Monitoring method and device based on power distribution safety terminal module, terminal equipment and computer readable storage medium

Abstract

The invention discloses a monitoring method and device based on power distribution safety terminal modules, terminal equipment and a computer readable storage medium. The method comprises the following steps: acquiring operation data and flow transmission data of each power distribution safety terminal module; according to the operation data, calculating to obtain a memory occupation abnormal value, a process starting frequency abnormal value and a process operation duration abnormal value of each power distribution safety terminal module; according to the traffic transmission data, a traffic size abnormal value and a traffic rate abnormal value of each power distribution safety terminal module are calculated; for each power distribution safety terminal module, performing weighted calculation on each abnormal value according to a preset proportion coefficient to obtain a comprehensive abnormal value of each power distribution safety terminal module; whether the comprehensive abnormal value exceeds a preset comprehensive abnormal threshold value or not is judged, and if yes, the power distribution safety terminal module is regarded as abnormal; and if not, continuing monitoring. According to the invention, the dynamic data of the power distribution safety terminal module is directly monitored, and the safety risk of the terminal is evaluated more comprehensively.

Description

Technical Field

[0001] The present invention relates to the field of power distribution safety monitoring, and in particular to a monitoring method, device, terminal equipment and computer-readable storage medium based on a power distribution safety terminal module. Background Art

[0002] Distribution network security terminal refers to a specific device used in the distribution automation system to ensure the security and reliability of data transmission. In modern distribution networks, due to the complex communication environment, there are many security risks, such as data leakage and interference. The distribution network security terminal is a key device to ensure the safe operation of the distribution network and improve the reliability of power supply. It greatly improves the security of data transmission through encryption technology and other means, and is an important part of the development of automation and intelligent power systems in my country.

[0003] However, current monitoring of terminal security mainly relies on analyzing management data, which may not capture potential anomalies in operation data and traffic data, and thus cannot fully assess terminal security risks. Summary of the invention

[0004] The embodiments of the present invention provide a monitoring method, apparatus, terminal device and computer-readable storage medium based on a power distribution safety terminal module, which directly monitor the dynamic data of the power distribution safety terminal module and can more comprehensively evaluate terminal security risks.

[0005] An embodiment of the present invention provides a monitoring method based on a power distribution safety terminal module, comprising:

[0006] Obtain real-time operation data and flow transmission data of each power distribution safety terminal module; operation data, including: memory usage data, process startup times data and process running time data; flow transmission data, including: flow size data and flow rate data;

[0007] According to the operation data of each power distribution safety terminal module, the abnormal value of memory usage, the abnormal value of process startup times and the abnormal value of process running time of each power distribution safety terminal module are calculated;

[0008] According to the flow transmission data of each power distribution safety terminal module, the flow size abnormal value and flow rate abnormal value of each power distribution safety terminal module are calculated;

[0009] For each power distribution safety terminal module, according to the abnormal value of memory usage, the abnormal value of the number of process startups, the abnormal value of the process running time, the abnormal value of the flow size and the abnormal value of the flow rate, a weighted calculation is performed according to the preset proportion coefficient of each abnormal value to obtain the comprehensive abnormal value of each power distribution safety terminal module;

[0010] For each power distribution safety terminal module, determine whether its comprehensive abnormal value exceeds the preset comprehensive abnormal threshold. If so, the state of the power distribution safety terminal module is regarded as an abnormal state; if not, continue monitoring.

[0011] Furthermore, according to the operation data of each power distribution safety terminal module, the abnormal value of memory usage, the abnormal value of the number of process startups, and the abnormal value of the process running time of each power distribution safety terminal module are calculated, including:

[0012] For each power distribution safety terminal module, the memory occupancy rate of each time period is calculated according to the amount of memory being used and the total amount of memory in each time period in the memory occupancy data;

[0013] According to the memory occupancy rate of each time period, the number of time periods for collecting operation data, and the standard memory occupancy rate, the abnormal value of memory occupancy of each power distribution safety terminal module is calculated;

[0014] According to the number of time periods for collecting operation data, the number of standard process startups, and the number of process startups in each time period in the memory usage data, the abnormal value of the number of process startups of each power distribution safety terminal module is calculated;

[0015] According to the number of time periods for collecting operation data, the standard process running time and the process running time of each time period in the memory usage data, the abnormal value of the process running time of each distribution safety terminal module is calculated.

[0016] Furthermore, according to the flow transmission data of each power distribution safety terminal module, the flow size abnormal value and flow rate abnormal value of each power distribution safety terminal module are calculated, including:

[0017] For each power distribution safety terminal module, the abnormal flow value of each power distribution safety terminal module is calculated according to the standard flow size, the total monitoring time of the flow, and the flow size collected at each moment in the flow size data;

[0018] According to the standard flow rate, the total monitoring time of the flow and the flow rate collected at each moment in the flow size data, the flow rate abnormal value of each power distribution safety terminal module is calculated.

[0019] Furthermore, the monitoring method based on the power distribution safety terminal module also includes:

[0020] The IP address of the power distribution safety terminal module considered to be in an abnormal state is obtained, and the IP address is used as a positioning identifier.

[0021] Based on the above method embodiment, the present invention provides a corresponding device embodiment, including: a dynamic data acquisition module, an operation abnormal value calculation module, a flow abnormal value calculation module, a comprehensive abnormal value calculation module, and an abnormal state judgment module;

[0022] Dynamic data acquisition module, used to obtain real-time operation data and flow transmission data of each power distribution safety terminal module; operation data, including: memory usage data, process startup times data and process running time data; flow transmission data, including: flow size data and flow rate data;

[0023] An operation abnormal value calculation module is used to calculate the memory usage abnormal value, process startup number abnormal value and process running time abnormal value of each power distribution safety terminal module according to the operation data of each power distribution safety terminal module;

[0024] A flow abnormal value calculation module is used to calculate the flow size abnormal value and flow rate abnormal value of each power distribution safety terminal module according to the flow transmission data of each power distribution safety terminal module;

[0025] A comprehensive abnormal value calculation module is used to perform weighted calculation according to the preset proportion coefficient of each abnormal value for each power distribution safety terminal module based on the abnormal value of memory usage, the abnormal value of the number of process startups, the abnormal value of the process running time, the abnormal value of the flow size and the abnormal value of the flow rate, so as to obtain the comprehensive abnormal value of each power distribution safety terminal module;

[0026] The abnormal state judgment module is used to judge whether the comprehensive abnormal value of each power distribution safety terminal module exceeds the preset comprehensive abnormal threshold. If so, the state of the power distribution safety terminal module is regarded as an abnormal state; if not, continue monitoring.

[0027] Further, the operation abnormal value calculation module includes: a memory occupancy rate calculation unit, a memory occupancy abnormal value calculation unit, a process startup number abnormal value calculation unit, and a process running time abnormal value calculation unit;

[0028] A memory occupancy abnormal value calculation unit is used to calculate the memory occupancy abnormal value of each power distribution safety terminal module according to the memory occupancy rate of each time period, the number of time periods for collecting operation data, and the standard memory occupancy rate;

[0029] A process startup number abnormal value calculation unit is used to calculate the process startup number abnormal value of each power distribution safety terminal module according to the number of time periods for collecting operation data, the standard process startup number and the process startup number in each time period in the memory usage data;

[0030] The process running time abnormal value calculation unit is used to calculate the process running time abnormal value of each distribution safety terminal module according to the number of time periods for collecting running data, the standard process running time and the process running time of each time period in the memory occupancy data.

[0031] Further, the flow anomaly value calculation module includes: a flow size anomaly value calculation unit, and a flow rate anomaly value calculation unit;

[0032] A flow size abnormal value calculation unit is used to calculate the flow size abnormal value of each power distribution safety terminal module according to the standard flow size, the total monitoring time of the flow size and the flow size collected at each moment in the flow size data for each power distribution safety terminal module;

[0033] The flow rate abnormal value calculation unit is used to calculate the flow rate abnormal value of each distribution safety terminal module according to the standard flow rate, the total monitoring time of the flow and the flow rate collected at each moment in the flow size data.

[0034] Furthermore, the monitoring device based on the power distribution safety terminal module further includes: an abnormality locating module;

[0035] The abnormality positioning module is used to obtain the IP address of the power distribution safety terminal module that is considered to be in an abnormal state, and use the IP address as a positioning identifier.

[0036] Based on the above-mentioned method embodiment, the present invention provides a corresponding terminal device embodiment, including: a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor. When the processor executes the computer program, the steps of the monitoring method based on the power distribution safety terminal module as described in the present invention are implemented.

[0037] Based on the above-mentioned method embodiment, the present invention provides a corresponding computer-readable storage medium embodiment, including: a stored computer program, which controls the device where the computer-readable storage medium is located to execute the steps of the monitoring method based on the power distribution safety terminal module as described in the present invention when the computer program is running.

[0038] Compared with the prior art, the beneficial effects of the embodiment of this solution are:

[0039] The present invention obtains the operation data and flow transmission data of each power distribution terminal safety module in real time, calculates the abnormal value of memory occupancy data, the abnormal value of process startup times, the abnormal value of process running time, the abnormal value of flow size and the abnormal value of flow rate of each power distribution terminal safety module, thereby calculating a comprehensive abnormal value, and judges whether the power distribution safety terminal module is abnormal by judging whether the comprehensive abnormal value exceeds the preset comprehensive abnormal threshold value, wherein the operation data and flow transmission data belong to the dynamic data of the power distribution terminal safety module, and through these dynamic data or their combination, the potential abnormal situation of the terminal can be directly captured, for example: by analyzing the memory occupancy data and the process startup times data, abnormal process behavior can be detected, abnormal memory occupancy and frequent process startup may indicate the existence of malware or system vulnerability exploitation, while the analysis of management data can provide log records and performance monitoring data, and cannot directly identify abnormal operation behavior. Therefore, the present invention can directly monitor the dynamic data of the power distribution safety terminal module, and can more comprehensively evaluate the terminal security risk. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] Figure 1 It is a flow chart of a monitoring method based on a power distribution safety terminal module provided by an embodiment of the present invention;

[0041] Figure 2 It is a structural diagram of a monitoring device based on a power distribution safety terminal module provided in one embodiment of the present invention. DETAILED DESCRIPTION

[0042] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0043] like Figure 1 As shown, an embodiment of the present invention provides a monitoring method based on a power distribution safety terminal module, the method at least comprising the following steps:

[0044] Step S1: Acquire real-time operation data and flow transmission data of each power distribution safety terminal module; the operation data includes: memory usage data, process startup times data and process running time data; the flow transmission data includes: flow size data and flow rate data;

[0045] For step S1, install the power distribution safety terminal module on the terminal device that needs to be monitored, and obtain the operating data of the terminal device in real time through the power distribution safety terminal module. The power distribution safety terminal module has a built-in memory monitor for monitoring the memory usage of the module; in addition, the power distribution safety terminal module also has a built-in counter for recording the number of process starts. Every time a process starts, the counter increases by one; at the same time, the power distribution safety terminal module also has a process time timer for recording the start time and current time of the process and calculating the running time. Through these functions, the power distribution safety terminal module can provide real-time operating data of the terminal device, including information such as memory usage, number of process starts, and process running time.

[0046] Traffic transmission data on the terminal device can be copied to the security module through traffic mirroring technology for monitoring and analysis to obtain real-time traffic transmission data. Traffic transmission data includes traffic size and traffic rate, which can provide detailed information about the traffic, including the total amount of data packets transmitted and the transmission rate.

[0047] Step S2: according to the operation data of each power distribution safety terminal module, calculate the abnormal value of memory usage, the abnormal value of the number of process startups, and the abnormal value of the process running time of each power distribution safety terminal module;

[0048] In a preferred embodiment, according to the operation data of each power distribution safety terminal module, the abnormal value of memory usage, the abnormal value of the number of process startups, and the abnormal value of the process running time of each power distribution safety terminal module are calculated, including:

[0049] For each power distribution safety terminal module, the memory occupancy rate of each time period is calculated according to the amount of memory being used and the total amount of memory in each time period in the memory occupancy data;

[0050] According to the memory occupancy rate of each time period, the number of time periods for collecting operation data, and the standard memory occupancy rate, the abnormal value of memory occupancy of each power distribution safety terminal module is calculated;

[0051] According to the number of time periods for collecting operation data, the number of standard process startups, and the number of process startups in each time period in the memory usage data, the abnormal value of the number of process startups of each power distribution safety terminal module is calculated;

[0052] According to the number of time periods for collecting operation data, the standard process running time and the process running time of each time period in the memory usage data, the abnormal value of the process running time of each distribution safety terminal module is calculated.

[0053] For step S2, first, the memory occupancy of each power distribution safety terminal module obtained in step S1, that is, the amount of memory in use and the total amount of memory in each time period, is substituted into the following calculation formula to obtain the abnormal value of the memory occupancy rate of the power distribution safety terminal module:

[0054]

[0055] Where Y nc Indicates the abnormal value of memory usage, N i Indicates the amount of memory being used during the i-th time period, N R represents the total memory capacity in the i-th time period, N1 represents the standard memory occupancy rate, and j represents the number of time periods for collecting running data;

[0056] Then, the process startup times of each power distribution safety terminal module obtained in step S1 is substituted into the following calculation formula to obtain the abnormal value of the process startup times of the power distribution safety terminal module:

[0057]

[0058] Where Y qd Indicates the abnormal number of process startup times, Q i represents the number of process startups collected in the i-th time period, Q1 represents the number of standard process startups, and j represents the number of time periods for collecting running data;

[0059] Next, the process running time of each power distribution safety terminal module obtained in step S1 is substituted into the following calculation formula to obtain the abnormal value of the process running time of the power distribution safety terminal module:

[0060]

[0061] Where Y sj Indicates the abnormal value of process running time, S i represents the process running time collected in the i-th time period, S1 represents the standard process running time, and j represents the number of time periods for collecting running data;

[0062] Finally, the calculated memory usage abnormal value, process startup number abnormal value, and process running time abnormal value of each power distribution safety terminal module are weighted and calculated to obtain the running abnormal value of each power distribution safety terminal module:

[0063]

[0064] Where Y yx Indicates the running abnormal value, a1 indicates the memory usage ratio, a2 indicates the process startup times ratio, a3 indicates the process running time ratio, a1+a2+a3=1;

[0065] By calculating the operation abnormality value of the power distribution safety terminal module, the overall operation status of each module can be evaluated, helping the monitoring system administrator or maintenance personnel to quickly identify abnormal modules so that appropriate measures can be taken in time for troubleshooting or repair.

[0066] When monitoring specific terminal devices, you can monitor specific issues in a targeted manner by allocating different operating data ratios, so as to more accurately monitor the problems that may occur in the power distribution safety terminal module and ensure the stable operation of the power system. For example, when a server is exploited by malware or system vulnerabilities, abnormal memory usage and frequent process startups may occur. Therefore, for server network security, it is necessary to increase the memory usage ratio and process startup times ratio.

[0067] Step S3: according to the flow transmission data of each power distribution safety terminal module, the flow size abnormal value and flow rate abnormal value of each power distribution safety terminal module are calculated;

[0068] In a preferred embodiment, according to the flow transmission data of each power distribution safety terminal module, the flow size abnormal value and flow rate abnormal value of each power distribution safety terminal module are calculated, including:

[0069] For each power distribution safety terminal module, the abnormal flow value of each power distribution safety terminal module is calculated according to the standard flow size, the total monitoring time of the flow, and the flow size collected at each moment in the flow size data;

[0070] According to the standard flow rate, the total monitoring time of the flow and the flow rate collected at each moment in the flow size data, the flow rate abnormal value of each power distribution safety terminal module is calculated.

[0071] For step S3, first, the flow size data of each power distribution safety terminal module obtained in step S1 is substituted into the following calculation formula to obtain the abnormal flow size value of the power distribution safety terminal module:

[0072]

[0073] Where Y dx Indicates the abnormal value of flow size, D t It represents the flow rate collected at time t, D1 represents the standard flow rate, and T represents the monitoring time of flow data;

[0074] Next, the flow rate data of each power distribution safety terminal module obtained in step S1 is substituted into the following calculation formula to obtain the abnormal value of the flow rate of the power distribution safety terminal module:

[0075]

[0076] Where Y sl Indicates the abnormal value of flow rate, L t represents the flow rate collected at time t, L1 represents the standard flow rate, and T represents the monitoring duration of flow data;

[0077] Finally, the calculated flow size anomaly value and flow rate anomaly value of each power distribution safety terminal module are weighted to obtain the flow anomaly value of each power distribution safety terminal module:

[0078]

[0079] Where Y ll represents the flow abnormal value, β1 represents the flow size ratio, β2 represents the flow rate ratio, β1+β2=1;

[0080] By calculating the flow anomaly values ​​of the power distribution safety terminal modules, the overall flow status of each module can be evaluated, helping monitoring system administrators or maintenance personnel to quickly identify abnormal modules so that appropriate measures can be taken in time for troubleshooting or repair.

[0081] Step S4: For each power distribution safety terminal module, according to the abnormal value of memory usage, the abnormal value of the number of process startups, the abnormal value of the process running time, the abnormal value of the flow size and the abnormal value of the flow rate, a weighted calculation is performed according to the preset proportion coefficient of each abnormal value to obtain the comprehensive abnormal value of each power distribution safety terminal module;

[0082] For step S4, the memory usage abnormal value, process startup number abnormal value, and process running time abnormal value of each power distribution safety terminal module calculated in step S2, and the flow size abnormal value and flow rate abnormal value of each power distribution safety terminal module calculated in step S3 are weighted according to the preset proportion coefficient to obtain a comprehensive abnormal value for evaluating the power distribution terminal equipment:

[0083]

[0084] Where Y zh represents the comprehensive abnormal value, λ1 represents the operation abnormality ratio, λ2 represents the flow abnormality ratio, λ1+λ2=1;

[0085] By calculating the comprehensive abnormal value, the abnormal conditions of the power distribution terminal equipment in terms of memory usage, number of process startups, process running time, flow size and flow rate can be comprehensively considered, making the evaluation results more accurate and comprehensive. At the same time, the setting of the operation abnormality ratio coefficient and the flow abnormality ratio coefficient can be adjusted according to the specific needs of the terminal equipment to highlight important abnormal conditions.

[0086] Step S5: for each power distribution safety terminal module, determine whether its comprehensive abnormal value exceeds a preset comprehensive abnormal threshold value, if so, regard the state of the power distribution safety terminal module as an abnormal state; if not, continue monitoring.

[0087] For step S5, assuming that a power distribution system contains multiple power distribution safety terminal modules, the abnormal situation of each module is evaluated by calculating the comprehensive abnormal value, and whether to regard the state of the module as an abnormal state is determined according to the preset comprehensive abnormal threshold. If the comprehensive abnormal value exceeds the preset threshold, it means that the abnormal situation of the module is serious, and the state of the power distribution safety terminal module is regarded as an abnormal state.

[0088] Once the status of a power distribution safety terminal module is determined to be abnormal, the system administrator or maintenance personnel can take corresponding measures according to the status, such as troubleshooting, repair or maintenance operations, to restore the normal operation of the module. For power distribution safety terminal modules whose comprehensive abnormal values ​​do not exceed the preset threshold, the system will continue to monitor to ensure their normal operation, which can maintain continuous monitoring of the system and detect abnormal conditions of the modules in a timely manner.

[0089] In a preferred embodiment, the monitoring method based on the power distribution safety terminal module further includes:

[0090] The IP address of the power distribution safety terminal module considered to be in an abnormal state is obtained, and the IP address is used as a positioning identifier.

[0091] In one embodiment of the present invention, when a power distribution safety terminal module is judged to be in an abnormal state, the system immediately obtains the IP address of the module. Each module has a unique IP address. The obtained IP address is used as a positioning identifier to determine the position of the abnormal module in the power distribution system. Through the network topology diagram of the power distribution system, the IP address can be mapped to the corresponding physical location or network device.

[0092] Based on the location identification of the IP address, the system administrator can go to the abnormal terminal device for physical inspection to determine whether there is a physical fault or connection problem. If the system supports remote access, the system administrator can use the IP address of the abnormal module to remotely access the module. Through remote access, the administrator can view the detailed status information, logs, configuration, etc. of the module to further analyze the problem.

[0093] like Figure 2 As shown, based on the above method embodiment, a corresponding device embodiment is provided;

[0094] An embodiment of the present invention provides a monitoring device based on a power distribution safety terminal module, comprising: a dynamic data acquisition module, an operation abnormal value calculation module, a flow abnormal value calculation module, a comprehensive abnormal value calculation module, and an abnormal state judgment module;

[0095] Dynamic data acquisition module, used to obtain real-time operation data and flow transmission data of each power distribution safety terminal module; operation data, including: memory usage data, process startup times data and process running time data; flow transmission data, including: flow size data and flow rate data;

[0096] An operation abnormal value calculation module is used to calculate the memory usage abnormal value, process startup number abnormal value and process running time abnormal value of each power distribution safety terminal module according to the operation data of each power distribution safety terminal module;

[0097] A flow abnormal value calculation module is used to calculate the flow size abnormal value and flow rate abnormal value of each power distribution safety terminal module according to the flow transmission data of each power distribution safety terminal module;

[0098] A comprehensive abnormal value calculation module is used to perform weighted calculation according to the preset proportion coefficient of each abnormal value for each power distribution safety terminal module based on the abnormal value of memory usage, the abnormal value of the number of process startups, the abnormal value of the process running time, the abnormal value of the flow size and the abnormal value of the flow rate, so as to obtain the comprehensive abnormal value of each power distribution safety terminal module;

[0099] The abnormal state judgment module is used to judge whether the comprehensive abnormal value of each power distribution safety terminal module exceeds the preset comprehensive abnormal threshold. If so, the state of the power distribution safety terminal module is regarded as an abnormal state; if not, continue monitoring.

[0100] In a preferred embodiment, the operation abnormal value calculation module includes: a memory occupancy rate calculation unit, a memory occupancy abnormal value calculation unit, a process startup times abnormal value calculation unit, and a process running time abnormal value calculation unit;

[0101] A memory occupancy abnormal value calculation unit is used to calculate the memory occupancy abnormal value of each power distribution safety terminal module according to the memory occupancy rate of each time period, the number of time periods for collecting operation data, and the standard memory occupancy rate;

[0102] A process startup number abnormal value calculation unit is used to calculate the process startup number abnormal value of each power distribution safety terminal module according to the number of time periods for collecting operation data, the standard process startup number and the process startup number in each time period in the memory usage data;

[0103] The process running time abnormal value calculation unit is used to calculate the process running time abnormal value of each distribution safety terminal module according to the number of time periods for collecting running data, the standard process running time and the process running time of each time period in the memory occupancy data.

[0104] In a preferred embodiment, the flow abnormal value calculation module includes: a flow size abnormal value calculation unit, and a flow rate abnormal value calculation unit;

[0105] A flow size abnormal value calculation unit is used to calculate the flow size abnormal value of each power distribution safety terminal module according to the standard flow size, the total monitoring time of the flow size and the flow size collected at each moment in the flow size data for each power distribution safety terminal module;

[0106] The flow rate abnormal value calculation unit is used to calculate the flow rate abnormal value of each distribution safety terminal module according to the standard flow rate, the total monitoring time of the flow and the flow rate collected at each moment in the flow size data.

[0107] In a preferred embodiment, the monitoring device based on the power distribution safety terminal module further includes: an abnormality locating module;

[0108] The abnormality positioning module is used to obtain the IP address of the power distribution safety terminal module that is considered to be in an abnormal state, and use the IP address as a positioning identifier.

[0109] It can be understood that the above-mentioned device item embodiments correspond to the method item embodiments of the present invention, and can implement the monitoring method based on the power distribution safety terminal module provided by any one of the above-mentioned method item embodiments of the present invention.

[0110] It should be noted that the device embodiments described above are merely illustrative, and some or all of the modules may be selected according to actual needs to achieve the purpose of the present embodiment. In addition, in the accompanying drawings of the device embodiments provided by the present invention, the connection relationship between the modules indicates that there is a communication connection between them, which may be specifically implemented as one or more communication buses or signal lines. Those of ordinary skill in the art may understand and implement the present invention without creative work.

[0111] Based on the above-mentioned embodiment of the monitoring method based on the distribution safety terminal module, another embodiment of the present invention provides a terminal device, which includes a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor. When the processor executes the computer program, the monitoring method based on the distribution safety terminal module of any embodiment of the present invention is implemented.

[0112] Exemplarily, in this embodiment, the computer program may be divided into one or more modules, which are stored in the memory and executed by the processor to implement the present invention. The one or more module elements may be a series of computer program instruction segments capable of implementing specific functions, which are used to describe the execution process of the computer program in the terminal device.

[0113] The terminal device may be a computing device such as a desktop computer, a notebook, a PDA, a cloud server, etc. The terminal device may include, but is not limited to, a processor and a memory.

[0114] The processor may be a central processing unit (CPU), other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or any conventional processor, etc. The processor is the control center of the terminal device, and uses various interfaces and lines to connect various parts of the entire terminal device.

[0115] Based on the above method embodiment, another embodiment is provided: another embodiment of the present invention provides a computer-readable storage medium, including a stored computer program, wherein when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute the monitoring method based on the power distribution safety terminal module described in any one of the above method embodiments of the present invention.

[0116] Wherein, the module / unit integrated with the monitoring device / terminal equipment based on the power distribution safety terminal module, if implemented in the form of a software functional unit and sold or used as an independent product, can be stored in a computer-readable storage medium. Based on such an understanding, the present invention implements all or part of the processes in the above-mentioned embodiment method, and can also be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and the computer program can implement the steps of the above-mentioned various method embodiments when executed by the processor. Wherein, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form, etc. The computer-readable medium can include: any entity or device capable of carrying the computer program code, recording medium, U disk, mobile hard disk, disk, optical disk, computer memory, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), electric carrier signal, telecommunication signal and software distribution medium, etc.

[0117] The above is a preferred embodiment of the present invention. It should be pointed out that a person skilled in the art can make several improvements and modifications without departing from the principle of the present invention. These improvements and modifications are also considered to be within the scope of protection of the present invention.

Claims

1. A monitoring method based on a power distribution safety terminal module, characterized in that: include: Obtain real-time operation data and flow transmission data of each power distribution safety terminal module; The operation data includes: memory usage data, process startup times data and process running time data; the traffic transmission data includes: traffic size data and traffic rate data; According to the operation data of each power distribution safety terminal module, the abnormal value of memory usage, the abnormal value of process startup times and the abnormal value of process running time of each power distribution safety terminal module are calculated; According to the flow transmission data of each power distribution safety terminal module, the flow size abnormal value and flow rate abnormal value of each power distribution safety terminal module are calculated; For each power distribution safety terminal module, according to the abnormal value of memory usage, the abnormal value of the number of process startups, the abnormal value of the process running time, the abnormal value of the flow size and the abnormal value of the flow rate, a weighted calculation is performed according to the preset proportion coefficient of each abnormal value to obtain the comprehensive abnormal value of each power distribution safety terminal module; For each power distribution safety terminal module, determine whether its comprehensive abnormal value exceeds the preset comprehensive abnormal threshold. If so, the state of the power distribution safety terminal module is regarded as an abnormal state; if not, continue monitoring.

2. The monitoring method based on the power distribution safety terminal module according to claim 1 is characterized in that: According to the operation data of each power distribution safety terminal module, the abnormal value of memory usage, the abnormal value of process startup times, and the abnormal value of process running time of each power distribution safety terminal module are calculated, including: For each power distribution safety terminal module, the memory occupancy rate of each time period is calculated according to the amount of memory being used and the total amount of memory in each time period in the memory occupancy data; Calculate the abnormal memory occupancy value of each power distribution safety terminal module according to the memory occupancy rate of each time period, the number of time periods for collecting operation data, and the standard memory occupancy rate; According to the number of time periods for collecting operation data, the number of standard process startups, and the number of process startups in each time period in the memory usage data, the abnormal value of the number of process startups of each power distribution safety terminal module is calculated; According to the number of time periods for collecting operation data, the standard process running time and the process running time of each time period in the memory usage data, the abnormal value of the process running time of each distribution safety terminal module is calculated.

3. The monitoring method based on the power distribution safety terminal module according to claim 2 is characterized in that: According to the flow transmission data of each power distribution safety terminal module, the flow size abnormal value and flow rate abnormal value of each power distribution safety terminal module are calculated, including: For each power distribution safety terminal module, the abnormal flow value of each power distribution safety terminal module is calculated according to the standard flow size, the total monitoring time of the flow, and the flow size collected at each moment in the flow size data; According to the standard flow rate, the total monitoring time of the flow and the flow rate collected at each moment in the flow size data, the flow rate abnormal value of each power distribution safety terminal module is calculated.

4. The monitoring method based on the power distribution safety terminal module according to claim 3 is characterized in that: Also includes: The IP address of the power distribution safety terminal module considered to be in an abnormal state is obtained, and the IP address is used as a positioning identifier.

5. A monitoring device based on a power distribution safety terminal module, characterized in that: include: Dynamic data acquisition module, operation abnormal value calculation module, flow abnormal value calculation module, comprehensive abnormal value calculation module, and abnormal state judgment module; The dynamic data acquisition module is used to obtain real-time operation data and flow transmission data of each power distribution safety terminal module; The operation data includes: memory usage data, process startup times data and process running time data; the traffic transmission data includes: traffic size data and traffic rate data; The operation abnormal value calculation module is used to calculate the memory usage abnormal value, process startup number abnormal value and process running time abnormal value of each power distribution safety terminal module according to the operation data of each power distribution safety terminal module; The flow abnormal value calculation module is used to calculate the flow size abnormal value and flow rate abnormal value of each power distribution safety terminal module according to the flow transmission data of each power distribution safety terminal module; The comprehensive abnormal value calculation module is used to perform weighted calculation according to the preset proportion coefficient of each abnormal value for each power distribution safety terminal module based on the memory usage abnormal value, the process startup number abnormal value, the process running time abnormal value, the flow size abnormal value and the flow rate abnormal value, so as to obtain the comprehensive abnormal value of each power distribution safety terminal module; The abnormal state judgment module is used to judge whether the comprehensive abnormal value of each power distribution safety terminal module exceeds the preset comprehensive abnormal threshold. If so, the state of the power distribution safety terminal module is regarded as an abnormal state; if not, continue monitoring.

6. The monitoring device based on the power distribution safety terminal module according to claim 5 is characterized in that: The operation abnormal value calculation module includes: a memory occupancy rate calculation unit, a memory occupancy abnormal value calculation unit, a process startup times abnormal value calculation unit, and a process running time abnormal value calculation unit; The memory occupancy rate calculation unit is used to calculate the memory occupancy rate of each time period for each power distribution safety terminal module according to the amount of memory being used and the total amount of memory in each time period in the memory occupancy data; The memory occupancy abnormal value calculation unit is used to calculate the memory occupancy abnormal value of each power distribution safety terminal module according to the memory occupancy rate of each time period, the number of time periods for collecting operation data, and the standard memory occupancy rate; The process startup number abnormal value calculation unit is used to calculate the process startup number abnormal value of each power distribution safety terminal module according to the number of time periods for collecting operation data, the standard process startup number and the process startup number in each time period in the memory usage data; The process running time abnormal value calculation unit is used to calculate the process running time abnormal value of each distribution safety terminal module according to the number of time periods for collecting running data, the standard process running time and the process running time of each time period in the memory occupancy data.

7. The monitoring device based on the power distribution safety terminal module according to claim 6 is characterized in that: The flow abnormal value calculation module includes: a flow size abnormal value calculation unit and a flow rate abnormal value calculation unit; The flow size abnormal value calculation unit is used to calculate the flow size abnormal value of each power distribution safety terminal module according to the standard flow size, the total monitoring time of the flow size and the flow size collected at each moment in the flow size data for each power distribution safety terminal module; The flow rate abnormal value calculation unit is used to calculate the flow rate abnormal value of each power distribution safety terminal module according to the standard flow rate, the total monitoring time of the flow and the flow rate collected at each moment in the flow size data.

8. The monitoring device based on the power distribution safety terminal module according to claim 7 is characterized in that: Also includes: Abnormal location module; The abnormality locating module is used to obtain the IP address of the power distribution safety terminal module that is considered to be in an abnormal state, and use the IP address as a locating identifier.

9. A terminal device, characterized in that: It comprises a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor. When the processor executes the computer program, it implements the monitoring method based on the power distribution safety terminal module as described in any one of claims 1 to 4.

10. A computer-readable storage medium, characterized in that: include: A stored computer program, wherein when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute the monitoring method based on the power distribution safety terminal module as described in any one of claims 1-4.

Images