Mesh management and control system based on information security monitoring

Abstract

The invention relates to the technical field of information security monitoring, and discloses a grid management and control system based on information security monitoring. Comprising a grid region division module, a data acquisition module, a data preprocessing module, an abnormal data analysis module, an information vulnerability analysis module, a grid weight analysis module, a safety coefficient calculation module, a safety coefficient evaluation module, a safety early warning module and a man-machine interaction module. The method is advantaged in that the grid weight index can be conveniently calculated, the data packet weight index is calculated based on the grid weight index, the abnormal data analysis module, the information vulnerability analysis module and the grid weight analysis module are utilized to monitor information security in three aspects of abnormal data, information vulnerability and grid weight of each sub-region, and the security of the data packet is improved. The accuracy, the fineness and the standardization degree of management and control are improved, and the accuracy of information security monitoring is further improved by analyzing the influence degree of a plurality of grid units on the overall information security.

Description

Technical Field

[0001] The present invention relates to the technical field of information security monitoring, and more specifically to a grid management and control system based on information security monitoring. Background Art

[0002] Grid control is grid management, which divides the target area into several grid units and controls each grid unit to achieve refined, accurate and standardized control. The importance of information security in the Internet era has become increasingly prominent.

[0003] Therefore, a grid management and control system based on information security monitoring is needed. After the monitoring area is divided into grids, information security monitoring is carried out to improve the accuracy, precision and standardization of management and control. The existing grid management and control system based on information security monitoring does not analyze the grid division situation, and cannot determine the impact of several grid units on the overall information security, and thus cannot improve the accuracy of information security monitoring. Summary of the invention

[0004] In order to overcome the above-mentioned defects of the prior art, the present invention provides a grid management and control system based on information security monitoring to solve the problems existing in the above-mentioned background technology.

[0005] The present invention provides the following technical solutions: a grid management and control system based on information security monitoring, comprising a grid area division module, a data acquisition module, a data preprocessing module, an abnormal data analysis module, an information vulnerability analysis module, a grid weight analysis module, a safety factor calculation module, a safety factor evaluation module, a safety warning module and a human-computer interaction module; The grid area division module is used to perform grid division on the target area into n sub-areas, which are marked as 1, 2, 3...i...n in sequence; The data acquisition module is used to collect target data for each sub-area, and the data acquisition module collects the data and transmits it to the data preprocessing module; The abnormal data analysis module is used to receive the data preprocessed by the data preprocessing module, analyze and calculate the abnormal data situation based on cluster analysis, obtain the data abnormality missed reporting rate, and transmit it to the safety factor calculation module; The information vulnerability analysis module is used to receive the data after data preprocessing, analyze and calculate the information vulnerability rate, and transmit it to the safety factor calculation module; The grid weight analysis module calculates the grid weight index, calculates the data packet weight index based on the grid weight index, and transmits it to the safety factor calculation module; The safety factor calculation module includes a single safety factor calculation unit and an overall safety factor calculation unit. The single safety factor calculation module calculates the single safety factor of each sub-area and transmits it to the overall safety factor calculation unit. The overall safety factor calculation unit calculates the overall safety factor of the target area and transmits it to the safety factor evaluation module for safety evaluation. The safety assessment module includes a single safety factor assessment unit and an overall safety factor assessment unit. The single safety factor assessment unit is used to perform safety assessment on the single safety factor of the single safety factor calculation unit. The overall safety factor assessment unit is used to perform safety assessment on the overall safety factor of the overall safety factor calculation unit, and transmit the assessment results to the safety factor early warning module and the human-computer interaction module. The safety factor early warning module makes corresponding early warning notifications according to the evaluation results of the safety evaluation module, and transmits them to the human-computer interaction module for human-computer interaction display.

[0006] Preferably, the calculation formula for the data anomaly omission rate is: , where L i represents the data anomaly omission rate of the i-th sub-region, V i1 is the cluster coverage after cluster analysis of the data in the ith sub-region, c i represents the number of abnormal data detections for the ith sub-region, C represents the total number of abnormal data detections for the ith sub-region, and q i is the total number of locations with data anomalies in the ith sub-region, d i is the distance between any two cluster points in the ith sub-region, V i2 The overlapping range of clusters after cluster analysis of the data for the i-th sub-region.

[0007] Preferably, the calculation formula of the information leakage rate is: , where D i is the information leakage rate of the ith sub-region, a i is the number of information vulnerabilities in the i-th sub-region, A i is the network coverage scale of the ith sub-area.

[0008] Preferably, the calculation formula of the data packet weight index is: , where K i is the weight index of the data packet in the ith sub-area, k i is the grid weight index of the ith sub-region, where the calculation formula of the grid weight index is: , where s i is the data packet capacity of the ith sub-area.

[0009] Preferably, the calculation formula of the monomer safety factor is: , where δ i is the single body safety factor of the ith sub-region.

[0010] Preferably, the calculation formula of the overall safety factor is: , where γ is the overall safety factor.

[0011] Preferably, after receiving the first-level warning notification, the safety factor warning module sends a warning display to the human-computer interaction module, and the display content is "first-level warning", indicating that the safety factor of a certain sub-area does not meet the standard. After receiving the second-level warning notification, the safety factor warning module sends a warning display to the human-computer interaction module, and the display content is "second-level warning", indicating that the overall safety factor does not meet the standard.

[0012] Technical effects and advantages of the present invention: The present invention is provided with a grid weight analysis module, which is conducive to calculating the grid weight index, and calculating the data packet weight index based on the grid weight index. Through the abnormal data analysis module, the information vulnerability analysis module and the grid weight analysis module, the information security is monitored from three angles of abnormal data, information vulnerability and grid weight of each sub-area, thereby improving the accuracy, precision and standardization of management and control. By analyzing the impact of several grid units on the overall information security, the accuracy of information security monitoring is further improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] Figure 1 This is a flow chart of the grid management and control system based on information security monitoring of the present invention. DETAILED DESCRIPTION

[0014] The technical solution of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the present invention. In addition, the forms of the various structures recorded in the following implementation modes are merely illustrative. The grid management and control system based on information security monitoring involved in the present invention is not limited to the various structures recorded in the following implementation modes. All other implementation modes obtained by ordinary technicians in this field without making creative work belong to the scope of protection of the present invention.

[0015] The present invention provides a grid management and control system based on information security monitoring, including a grid area division module, a data acquisition module, a data preprocessing module, an abnormal data analysis module, an information vulnerability analysis module, a grid weight analysis module, a safety factor calculation module, a safety factor evaluation module, a safety warning module and a human-computer interaction module; The grid area division module transmits data to the data acquisition module and the grid weight analysis module after dividing the area. The data acquisition module transmits the data to the data preprocessing module after collecting the data. The data preprocessing module transmits the data to the abnormal data analysis module, the information vulnerability analysis module and the grid weight analysis module after preprocessing the data. The abnormal data analysis module analyzes the data and transmits it to the safety factor calculation module. The information vulnerability analysis module analyzes the data and transmits it to the safety factor calculation module. The grid weight analysis module analyzes the data and transmits it to the safety factor calculation module. The safety factor calculation module calculates the safety factor based on the data of the abnormal data analysis module, the information vulnerability analysis module and the grid weight analysis module, and transmits it to the safety factor evaluation module. The safety factor evaluation module evaluates the safety factor and transmits it to the safety factor warning module. The safety factor warning module issues a warning notification based on the evaluation result of the safety factor evaluation module. The safety factor evaluation module and the safety factor warning module transmit the data to the human-computer interaction module for human-computer interaction display.

[0016] In this embodiment, it should be specifically explained that the grid area division module is used to perform grid division on the target area into n sub-areas, which are marked as 1, 2, 3...i...n in sequence, and the target area is a network area that needs to be monitored for information security; The data acquisition module is used to collect target data for each sub-area, and the target data is the size of the data packet in each sub-area, the amount of abnormal data in each sub-area, the information transmission speed in each sub-area, the number of times the network in each sub-area is attacked, and the number of times the network in each sub-area is repaired. The data acquisition module collects the data and transmits it to the data preprocessing module; The data preprocessing module is used to preprocess the target data to obtain target data that can be directly used, and transmit the preprocessed data to the abnormal data analysis module, the information vulnerability analysis module and the grid weight analysis module; The abnormal data analysis module is used to receive the data preprocessed by the data preprocessing module, analyze and calculate the abnormal data situation based on cluster analysis, obtain the data abnormality missed reporting rate, and transmit it to the safety factor calculation module; The information vulnerability analysis module is used to receive the data after data preprocessing, analyze and calculate the information vulnerability rate, and transmit it to the safety factor calculation module; The grid weight analysis module calculates the grid weight index, calculates the data packet weight index based on the grid weight index, and transmits it to the safety factor calculation module; The safety factor calculation module includes a single safety factor calculation unit and an overall safety factor calculation unit. The single safety factor calculation module calculates the single safety factor of each sub-area and transmits it to the overall safety factor calculation unit. The overall safety factor calculation unit calculates the overall safety factor of the target area and transmits it to the safety factor evaluation module for safety evaluation. The safety assessment module includes a single safety factor assessment unit and an overall safety factor assessment unit. The single safety factor assessment unit is used to perform safety assessment on the single safety factor of the single safety factor calculation unit. The overall safety factor assessment unit is used to perform safety assessment on the overall safety factor of the overall safety factor calculation unit, and transmit the assessment results to the safety factor early warning module and the human-computer interaction module. The safety factor early warning module makes corresponding early warning notifications according to the evaluation results of the safety evaluation module, and transmits them to the human-computer interaction module for human-computer interaction display.

[0017] In this embodiment, it should be specifically explained that the calculation formula of the data anomaly omission rate is: , where L i represents the data anomaly omission rate of the i-th sub-region, V i1 is the cluster coverage after cluster analysis of the data in the ith sub-region, c i represents the number of abnormal data detections for the ith sub-region, C represents the total number of abnormal data detections for the ith sub-region, and q i is the total number of locations with data anomalies in the ith sub-region, d i is the distance between any two cluster points in the ith sub-region, V i2 The overlapping range of clusters after cluster analysis of the data for the i-th sub-region.

[0018] In this embodiment, it should be specifically explained that the calculation formula of the information leakage rate is: , where D i is the information leakage rate of the ith sub-region, a i is the number of information vulnerabilities in the i-th sub-region, A i is the network coverage scale of the ith sub-area.

[0019] In this embodiment, it should be specifically explained that the calculation formula of the data packet weight index is: , where K i is the weight index of the data packet in the ith sub-area, k i is the grid weight index of the ith sub-region, where the calculation formula of the grid weight index is: , where s iis the data packet capacity of the ith sub-area.

[0020] In this embodiment, it should be specifically stated that the calculation formula of the monomer safety factor is: , where δ i is the single safety factor of the ith sub-region, and the calculation formula of the overall safety factor is: , where γ is the overall safety factor.

[0021] In this embodiment, it should be specifically explained that the safety evaluation unit for the monomer safety factor performs safety evaluation on the monomer safety factor, including the following steps: Step S01: Set the monomer safety factor δ i Compared with P1, if the monomer safety factor δ i ≤P1, then execute step S02. If the safety factor of the monomer δ i >P1, then execute step S03; P1 is a monomer threshold, and the value of P1 satisfies P1>85%. This embodiment does not make a specific setting for this; Step S02: Sending a first-level warning notification to the safety factor warning module; Step S03: Do not send a warning notification to the safety factor warning module, and only transmit data to the safety factor warning module.

[0022] In this embodiment, it should be specifically explained that the overall safety factor evaluation unit performs safety evaluation on the overall safety factor including the following steps: Step S11: compare the overall safety factor γ with P2. If the overall safety factor γ≤P2, execute step S12. If the overall safety factor γ>P2, execute step S13. P2 is the overall threshold value, and the value of P2 satisfies P2>85%. This embodiment does not make a specific setting for this; Step S12: Sending a secondary warning notification to the safety factor warning module; Step S13: Do not send a warning notification to the safety factor warning module, and only transmit data to the safety factor warning module.

[0023] In this embodiment, it needs to be specifically explained that after the safety factor warning module receives the first-level warning notification, it sends a warning display to the human-computer interaction module, and the display content is "first-level warning", indicating that there is a sub-area whose safety factor does not meet the standard. After the safety factor warning module receives the second-level warning notification, it sends a warning display to the human-computer interaction module, and the display content is "second-level warning", indicating that the overall safety factor does not meet the standard.

[0024] In the present embodiment, it should be specifically explained that the difference between the present embodiment and the prior art lies mainly in that the present embodiment has a grid weight analysis module, which calculates the grid weight index and calculates the data packet weight index based on the grid weight index. Through the abnormal data analysis module, the information vulnerability analysis module and the grid weight analysis module, the information security is monitored from three angles: abnormal data, information vulnerability and grid weight of each sub-area, thereby improving the accuracy, precision and standardization of management and control. By analyzing the degree of influence of several grid units on the overall information security, the accuracy of information security monitoring is further improved.

[0025] Finally: The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

[0026] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A grid management and control system based on information security monitoring, characterized in that: It includes grid area division module, data acquisition module, data preprocessing module, abnormal data analysis module, information vulnerability analysis module, grid weight analysis module, safety factor calculation module, safety factor evaluation module, safety warning module and human-computer interaction module; The grid area division module is used to perform grid division on the target area into n sub-areas, which are marked as 1, 2, 3...i...n in sequence; The data acquisition module is used to collect target data for each sub-area, and the data acquisition module collects the data and transmits it to the data preprocessing module; The abnormal data analysis module is used to receive the data preprocessed by the data preprocessing module, analyze and calculate the abnormal data situation based on cluster analysis, obtain the data abnormality missed reporting rate, and transmit it to the safety factor calculation module; The information vulnerability analysis module is used to receive the data after data preprocessing, analyze and calculate the information vulnerability rate, and transmit it to the safety factor calculation module; The grid weight analysis module calculates the grid weight index, calculates the data packet weight index based on the grid weight index, and transmits it to the safety factor calculation module; The safety factor calculation module includes a single safety factor calculation unit and an overall safety factor calculation unit. The single safety factor calculation module calculates the single safety factor of each sub-area and transmits it to the overall safety factor calculation unit. The overall safety factor calculation unit calculates the overall safety factor of the target area and transmits it to the safety factor evaluation module for safety evaluation. The safety assessment module includes a single safety factor assessment unit and an overall safety factor assessment unit. The single safety factor assessment unit is used to perform safety assessment on the single safety factor of the single safety factor calculation unit. The overall safety factor assessment unit is used to perform safety assessment on the overall safety factor of the overall safety factor calculation unit, and transmit the assessment results to the safety factor early warning module and the human-computer interaction module. The safety factor early warning module makes corresponding early warning notifications according to the evaluation results of the safety evaluation module, and transmits them to the human-computer interaction module for human-computer interaction display.

2. A grid management and control system based on information security monitoring according to claim 1, characterized in that: The calculation formula of the data anomaly omission rate is: , where L i represents the data anomaly omission rate of the i-th sub-region, V i1 is the cluster coverage after cluster analysis of the data in the ith sub-region, c i represents the number of abnormal data detections for the ith sub-region, C represents the total number of abnormal data detections for the ith sub-region, and q i is the total number of locations with data anomalies in the ith sub-region, d i is the distance between any two cluster points in the ith sub-region, V i2 The overlapping range of clusters after cluster analysis of the data for the i-th sub-region.

3. A grid management and control system based on information security monitoring according to claim 1, characterized in that: The calculation formula of the information vulnerability rate is: , where D i is the information leakage rate of the ith sub-region, a i is the number of information vulnerabilities in the i-th sub-region, A i is the network coverage scale of the ith sub-area.

4. A grid management and control system based on information security monitoring according to claim 1, characterized in that: The calculation formula of the data packet weight index is: , where K i is the weight index of the data packet in the ith sub-area, k i is the grid weight index of the ith sub-region, where the calculation formula of the grid weight index is: , where s i is the data packet capacity of the ith sub-area.

5. A grid management and control system based on information security monitoring according to claim 1, characterized in that: The calculation formula of the monomer safety factor is: , where δ i is the single body safety factor of the ith sub-region.

6. A grid management and control system based on information security monitoring according to claim 1, characterized in that: The calculation formula of the overall safety factor is: , where γ is the overall safety factor.

7. A grid management and control system based on information security monitoring according to claim 1, characterized in that: After receiving the first-level warning notification, the safety factor warning module sends a warning display to the human-computer interaction module, and the display content is "first-level warning", indicating that the safety factor of a sub-area does not meet the standard. After receiving the second-level warning notification, the safety factor warning module sends a warning display to the human-computer interaction module, and the display content is "second-level warning", indicating that the overall safety factor does not meet the standard.

Images