at least one system detection class of the preset monitoring system, and determine the monitoring device that matches the target device based on the target device; the monitoring device is used to monitor the operation status of the target device; based on the device type of the monitoring device, determine the monitoring system corresponding to the monitoring device; based on the configuration type of the monitoring system, determine at least one system detection class that matches the monitoring system.

[0053] As an optional implementation, in the second aspect of the present invention, the determination module determines the target device to be monitored in the following manner:

[0054] Determining, based on a predetermined device type, whether there is an association relationship between the device and target information; the target information includes at least one of first thermal information, first electrical information, first optical information, first force information, first magnetic information, and first acoustic information; and the association relationship is a direct association relationship or an indirect association relationship;

[0055] When it is determined that the device has the association relationship with the target information, determining whether the association relationship is a preset association relationship;

[0056] When it is determined that the association relationship is the preset association relationship, determining the device as a target device to be monitored;

[0057] Furthermore, the determination module determines the monitoring device that matches the target device according to the target device in the following manner:

[0058] analyzing, according to the operating condition of the target device, operating characteristic information corresponding to the operating condition; the operating characteristic information comprising at least one of second thermal information, second optical information, second electrical information, second force information, second acoustic information, and second magnetic information generated in response to the operating condition of the target device;

[0059] According to the operation characteristic information, a monitoring device matching the operation characteristic information is determined as the monitoring device matching the target device; the monitoring device matching the operation characteristic information indicates that the monitoring device can monitor the operation characteristic information.

[0060] As an optional implementation, in the second aspect of the present invention, the generation module generates a system detection plan that matches the monitoring system based on all the network security detection items in the following manner:

[0061] Determine, based on all the network security detection items, a first item weight corresponding to each of the network security detection items; a greater first item weight indicates a greater detection difficulty of the network security detection item;

[0062] determining a detection level of the monitoring system according to all weights of the first items;

[0063] Determining a unit level of each of the detection units based on a plurality of predetermined detection units;

[0064] Filter out all the testing units whose unit level is greater than or equal to the testing level from all the testing units as all the pending testing units;

[0065] Determining a detection matching degree between each of the pending detection units and the monitoring system according to a detection range corresponding to each of the pending detection units;

[0066] Filter out all the pending detection units whose detection matching degree is greater than or equal to a preset matching degree threshold from all the pending detection units as all target detection units;

[0067] A system detection plan matching the monitoring system is generated based on the detection ranges corresponding to all the target detection units.

[0068] As an optional implementation, in the second aspect of the present invention, the operation and maintenance module includes:

[0069] An analysis submodule, configured to analyze the test results of all network security test items to obtain the test analysis results of all network security test items;

[0070] a determination submodule, configured to determine a second item weight corresponding to each of the network security detection items; a greater second item weight indicates a greater degree of impact of the network security detection item on the operation of the monitoring system; and determining a target detection result of the monitoring system based on the detection and analysis results of all the network security detection items and all the second item weights; the target detection result of the monitoring system includes a security level of the monitoring system and / or a detection score of the monitoring system.

[0071] A judgment submodule, configured to judge whether the target detection result of the monitoring system indicates that an operation and maintenance operation needs to be performed on the monitoring system;

[0072] a screening submodule configured to, when the judgment result of the judging submodule is yes, screen out from the detection and analysis results of all the network security detection items all network security detection items corresponding to the detection and analysis results indicating that the detection does not meet the standards, as all first operation and maintenance items required for operation and maintenance of the monitoring system;

[0073] an operation and maintenance submodule, configured to perform a matching operation and maintenance operation on each of the first operation and maintenance items, and obtain operation and maintenance status corresponding to all of the first operation and maintenance items; the operation and maintenance status corresponding to each of the first operation and maintenance items includes an operation and maintenance completion degree and / or an operation and maintenance quality status corresponding to each of the first operation and maintenance items;

[0074] The analysis submodule is further configured to analyze the operation and maintenance status corresponding to each of the first operation and maintenance items, and obtain operation and maintenance results corresponding to all of the first operation and maintenance items;

[0075] The determination submodule is further configured to determine a target operation and maintenance result of the monitoring system according to the operation and maintenance results corresponding to all the first operation and maintenance items.

[0076] As an optional implementation manner, in the second aspect of the present invention, the determination submodule determines the target operation and maintenance result of the monitoring system according to the operation and maintenance results corresponding to all the first operation and maintenance items in the following manner:

[0077] Filtering all first operation and maintenance projects corresponding to the operation and maintenance results indicating that the operation and maintenance have met the standards from all the first operation and maintenance projects, as all the operation and maintenance standard-meeting projects;

[0078] Determine a third item weight corresponding to each of the operation and maintenance standard-compliant items; a larger third item weight indicates a greater degree of impact of the operation and maintenance standard-compliant item on the operation of the monitoring system;

[0079] According to the third item weights corresponding to all the operation and maintenance standard-compliant items, the target operation and maintenance situation corresponding to the monitoring system is analyzed, and an analysis result of the target operation and maintenance situation is obtained as the target operation and maintenance result corresponding to the monitoring system.

[0080] As an optional embodiment, in the second aspect of the present invention, the device further includes:

[0081] A judgment module, configured to judge whether the target operation and maintenance result indicates that the operation and maintenance meets the standard;

[0082] an updating module, configured to delete the system inspection plan from the predetermined plan list when the judging module judges that the target operation and maintenance result indicates that the operation and maintenance has met the standard, so as to update the plan list;

[0083] a screening module configured to, when the judgment module determines that the target operation and maintenance result indicates that the operation and maintenance does not meet the standards, screen out from all the first operation and maintenance items all first operation and maintenance items corresponding to the operation and maintenance results indicating that the operation and maintenance does not meet the standards as all the second operation and maintenance items;

[0084] The update module is also used to update the system detection plan according to all the second operation and maintenance items, obtain the updated system detection plan, and trigger the detection module to re-execute the operation of detecting each of the network security detection items according to the system detection plan and preset project detection rules to obtain the project detection results of all the network security detection items; the system detection plan is the updated system detection plan, and all the network security detection items are all the second operation and maintenance items.

[0085] A third aspect of the present invention discloses another intelligent operation and maintenance device for a network security system based on power equipment, the device comprising:

[0086] a memory storing executable program code;

[0087] a processor coupled to the memory;

[0088] The processor calls the executable program code stored in the memory to execute the intelligent operation and maintenance method of the network security system based on power equipment disclosed in the first aspect of the present invention.

[0089] The fourth aspect of the present invention discloses a computer-storable medium, which stores computer instructions. When the computer instructions are called, they are used to execute the intelligent operation and maintenance method of the network security system based on power equipment disclosed in the first aspect of the present invention.

[0090] Compared with the prior art, the embodiments of the present invention have the following beneficial effects:

[0091] In an embodiment of the present invention, at least one network security detection item under each system detection category is determined according to at least one system detection category of a preset monitoring system; a system detection plan matching the monitoring system is generated according to all network security detection items; each network security detection item is detected according to the system detection plan and the preset item detection rules to obtain the item detection results of all network security detection items; according to the item detection results of all network security detection items, a matching operation and maintenance operation is performed on the monitoring system to obtain the target operation and maintenance results of the monitoring system. It can be seen that the implementation of the present invention can automatically generate a detection plan for the equipment monitoring system, thereby detecting and maintaining the monitoring system, and can also update the detection plan according to the operation and maintenance results, without the need to manually control the relevant network security parameters and information layer by layer to operate and maintain the monitoring system. In this way, it is conducive to forming a closed-loop tracking of the detection plan, thereby ensuring the effectiveness of the generated detection plan and improving the control efficiency of the detection plan, and timely and efficiently operating and maintaining the monitoring system, thereby ensuring that the network security system of the power equipment can respond quickly and accurately when attacked, and ensuring the safe and stable operation of the network security system. BRIEF DESCRIPTION OF THE DRAWINGS

[0092] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0093] Figure 1 This is a flow chart of an intelligent operation and maintenance method for a network security system based on power equipment disclosed in an embodiment of the present invention;

[0094] Figure 2 This is a flow chart of another method for intelligent operation and maintenance of a network security system based on power equipment disclosed in an embodiment of the present invention;

[0095] Figure 3 This is a schematic diagram of the structure of an intelligent operation and maintenance device for a network security system based on power equipment disclosed in an embodiment of the present invention;

[0096] Figure 4 This is a schematic diagram of the structure of another intelligent operation and maintenance device for a network security system based on power equipment disclosed in an embodiment of the present invention;

[0097] Figure 5 This is a structural diagram of another intelligent operation and maintenance device for a network security system based on power equipment disclosed in an embodiment of the present invention. DETAILED DESCRIPTION

[0098] In order to enable those skilled in the art to better understand the solutions of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts shall fall within the scope of protection of the present invention.

[0099] The terms "first," "second," and so on, in the description and claims of the present invention and the accompanying drawings are used to distinguish between different items, not to describe a specific order. Furthermore, the terms "including," "having," and any variations thereof, are intended to cover non-exclusive inclusions. For example, a process, method, apparatus, product, or end comprising a series of steps or elements is not limited to the listed steps or elements but may optionally include steps or elements not listed therein, or may optionally include other steps or elements inherent to such process, method, product, or end.

[0100] References herein to "embodiments" mean that a particular feature, structure, or characteristic described in connection with the embodiments may be included in at least one embodiment of the present invention. The appearance of this phrase in various places in the specification does not necessarily refer to the same embodiment, nor does it constitute a separate or alternative embodiment that is mutually exclusive of other embodiments. It is understood, both explicitly and implicitly, by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0101] The present invention discloses a method and device for intelligent operation and maintenance of a network security system based on power equipment. This method and device can form a closed-loop tracking system for detection plans, thereby ensuring the effectiveness of the generated detection plans and improving the efficiency of their management and control. This allows for timely and efficient operation and maintenance of the monitoring system, ensuring the safe and stable operation of the network security system. These methods are described in detail below.

[0102] Example 1

[0103] See also Figure 1 , Figure 1 This is a flow chart of an intelligent operation and maintenance method for a network security system based on power equipment disclosed in an embodiment of the present invention. Figure 1 The described intelligent operation and maintenance method of the network security system based on electric power equipment can be applied to the network security system operation and maintenance work of electric power equipment, and can also be applied to the network security system operation and maintenance work of water conservancy equipment, and the embodiments of the present invention do not limit this. Further optionally, the method can be implemented by a network operation and maintenance system, wherein the network operation and maintenance system can include a local server or cloud server for managing the network operation and maintenance process; the method can also be implemented by a network operation and maintenance device, and the network operation and maintenance device can be integrated in the network operation and maintenance device, and the embodiments of the present invention do not limit this. Figure 1 As shown, the intelligent operation and maintenance method of the network security system based on power equipment may include the following operations:

[0104] 101. Based on at least one system detection category of a preset monitoring system, determine at least one network security detection item under each system detection category.

[0105] In an embodiment of the present invention, the preset system detection categories of the monitoring system may optionally include identity authentication, access control, audit record, prevention equipment, and trusted verification. Furthermore, each system detection category may optionally include one or more network security detection items, such as the identity authentication category may include multiple identity authentication detection items.

[0106] 102. Based on all network security testing items, generate a system testing plan that matches the monitoring system.

[0107] In an embodiment of the present invention, the monitoring system has corresponding monitoring equipment. Optionally, the monitoring system may include a monitoring system that matches power equipment (such as a transformer) and / or a monitoring system that matches hydraulic equipment (such as a sewage treatment plant). Further, optionally, all network security detection items include at least one of an identity authentication detection item, an access control detection item, an audit record detection item, a security setting detection item, and a trusted verification detection item. Specifically, the identity authentication detection project can be to detect whether the identity of the logged-in user meets the requirements, or to detect whether the settings for restricting illegal logins and automatic logout after login timeout are configured, or to detect whether necessary measures are taken to prevent the authentication information from being eavesdropped during network transmission; the access control detection project can be to detect the settings for assigning accounts and permissions to logged-in users, or to detect the parameter settings for default accounts, or to detect whether the settings for deleting or disabling redundant or expired users are set; the audit record detection project can be to detect audit records of important user behaviors and important events, or to detect the protection and backup parameter settings for audit records; the prevention setting detection project can be to detect the installation operations of components and applications, or to detect the startup or shutdown settings of system services, default shares and high-risk ports, or to detect the prevention settings for vulnerabilities and / or malicious code software; the trusted verification detection project can be to detect the trusted settings of applications that require trusted verification. Furthermore, based on the contents of all the above network security detection projects, a system detection plan that matches the monitoring system is generated.

[0108] 103. According to the system detection plan and the preset project detection rules, each network security detection project is detected to obtain the project detection results of all network security detection projects.

[0109] In an embodiment of the present invention, specifically, each network security detection project has one or more corresponding detection sub-projects (which can be understood as the detection content corresponding to each network security detection project). For example, in the identity authentication detection project, whether the identity identifier of the logged-in user meets the requirements can be to verify whether the logged-in user identity identifier is unique; in the access control detection project, detecting the settings of the account and authority assigned to the logged-in user can be to verify whether the access rights of the anonymous account have been disabled or restricted; in the audit record detection project, detecting the protection and backup parameter settings of the audit record can be to verify whether protective measures have been taken to protect the audit record; in the prevention setting detection project, detecting the prevention settings for vulnerabilities and / or malicious code software can be to verify whether there are high-risk vulnerabilities; in the trusted verification detection project, detecting the trusted settings of the application that requires trusted verification can be to verify whether an alarm is issued when the credibility of the computing device is detected to be damaged, etc. Further optionally, the project detection result of each network security detection project includes compliance with the detection content (i.e., the detection meets the standards) or non-compliance with the detection content (i.e., the detection does not meet the standards). When the project detection result includes non-compliance with the detection content, the project detection result also includes a description of the unsafe situation corresponding to the non-compliance with the detection content, such as the high-risk vulnerability software is not installed. Specifically, the system detection plan, preset project detection rules, and network security detection items can be displayed in the form of a network security ledger.

[0110] 104. Based on the project test results of all network security test projects, perform matching operation and maintenance operations on the monitoring system to obtain the target operation and maintenance results of the monitoring system.

[0111] In an embodiment of the present invention, optionally, the optional implementation method may be to determine whether the project test results of all network security test items meet the test standards before performing the matching operation and maintenance operations on the monitoring system. When the judgment result is yes, there is no need to perform the matching operation and maintenance operations on the monitoring system; when it is determined that the project test result of a certain network security test item does not meet the test standards, the matching operation and maintenance operations can be continued to be performed on the monitoring system based on the project test results of all network security test items. Further optionally, the target operation and maintenance result of the monitoring system can be that the operation and maintenance meets the standards or that the operation and maintenance does not meet the standards.

[0112] It can be seen that the implementation of the embodiment of the present invention can automatically generate a detection plan for the equipment monitoring system, so as to detect and operate the monitoring system without the need for manual layer-by-layer control of relevant network security parameters and information to operate and maintain the monitoring system. This is conducive to ensuring the effectiveness of the generated detection plan and improving the efficiency of the control of the detection plan, and timely and efficient operation and maintenance of the monitoring system, thereby ensuring that the network security system of the power equipment can respond quickly and accurately when attacked, and ensuring the safe and stable operation of the network security system.

[0113] Example 2

[0114] See also Figure 2 , Figure 2 This is a flow chart of an intelligent operation and maintenance method for a network security system based on power equipment disclosed in an embodiment of the present invention. Figure 2 The described intelligent operation and maintenance method of the network security system based on electric power equipment can be applied to the network security system operation and maintenance work of electric power equipment, and can also be applied to the network security system operation and maintenance work of water conservancy equipment, and the embodiments of the present invention do not limit this. Further optionally, the method can be implemented by a network operation and maintenance system, wherein the network operation and maintenance system can include a local server or cloud server for managing the network operation and maintenance process; the method can also be implemented by a network operation and maintenance device, and the network operation and maintenance device can be integrated in the network operation and maintenance device, and the embodiments of the present invention do not limit this. Figure 2 As shown, the intelligent operation and maintenance method of the network security system based on power equipment may include the following operations:

[0115] 201. Determine a target device to be monitored, and based on the target device, determine a monitoring device that matches the target device.

[0116] In an embodiment of the present invention, the monitoring device is used to monitor the operating status of a target device. Optionally, the target device may include primary and / or secondary devices. Furthermore, the primary device may include a transformer, a generator, a circuit breaker, a sewage treatment plant, etc.; the secondary device may include a voltmeter, an ammeter, an electric energy meter, a water pressure meter, etc. For example, the monitoring device corresponding to a transformer may include an online monitoring device for the DC neutral point of the transformer, an online monitoring device for the insulation characteristics of the transformer bushing, etc.; the monitoring device corresponding to a circuit breaker may include an online monitoring device for the mechanical characteristics of the circuit breaker.

[0117] 202. Determine the monitoring system corresponding to the monitoring device according to the device type of the monitoring device.

[0118] In the embodiments of the present invention, specifically, a monitoring device has a corresponding monitoring system. For example, the monitoring system corresponding to the transformer neutral point DC online monitoring device is the transformer neutral point DC online monitoring system, and the monitoring system corresponding to the circuit breaker mechanical characteristics online monitoring device is the circuit breaker mechanical characteristics online monitoring system.

[0119] 203. Determine at least one system detection class that matches the monitoring system according to the configuration type of the monitoring system.

[0120] In an embodiment of the present invention, the configuration type of the monitoring system may optionally include at least one of identity authentication setting configuration, access control setting configuration, audit record setting configuration, prevention setting configuration, and trusted verification setting configuration. Specifically, each monitoring system configuration type may determine one or more system detection classes, such as the identity authentication setting configuration may determine an identity authentication class.

[0121] 204. According to at least one system detection category of a preset monitoring system, determine at least one network security detection item under each system detection category.

[0122] 205. Based on all network security testing items, generate a system testing plan that matches the monitoring system.

[0123] 206. According to the system detection plan and the preset project detection rules, each network security detection project is detected to obtain the project detection results of all network security detection projects.

[0124] 207. Based on the project detection results of all network security detection projects, matching operation and maintenance operations are performed on the monitoring system to obtain the target operation and maintenance results of the monitoring system.

[0125] In the embodiment of the present invention, for other descriptions of steps 204 to 207, please refer to the detailed description of steps 101 to 104 in the first embodiment, which will not be repeated in the embodiment of the present invention.

[0126] It can be seen that the implementation of the embodiment of the present invention can determine the corresponding monitoring equipment and the corresponding monitoring system according to the target equipment to be monitored, and then determine the system detection type and detection items corresponding to the monitoring system in a reasonable and targeted manner, so as to make a system detection plan. This is conducive to improving the reliability and accuracy of the obtained system detection plan, and efficiently detecting the monitoring system. It is also conducive to timely operation and maintenance of the monitoring system based on the detection results to ensure the stable operation of the monitoring system.

[0127] In an optional embodiment, determining the target device to be monitored in step 201 may include:

[0128] Determine whether there is an association relationship between the device and the target information based on the predetermined device type;

[0129] When it is determined that the device and the target information are associated, determining whether the associated relationship is a preset associated relationship;

[0130] When it is determined that the association relationship is a preset association relationship, the device is determined as a target device to be monitored.

[0131] In this optional embodiment, the predetermined device may optionally include a primary device and / or a secondary device. Further optionally, the target information includes at least one of first thermal information, first electrical information, first optical information, first force information, first magnetic information, and first acoustic information. Specifically, the association relationship is a direct association relationship or an indirect association relationship. When the association relationship is a direct association relationship, the device can be understood as a primary device; when the association relationship is an indirect association relationship, the device can be understood as a secondary device.

[0132] It can be seen that this optional embodiment can determine the target device to be monitored in a reasonable and targeted manner, which is conducive to making a reliable and accurate system detection plan for the monitoring system that matches the target device, so that network security problems existing in the monitoring system can be discovered in time and timely operation and maintenance can be carried out to reduce the occurrence of network security incidents.

[0133] In another optional embodiment, determining a monitoring device that matches the target device according to the target device in step 201 may include:

[0134] According to the operating status of the target device, analyze the operating characteristic information corresponding to the operating status;

[0135] According to the operation characteristic information, a monitoring device that matches the operation characteristic information is determined as the monitoring device that matches the target device.

[0136] In this optional embodiment, the operating characteristic information includes at least one of second thermal information, second optical information, second electrical information, second force information, second acoustic information, and second magnetic information generated in response to the operating conditions of the target device. For example, during operation, a transformer may generate operating characteristics related to heat, electricity, and magnetism, such as temperature rise, changes in current and voltage, and so on. Specifically, a monitoring device that matches the operating characteristic information indicates that the monitoring device is capable of monitoring the operating characteristic information. For example, for transformer temperature changes, an online monitoring device using fiber optic temperature measurement of the transformer windings may be used.

[0137] It can be seen that this optional embodiment can combine the operating characteristics of the target device to determine the monitoring device that matches the target device. In this way, through the efficient use of relevant device information, it is beneficial to ensure the reliability and accuracy of the determined monitoring device, and it is also beneficial to enrich the intelligent determination method of the monitoring device.

[0138] In another optional embodiment, generating a system detection plan that matches the monitoring system based on all network security detection items in step 205 may include:

[0139] Determine the first item weight corresponding to each network security detection item based on all network security detection items;

[0140] Determine the detection level of the monitoring system based on the weights of all first items;

[0141] Determining a unit level of each detection unit based on a plurality of predetermined detection units;

[0142] Filter out all testing units whose unit level is greater than or equal to the testing level from all testing units as all pending testing units;

[0143] Determine the detection matching degree between each pending detection unit and the monitoring system based on the detection range corresponding to each pending detection unit;

[0144] Filter out all pending detection units whose detection matching degree is greater than or equal to a preset matching degree threshold from all pending detection units as all target detection units;

[0145] Based on the detection ranges corresponding to all target detection units, a system detection plan that matches the monitoring system is generated.

[0146] In this optional embodiment, the greater the weight of the first item, the greater the difficulty of detecting the network security detection item. Specifically, the difficulty of detection can be determined according to the difficulty of the detection method, the length of time required for detection, the level of the required detection personnel, etc. Optionally, the detection range corresponding to each of the pending detection units can be determined in the following ways: according to the detection personnel corresponding to each of the pending detection units, the detection specialty of each detection personnel is determined; according to the detection specialty of each detection personnel and the work content corresponding to each of the pending detection units (such as working hours, work arrangements), the detection range corresponding to each of the pending detection units is determined.

[0147] It can be seen that this optional embodiment can automatically generate a system detection plan. Compared with the traditional manual control method, it can not only save manpower and material resources and quickly generate the required system detection plan, but also effectively improve the reliability and accuracy of the generated system detection plan, thereby facilitating the effective detection and operation and maintenance of the monitoring system.

[0148] In another optional embodiment, the above step 207, based on the project detection results of all network security detection projects, performing matching operation and maintenance operations on the monitoring system to obtain target operation and maintenance results of the monitoring system, may include:

[0149] Analyze the project test results of all network security test items to obtain the test analysis results of all network security test items;

[0150] Determine the second item weight corresponding to each network security detection item;

[0151] Determine the target detection results of the monitoring system based on the detection and analysis results of all network security detection items and the weights of all second items;

[0152] Determine whether the target detection result of the monitoring system indicates that an operation and maintenance operation needs to be performed on the monitoring system;

[0153] When the judgment result is yes, all network security detection items corresponding to the detection and analysis results indicating that the detection does not meet the standards are screened out from the detection and analysis results of all network security detection items, and are used as all first operation and maintenance items required for operation and maintenance of the monitoring system;

[0154] Performing a matching operation and maintenance operation on each first operation and maintenance project to obtain operation and maintenance status corresponding to all first operation and maintenance projects;

[0155] Analyze the operation and maintenance situation corresponding to each first operation and maintenance project, and obtain the operation and maintenance results corresponding to all first operation and maintenance projects;

[0156] According to the operation and maintenance results corresponding to all the first operation and maintenance items, the target operation and maintenance results of the monitoring system are determined.

[0157] In this optional embodiment, the greater the weight of the second item, the greater the impact of the network security detection item on the operation of the monitoring system. Optionally, the target detection result of the monitoring system includes the security level of the monitoring system and / or the detection score of the monitoring system. Specifically, the security level of the monitoring system can be divided into first, second, third, etc. from high to low based on the safety factor; the detection score of the monitoring system can be displayed in the form of a percentage system. Further optionally, the operation and maintenance situation corresponding to each first operation and maintenance item includes the operation and maintenance completion degree and / or the operation and maintenance quality corresponding to each first operation and maintenance item. Specifically, the operation and maintenance completion degree can be displayed in the form of a percentage (such as 80%); the operation and maintenance quality can be displayed as good, good, general, qualified, unqualified, etc.

[0158] Furthermore, in this optional embodiment, the detection score of the monitoring system is calculated using the following formula:

[0159]

[0160] q is the number of system detection categories of the monitoring system, p(j) is the number of network security detection items of a certain system detection category, m(k) is the number of detection sub-items of a certain network security detection item, n(l) is the number of detection sub-items of a certain pending operation and maintenance item, M is the second item weight corresponding to the pending operation and maintenance item, and N is the second item weight corresponding to the network security detection item. Among them, all pending operation and maintenance items can be understood as all network security detection items corresponding to the detection analysis results screened out from the detection analysis results of all network security detection items, which indicate that the detection does not meet the standards.

[0161] Furthermore, this optional implementation may also include:

[0162] When it is determined that the target detection result of the monitoring system indicates that no operation and maintenance operations need to be performed on the monitoring system, the system detection plan can be deleted from the predetermined plan list to update the plan list; or, no subsequent operations are performed.

[0163] It can be seen that this optional embodiment can eliminate the need for manual analysis of the detection items. This intelligent detection item analysis method is conducive to quickly analyzing the detection item analysis results and determining the operation and maintenance requirements of the monitoring system based on the detection item analysis results. In this way, the monitoring system can be operated and maintained when there is a need for operation and maintenance, which can improve the effectiveness of the operation and maintenance of the monitoring system.

[0164] In another optional embodiment, determining the target operation and maintenance result of the monitoring system according to the operation and maintenance results corresponding to all first operation and maintenance items in step 207 may include:

[0165] Filter out all first operation and maintenance projects whose operation and maintenance results indicate that the operation and maintenance have met the standards, and use them as all first operation and maintenance standard-compliant projects;

[0166] Determine the third item weight corresponding to each operation and maintenance standard-compliant item;

[0167] According to the third item weights corresponding to all operation and maintenance standard items, the target operation and maintenance situation corresponding to the monitoring system is analyzed, and the analysis results of the target operation and maintenance situation are obtained as the target operation and maintenance results corresponding to the monitoring system.

[0168] In this optional embodiment, the greater the weight of the third item, the greater the degree of influence of the operation and maintenance compliance item on the operation of the monitoring system. Optionally, in this optional embodiment, determining the target operation and maintenance result of the monitoring system based on the operation and maintenance results corresponding to all first operation and maintenance items may include: screening out all third operation and maintenance items corresponding to the operation and maintenance results indicating that the operation and maintenance does not meet the standards from all first operation and maintenance items; determining the weight of the fourth item corresponding to each third operation and maintenance item; analyzing the target operation and maintenance situation corresponding to the monitoring system based on the weight of the fourth item corresponding to all third operation and maintenance items, and obtaining the analysis result of the target operation and maintenance situation as the target operation and maintenance result corresponding to the monitoring system, wherein the greater the weight of the fourth item, the greater the degree of influence of the operation and maintenance compliance item on the operation of the monitoring system.

[0169] Further optionally, in this optional embodiment, after selecting all first operation and maintenance projects corresponding to operation and maintenance results indicating that the operation and maintenance have met the standards from all first operation and maintenance projects as all operation and maintenance standard-meeting projects, the method may further include:

[0170] Calculate the number of projects corresponding to all operation and maintenance standard projects, and analyze the target operation and maintenance situation corresponding to the monitoring system based on the number of projects, and obtain the analysis results of the target operation and maintenance situation as the target operation and maintenance results corresponding to the monitoring system.

[0171] It can be seen that this optional embodiment can effectively utilize the obtained operation and maintenance project information to analyze the operation and maintenance results of the inspection projects that require operation and maintenance, thereby improving the analysis reliability and accuracy of the operation and maintenance results, which is conducive to the subsequent reliable closed-loop tracking of the inspection plan.

[0172] In yet another optional embodiment, the method may further include:

[0173] Determine whether the target operation and maintenance results indicate that the operation and maintenance standards have been met;

[0174] When it is determined that the target operation and maintenance result indicates that the operation and maintenance has met the standard, the system inspection plan is deleted from the pre-determined plan list to update the plan list;

[0175] When it is determined that the target operation and maintenance result indicates that the operation and maintenance does not meet the standard, all first operation and maintenance projects corresponding to the operation and maintenance results indicating that the operation and maintenance does not meet the standard are screened out from all first operation and maintenance projects as all second operation and maintenance projects;

[0176] According to all the second operation and maintenance projects, the system detection plan is updated to obtain the updated system detection plan, and each network security detection project is re-executed according to the system detection plan and the preset project detection rules to obtain the project detection results of all network security detection projects.

[0177] In this optional embodiment, the system detection plan is an updated system detection plan, and all network security detection items are all second operation and maintenance items. Optionally, in this optional embodiment, the method may further include: for all the determined operation and maintenance standard items, no further operation and maintenance is required. Specifically, the second operation and maintenance items may or may not have an emergency operation and maintenance plan, and the emergency operation and maintenance plan is uploaded by the corresponding business personnel. Further optionally, in this optional embodiment, updating the system detection plan based on all the second operation and maintenance items to obtain an updated system detection plan may include: determining all the second operation and maintenance items for which corresponding emergency operation and maintenance plans exist from all the second operation and maintenance items; updating the system detection plan based on all the second operation and maintenance items for which corresponding emergency operation and maintenance plans exist and all the second operation and maintenance items for which no corresponding emergency operation and maintenance plans exist, to obtain an updated system detection plan.

[0178] It can be seen that this optional embodiment can form a closed-loop control of the detection plan and the project operation and maintenance plan, thereby ensuring the effectiveness of the generated detection plan and improving the control efficiency of the detection plan, and timely and efficiently operating and maintaining the monitoring system, thereby ensuring that the network security system of the power equipment can respond quickly and accurately when attacked, and ensuring the safe and stable operation of the network security system.

[0179] Example 3

[0180] See also Figure 3 , Figure 3 This is a schematic diagram of the structure of an intelligent operation and maintenance device for a network security system based on power equipment disclosed in an embodiment of the present invention. Figure 3 As shown, the intelligent operation and maintenance device of the network security system based on power equipment may include:

[0181] The determination module 301 is configured to determine, based on at least one system detection class of a preset monitoring system, at least one network security detection item under each system detection class;

[0182] A generation module 302 is used to generate a system detection plan that matches the monitoring system based on all network security detection items;

[0183] The detection module 303 is used to detect each network security detection item according to the system detection plan and preset item detection rules, and obtain the item detection results of all network security detection items;

[0184] The operation and maintenance module 304 is used to perform matching operation and maintenance operations on the monitoring system according to the project detection results of all network security detection projects, and obtain target operation and maintenance results of the monitoring system.

[0185] In an embodiment of the present invention, the monitoring system has corresponding monitoring equipment, and all network security detection items include at least one of identity authentication detection items, access control detection items, audit record detection items, prevention setting detection items and trusted verification detection items.

[0186] It can be seen that implementation Figure 3 The described intelligent operation and maintenance device for the network security system based on power equipment can automatically generate a detection plan for the equipment monitoring system, thereby detecting and operating the monitoring system without the need for manual layer-by-layer control of relevant network security parameters and information to operate and maintain the monitoring system. This is conducive to ensuring the effectiveness of the generated detection plan and improving the efficiency of the control of the detection plan, and timely and efficient operation and maintenance of the monitoring system, thereby ensuring that the network security system of the power equipment can respond quickly and accurately when attacked, and ensuring the safe and stable operation of the network security system.

[0187] In an optional embodiment, the determination module 301 is also used to determine the target device to be monitored before determining at least one network security detection item under each system detection class based on at least one system detection class of a preset monitoring system, and determine the monitoring device that matches the target device based on the target device; determine the monitoring system corresponding to the monitoring device based on the device type of the monitoring device; and determine at least one system detection class that matches the monitoring system based on the configuration type of the monitoring system.

[0188] In this optional embodiment, the monitoring device is used to monitor the operation status of the target device.

[0189] It can be seen that implementation Figure 4 The described intelligent operation and maintenance device for the network security system based on power equipment can determine the corresponding monitoring equipment and the corresponding monitoring system according to the target equipment to be monitored, and then determine the system detection type and detection items corresponding to the monitoring system in a reasonable and targeted manner, so as to make a system detection plan. This is conducive to improving the reliability and accuracy of the obtained system detection plan, efficiently detecting the monitoring system, and timely operating and maintaining the monitoring system based on the detection results to ensure the stable operation of the monitoring system.

[0190] In another optional embodiment, the determination module 301 determines the target device to be monitored in the following manner:

[0191] Determine whether there is an association relationship between the device and the target information based on the predetermined device type;

[0192] When it is determined that the device and the target information are associated, determining whether the associated relationship is a preset associated relationship;

[0193] When it is determined that the association relationship is a preset association relationship, the device is determined as a target device to be monitored;

[0194] In this optional embodiment, the target information includes at least one of first thermal information, first electrical information, first optical information, first force information, first magnetic information and first acoustic information, and the association relationship is a direct association relationship or an indirect association relationship.

[0195] It can be seen that implementation Figure 4 The described intelligent operation and maintenance device for the network security system based on power equipment can determine the target equipment that needs to be monitored in a reasonable and targeted manner, which is conducive to making a reliable and accurate system detection plan for the monitoring system matching the target equipment. In this way, network security problems in the monitoring system can be discovered in time and timely operation and maintenance can be carried out to reduce the occurrence of network security incidents.

[0196] In another optional embodiment, the determination module 301 determines the monitoring device that matches the target device according to the target device in the following manner:

[0197] According to the operating status of the target device, analyze the operating characteristic information corresponding to the operating status;

[0198] According to the operation characteristic information, a monitoring device that matches the operation characteristic information is determined as the monitoring device that matches the target device.

[0199] In this optional embodiment, the operating characteristic information includes at least one of second thermal information, second optical information, second electrical information, second force information, second acoustic information and second magnetic information generated in response to the operating conditions of the target device; a monitoring device that matches the operating characteristic information indicates that the monitoring device is capable of monitoring the operating characteristic information.

[0200] It can be seen that implementation Figure 4 The described intelligent operation and maintenance device for the network security system based on power equipment can determine the monitoring equipment that matches the target equipment based on the operating characteristics of the target equipment. In this way, through the efficient use of relevant equipment information, it is beneficial to ensure the reliability and accuracy of the determined monitoring equipment, and it is also beneficial to enrich the intelligent determination method of the monitoring equipment.

[0201] In another optional embodiment, the generation module 302 generates a system detection plan that matches the monitoring system based on all network security detection items in the following manner:

[0202] Determine the first item weight corresponding to each network security detection item based on all network security detection items;

[0203] Determine the detection level of the monitoring system based on the weights of all first items;

[0204] determine a unit level of each detection unit based on the plurality of detection units determined in advance;

[0205] select all detection units with a unit level greater than or equal to the detection level from all detection units as all pending detection units;

[0206] determine a detection matching degree between each pending detection unit and the monitoring system according to a detection range corresponding to each pending detection unit;

[0207] select all pending detection units with a detection matching degree greater than or equal to a preset matching degree threshold from all pending detection units as all target detection units;

[0208] generate a system detection plan matched with the monitoring system according to detection ranges corresponding to all target detection units.

[0209] In this optional embodiment, the greater the first item weight is, the greater the detection difficulty of the network security detection item is.

[0210] It can be seen that the implementation Figure 4 The network security system intelligent operation and maintenance device based on power equipment described above can automatically generate a system detection plan. Compared with the traditional manual control method, it not only saves manpower and material resources and quickly generates the required system detection plan, but also effectively improves the reliability and accuracy of the generated system detection plan, thereby facilitating effective detection and maintenance of the monitoring system.

[0211] In yet another optional embodiment, the operation and maintenance module 304 includes:

[0212] The analysis submodule 3041 is configured to analyze the item detection results of all network security detection items to obtain detection analysis results of all network security detection items.

[0213] The determination submodule 3042 is configured to determine a second item weight corresponding to each network security detection item, and determine a target detection result of the monitoring system according to the detection analysis results of all network security detection items and all second item weights.

[0214] The judgment submodule 3043 is configured to judge whether the target detection result of the monitoring system indicates that an operation and maintenance operation needs to be performed on the monitoring system.

[0215] The screening submodule 3044 is configured to, when the judgment submodule 3043 judges that the result is yes, select all network security detection items corresponding to detection analysis results indicating that the detection is not up to standard from the detection analysis results of all network security detection items as all first operation and maintenance items required for operation and maintenance of the monitoring system.

[0216] The operation and maintenance submodule 3045 is configured to perform a matching operation and maintenance operation on each first operation and maintenance item, and obtain operation and maintenance status corresponding to all first operation and maintenance items;

[0217] The analysis submodule 3041 is further configured to analyze the operation and maintenance status corresponding to each first operation and maintenance project, and obtain operation and maintenance results corresponding to all first operation and maintenance projects;

[0218] The determination submodule 3042 is further configured to determine a target operation and maintenance result of the monitoring system according to the operation and maintenance results corresponding to all first operation and maintenance items.

[0219] In this optional embodiment, the greater the weight of the second item, the greater the impact of the network security detection item on the operation of the monitoring system; the target detection result of the monitoring system includes the security level of the monitoring system and / or the detection score of the monitoring system; the operation and maintenance status corresponding to each first operation and maintenance item includes the operation and maintenance completion degree and / or the operation and maintenance quality corresponding to each first operation and maintenance item.

[0220] It can be seen that implementation Figure 4 The described intelligent operation and maintenance device for the network security system based on power equipment can analyze the detection items without manual work. This intelligent detection item analysis method is conducive to quickly analyzing the detection item analysis results and determining the operation and maintenance requirements of the monitoring system based on the detection item analysis results. In this way, the monitoring system can be operated and maintained when there is an operation and maintenance need, which can improve the effectiveness of the monitoring system operation and maintenance.

[0221] In another optional embodiment, the determination submodule 3042 determines the target operation and maintenance result of the monitoring system according to the operation and maintenance results corresponding to all the first operation and maintenance items in the following manner:

[0222] Filter out all first operation and maintenance projects whose operation and maintenance results indicate that the operation and maintenance have met the standards, and use them as all first operation and maintenance standard-compliant projects;

[0223] Determine the third item weight corresponding to each operation and maintenance standard-compliant item;

[0224] According to the third item weights corresponding to all operation and maintenance standard items, the target operation and maintenance situation corresponding to the monitoring system is analyzed, and the analysis results of the target operation and maintenance situation are obtained as the target operation and maintenance results corresponding to the monitoring system.

[0225] In this optional embodiment, a greater weight of the third item indicates a greater impact of the operation and maintenance compliance item on the operation of the monitoring system.

[0226] It can be seen that implementation Figure 4The described intelligent operation and maintenance device for a network security system based on power equipment can effectively utilize the obtained operation and maintenance project information to analyze the operation and maintenance results of the inspection items required for operation and maintenance, thereby improving the analysis reliability and accuracy of the operation and maintenance results, which is conducive to the subsequent reliable closed-loop tracking of the inspection plan.

[0227] In yet another optional embodiment, the device may further include:

[0228] The judgment module 305 is used to judge whether the target operation and maintenance result indicates that the operation and maintenance meets the standard;

[0229] An updating module 306 is configured to delete the system inspection plan from the predetermined plan list to update the plan list when the judging module 305 judges that the target operation and maintenance result indicates that the operation and maintenance has met the standard;

[0230] A screening module 307 is configured to, when the judging module 305 judges that the target operation and maintenance result indicates that the operation and maintenance does not meet the standard, screen out all first operation and maintenance items corresponding to the operation and maintenance results indicating that the operation and maintenance does not meet the standard from all first operation and maintenance items as all second operation and maintenance items;

[0231] The update module 306 is also used to update the system detection plan according to all the second operation and maintenance projects, obtain the updated system detection plan, and trigger the detection module 303 to re-execute the operation of detecting each network security detection project according to the system detection plan and the preset project detection rules to obtain the project detection results of all network security detection projects.

[0232] In this optional embodiment, the system detection plan is an updated system detection plan, and all network security detection items are all second operation and maintenance items.

[0233] It can be seen that implementation Figure 4 The described intelligent operation and maintenance device for the network security system based on power equipment can form a closed-loop control of the detection plan and the project operation and maintenance plan, thereby ensuring the effectiveness of the generated detection plan and improving the control efficiency of the detection plan, and timely and efficiently operating and maintaining the monitoring system, thereby ensuring that the network security system of the power equipment can respond quickly and accurately when attacked, ensuring the safe and stable operation of the network security system.

[0234] Example 4

[0235] See also Figure 5 , Figure 5 This is a structural diagram of another intelligent operation and maintenance device for a network security system based on power equipment disclosed in an embodiment of the present invention. Figure 5 As shown, the intelligent operation and maintenance device of the network security system based on power equipment may include:

[0236] The memory 401 stores executable program codes;

[0237] The processor 402 is coupled with the memory 401;

[0238] The processor 402 invokes the executable program codes stored in the memory 401 to perform the steps in the intelligent operation and maintenance method of the network security system based on power equipment according to the embodiment one or the embodiment two.

[0239] Embodiment five

[0240] The embodiment of the present application discloses a computer storage medium, which stores computer instructions, and the computer instructions are used to perform the steps in the intelligent operation and maintenance method of the network security system based on power equipment according to the embodiment one or the embodiment two when being invoked.

[0241] Embodiment six

[0242] The embodiment of the present application discloses a computer program product, which comprises a non-transitory computer readable storage medium storing a computer program, and the computer program is operable to cause a computer to perform the steps in the intelligent operation and maintenance method of the network security system based on power equipment according to the embodiment one or the embodiment two.

[0243] The above-described apparatus embodiments are only schematic, and the modules illustrated as separate components can or can not be physically separate, and the components illustrated as modules can or can not be physical modules, i.e., can be located in one place, or can be distributed on multiple network modules. Part or all of the modules can be selected according to actual needs to achieve the purpose of the present embodiment scheme. Those skilled in the art can understand and implement without creative labor.

[0244] Through the detailed description of the above embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus the necessary general hardware platform, or of course, by means of hardware. Based on this understanding, the above technical solution, in essence, or the portion that contributes to the prior art, can be embodied in the form of a software product, which can be stored in a computer-readable storage medium, including a read-only memory (ROM), a random access memory (RAM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), a one-time programmable read-only memory (OTPROM), an electronically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, magnetic disk storage, magnetic tape storage, or any other computer-readable medium capable of carrying or storing data.

[0245] Finally, it should be noted that the intelligent operation and maintenance method and device for a network security system based on power equipment disclosed in the embodiment of the present invention only discloses a preferred embodiment of the present invention, which is only used to illustrate the technical solution of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments can still be modified, or some of the technical features therein can be replaced by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims

1. An intelligent operation and maintenance method for a network security system based on power equipment, characterized in that: The method comprises: According to at least one system detection category of a preset monitoring system, determining at least one network security detection item under each system detection category; Generate a system detection plan that matches the monitoring system based on all the network security detection items; the monitoring system has corresponding monitoring equipment, and all the network security detection items include at least one of identity authentication detection items, access control detection items, audit record detection items, prevention setting detection items, and trusted verification detection items; According to the system detection plan and the preset project detection rules, each of the network security detection items is detected to obtain the project detection results of all the network security detection items; According to the project detection results of all the network security detection projects, performing matching operation and maintenance operations on the monitoring system to obtain target operation and maintenance results of the monitoring system; The step of generating a system detection plan that matches the monitoring system based on all the network security detection items includes: Determine, based on all the network security detection items, a first item weight corresponding to each of the network security detection items; a greater first item weight indicates a greater detection difficulty of the network security detection item; determining a detection level of the monitoring system according to all weights of the first items; Determining a unit level of each of the detection units based on a plurality of predetermined detection units; Filter out all the testing units whose unit level is greater than or equal to the testing level from all the testing units as all the pending testing units; Determining a detection matching degree between each of the pending detection units and the monitoring system according to a detection range corresponding to each of the pending detection units; Filter out all the pending detection units whose detection matching degree is greater than or equal to a preset matching degree threshold from all the pending detection units as all target detection units; A system detection plan matching the monitoring system is generated based on the detection ranges corresponding to all the target detection units.

2. The intelligent operation and maintenance method of a network security system based on power equipment according to claim 1 is characterized in that: Before determining at least one network security detection item under each of the at least one system detection categories of the preset monitoring system, the method further includes: Determine a target device to be monitored, and determine a monitoring device that matches the target device based on the target device; the monitoring device is used to monitor the operation of the target device; Determining a monitoring system corresponding to the monitoring device according to the device type of the monitoring device; At least one system detection class matching the monitoring system is determined according to the configuration type of the monitoring system.

3. The intelligent operation and maintenance method for a network security system based on power equipment according to claim 2 is characterized in that: Determining the target device to be monitored includes: Determining, based on a predetermined device type, whether there is an association relationship between the device and target information; the target information includes at least one of first thermal information, first electrical information, first optical information, first force information, first magnetic information, and first acoustic information; and the association relationship is a direct association relationship or an indirect association relationship; When it is determined that the device has the association relationship with the target information, determining whether the association relationship is a preset association relationship; When it is determined that the association relationship is the preset association relationship, determining the device as a target device to be monitored; And, determining a monitoring device that matches the target device according to the target device includes: analyzing, according to the operating condition of the target device, operating characteristic information corresponding to the operating condition; the operating characteristic information comprising at least one of second thermal information, second optical information, second electrical information, second force information, second acoustic information, and second magnetic information generated in response to the operating condition of the target device; According to the operation characteristic information, a monitoring device matching the operation characteristic information is determined as the monitoring device matching the target device; the monitoring device matching the operation characteristic information indicates that the monitoring device can monitor the operation characteristic information.

4. The intelligent operation and maintenance method for a network security system based on power equipment according to any one of claims 1 to 3, characterized in that: The performing of matching operation and maintenance operations on the monitoring system according to the project detection results of all the network security detection projects to obtain target operation and maintenance results of the monitoring system includes: Analyze the test results of all network security test items to obtain the test analysis results of all network security test items; Determine a second item weight corresponding to each of the network security detection items; a larger second item weight indicates a greater impact of the network security detection item on the operation of the monitoring system; Determining a target detection result of the monitoring system based on the detection and analysis results of all the network security detection items and the weights of all the second items; the target detection result of the monitoring system includes the security level of the monitoring system and / or the detection score of the monitoring system; Determining whether the target detection result of the monitoring system indicates that an operation and maintenance operation needs to be performed on the monitoring system; When the judgment result is yes, all network security detection items corresponding to the detection and analysis results indicating that the detection does not meet the standards are screened out from the detection and analysis results of all the network security detection items, as all first operation and maintenance items required for operation and maintenance of the monitoring system; Performing a matching operation and maintenance operation on each of the first operation and maintenance items to obtain operation and maintenance status corresponding to all of the first operation and maintenance items; the operation and maintenance status corresponding to each of the first operation and maintenance items includes an operation and maintenance completion degree and / or an operation and maintenance quality status corresponding to each of the first operation and maintenance items; Analyze the operation and maintenance situation corresponding to each of the first operation and maintenance items to obtain operation and maintenance results corresponding to all of the first operation and maintenance items; Determine a target operation and maintenance result of the monitoring system according to the operation and maintenance results corresponding to all the first operation and maintenance items.

5. The intelligent operation and maintenance method of a network security system based on power equipment according to claim 4 is characterized in that: Determining a target operation and maintenance result of the monitoring system according to the operation and maintenance results corresponding to all the first operation and maintenance items includes: Filtering all first operation and maintenance projects corresponding to the operation and maintenance results indicating that the operation and maintenance have met the standards from all the first operation and maintenance projects, as all the operation and maintenance standard-meeting projects; Determine a third item weight corresponding to each of the operation and maintenance standard-compliant items; a larger third item weight indicates a greater degree of impact of the operation and maintenance standard-compliant item on the operation of the monitoring system; According to the third item weights corresponding to all the operation and maintenance standard-compliant items, the target operation and maintenance situation corresponding to the monitoring system is analyzed, and an analysis result of the target operation and maintenance situation is obtained as the target operation and maintenance result corresponding to the monitoring system.

6. The intelligent operation and maintenance method for a network security system based on power equipment according to claim 5 is characterized in that: The method further comprises: Determining whether the target operation and maintenance result indicates that the operation and maintenance meets the standards; When it is determined that the target operation and maintenance result indicates that the operation and maintenance has met the standard, the system inspection plan is deleted from the predetermined plan list to update the plan list; When it is determined that the target operation and maintenance result indicates that the operation and maintenance does not meet the standard, all first operation and maintenance items corresponding to the operation and maintenance result indicating that the operation and maintenance does not meet the standard are screened out from all the first operation and maintenance items as all second operation and maintenance items; According to all the second operation and maintenance items, the system detection plan is updated to obtain the updated system detection plan, and the operation of re-executing the operation according to the system detection plan and the preset project detection rules to detect each of the network security detection items and obtain the project detection results of all the network security detection items; the system detection plan is the updated system detection plan, and all the network security detection items are all the second operation and maintenance items.

7. An intelligent operation and maintenance device for a network security system based on power equipment, characterized in that: The device is used to execute the intelligent operation and maintenance method of a network security system based on power equipment according to any one of claims 1 to 6, and the device includes: a determination module, configured to determine, based on at least one system detection class of a preset monitoring system, at least one network security detection item under each of the system detection classes; A generation module for generating a system detection plan that matches the monitoring system based on all the network security detection items; the monitoring system has corresponding monitoring equipment, and all the network security detection items include at least one of an identity authentication detection item, an access control detection item, an audit record detection item, a prevention setting detection item, and a trusted verification detection item; A detection module, configured to detect each of the network security detection items according to the system detection plan and preset item detection rules, and obtain item detection results of all the network security detection items; The operation and maintenance module is used to perform matching operation and maintenance operations on the monitoring system according to the project detection results of all the network security detection projects, and obtain the target operation and maintenance results of the monitoring system.

8. An intelligent operation and maintenance device for a network security system based on power equipment, characterized in that: The device comprises: a memory storing executable program code; a processor coupled to the memory; The processor calls the executable program code stored in the memory to execute the intelligent operation and maintenance method of the network security system based on power equipment according to any one of claims 1 to 6.

9. A computer storage medium, characterized in that The computer storage medium stores computer instructions, which, when called, are used to execute the intelligent operation and maintenance method for a network security system based on power equipment according to any one of claims 1 to 6.

Images