New energy power grid system internal and external network security analysis method, system, equipment and medium

Abstract

The invention relates to a new energy power grid system internal and external network security analysis method and system, and the method comprises the steps: obtaining the log data of a new energy power grid system in real time, carrying out the monitoring and alarm processing of the attack effective data, and obtaining the data of the new energy power grid system, obtaining alarm data matched with the attack effective data, performing alarm solution strategy matching processing on the alarm data, performing timed task matching processing on each piece of attack effective data to obtain a corresponding alarm timed task strategy, and according to the alarm timed task strategy, performing timed task matching processing on each piece of attack effective data. And performing timing asynchronous distribution processing on the alarm data to obtain an asynchronous data distribution strategy of the alarm data so as to perform dynamic asynchronous deployment on the attack effective data. The application has the effects of improving the safety analysis capability of the safety protection module of the new energy power grid system and improving the safety of the new energy power grid system.

Description

Technical Field

[0001] The present invention relates to the technical field of power grid system security protection, and in particular to a new energy power grid system internal and external network security analysis method, system, equipment and medium. Background Art

[0003] At present, with the miniaturization and networking of power grids, the application of Internet of Things technology in power systems has been rapidly developed. A lightweight security protection module is deployed on the intelligent gateway (the uplink proxy gateway of the Internet of Things terminal) to collect data from edge devices and downstream devices in real time, perform data fusion and correlation analysis and processing in the near field, and provide technical personnel with security monitoring, analysis, disposal and unified configuration and arrangement of various security technical protection facilities rules.

[0004] However, the existing security protection module is limited by the environment of the Internet of Things agent and only has simple data fusion and correlation analysis capabilities, which cannot meet the complex new energy power grid environment, thereby reducing the security protection capabilities of the new energy power grid system. Therefore, there is room for improvement. Summary of the invention

[0005] In order to improve the security analysis capability of the security protection module of the new energy power grid system and improve the security of the new energy power grid system, the present application provides a new energy power grid system internal and external network security analysis method, system, equipment and medium.

[0006] The above-mentioned invention objective of the present application is achieved through the following technical solutions: A method for analyzing the security of internal and external networks of a new energy power grid system is provided, and the method for analyzing the security of internal and external networks of a new energy power grid system comprises: Acquire log data of the new energy power grid system in real time, wherein the log data of the new energy power grid system includes consumed data and attack valid data; Performing monitoring and alarm processing on the attack valid data to obtain alarm data respectively matching the attack valid data; Perform alarm resolution strategy matching processing on the alarm data, and perform scheduled task matching processing on each attack valid data to obtain the corresponding alarm scheduled task strategy; According to the alarm timing task strategy, the alarm data is subjected to timed asynchronous distribution processing to obtain an asynchronous data distribution strategy for the alarm data, so as to facilitate dynamic asynchronous deployment of attack valid data.

[0007] By adopting the above technical solution, the log data of the new energy power grid system of the business data in the internal and external networks of the new energy power grid system is obtained to monitor the data processing progress of the effective attack data in real time, and the alarm data is obtained by monitoring the effective attack data, which is helpful to monitor the real-time processing status of the effective attack data, and through the matching result of the alarm resolution strategy, the timed task matching processing is performed for each effective attack data, and the alarm resolution strategy is executed in a staggered manner according to the alarm timed task strategy, so as to achieve the effect of dynamically allocating business processing resources, thereby reducing data congestion, and by performing timed asynchronous distribution processing on the alarm data, an asynchronous data distribution strategy matching the alarm data is obtained, so as to facilitate the dynamic allocation of data resources of the internal and external networks of the new energy power grid system according to the actual situation of each effective attack data, to perform staggered asynchronous execution of the business data, reduce the situation that data loss is easy to occur during the data peak period, and make the complete data transmission link of each message data can be accurately traced, thereby improving the data processing performance of the internal and external networks of the new energy power grid system for advertising data, and improving the high availability of the message framework.

[0008] In a preferred example, the present application can be further configured as follows: after the real-time acquisition of the log data of the new energy power grid system, and before the monitoring and alarm processing of the attack valid data to obtain the alarm data respectively matching the attack valid data, it also includes: Obtain data distribution requests sent by all new energy grid system equipment in real time; According to the data distribution request, the current idle bandwidth resource capacity of the internal and external networks of the new energy power grid system is calculated to obtain the current bandwidth to be allocated of the internal and external networks of the new energy power grid system; Calculating the idleness of the transmission link between the internal and external networks of the new energy power grid system and each new energy power grid system device to obtain an idle value of the transmission link that can be used for data distribution; According to the idle value of the transmission link and the current bandwidth to be allocated, bandwidth resource allocation processing is performed on the data distribution request, so that the internal and external networks of the new energy power grid system can smoothly distribute the target data.

[0009] By adopting the above technical solution, since in the advertising agency delivery, especially during the promotion period, it is easy for a large number of users to request data distribution requests from the new energy power grid system devices at the same time, it is easy to cause congestion of the message middleware through the data synchronization process, thereby causing the loss of overloaded data. Therefore, by obtaining the data distribution requests sent by all new energy power grid system devices to the new energy power grid system's internal and external networks in real time, it is helpful to accurately match the corresponding data processing resources according to the data distribution requests, calculate the current idle bandwidth resource capacity of the new energy power grid system's internal and external networks according to the data distribution requests, and help to dynamically allocate the corresponding bandwidth resources according to the current bandwidth to be allocated of the new energy power grid system's internal and external networks, reduce the ineffective use of bandwidth resources, and The calculation of the idle degree of the transmission link between the system's internal and external networks and each new energy power grid system device can obtain the idle value of the transmission link that can be used for data distribution, which helps to judge whether the current data transmission is at a peak period based on the idle value of the transmission link, and helps to stagger the transmission of business data based on the judgment result. The bandwidth resources are accurately allocated according to the idle value of the transmission link and the current bandwidth to be allocated, so that the high-availability data framework can accurately distribute the target data, reduce data overflow or invalid occupation of bandwidth resources caused by mismatch between data and required bandwidth resource allocation, and reduce data loss caused by data overflow, thereby improving the security analysis capability of the security protection module of the new energy power grid system and improving the security of the new energy power grid system.

[0010] In a preferred example, the present application can be further configured as follows: performing bandwidth resource allocation processing on the data distribution request according to the idle value of the transmission link and the current bandwidth to be allocated, so that each target data can be smoothly distributed within the intranet and extranet of the new energy power grid system, and further comprising: Obtain the waiting time for bandwidth resources to be allocated for each target data in real time; According to the waiting time to be allocated, the bandwidth resources required by each target data are allocated rights to obtain a priority queue of all target data; According to the priority queue, bandwidth resources of the internal and external networks of the new energy power grid system are allocated to the target data with the best priority, so as to preferentially distribute data to the target data with the best priority; When the target data matches the corresponding bandwidth resources, the target data is sent to the corresponding new energy power grid system equipment and synchronous backup processing is performed.

[0011] By adopting the above technical solution, since the bandwidth resources required for the target data of each new energy power grid system device are different, the bandwidth resources required for business data transmission are also different, which causes the time consumption of allocating bandwidth resources in the internal and external networks of the new energy power grid system to be different. Therefore, according to the waiting time for allocation of bandwidth resources required for each target data, the processing order of the target data is adjusted, so that each message data can be processed and executed in time, and the authority of all target data is allocated according to the length of the waiting time to be allocated, which is helpful to orderly allocate bandwidth resources according to the priority queue, improve the orderliness of data processing in the internal and external networks of the new energy power grid system, and reduce the bandwidth allocation waiting time of the optimal target data by giving priority to the target data with the best priority, improve the timeliness of data processing of business data, when the target data matches the corresponding bandwidth resources, send the target data to the corresponding new energy power grid system device, so as to reduce the data overflow loss caused by the mismatch between the bandwidth resources and the target data to be transmitted, thereby improving the reliability of the internal and external networks of the new energy power grid system, and reduce the loss of target data by synchronous backup of the target data, and improve the high availability and data security of the internal and external networks of the new energy power grid system.

[0012] In a preferred example, the present application may be further configured as follows: the current idle bandwidth resource capacity of the new energy power grid system internal and external networks is calculated according to the data distribution request to obtain the current bandwidth to be allocated of the new energy power grid system internal and external networks, and further comprising: Searching for corresponding target data according to the data distribution request, and calculating a data transmission bandwidth value of the target data; Calculate the current remaining bandwidth capacity of the internal and external networks of the new energy power grid system to obtain the current remaining bandwidth capacity value of the internal and external networks of the new energy power grid system; Compare the data transmission bandwidth value with the current remaining bandwidth capacity, and determine whether the internal and external networks of the new energy power grid system meet the target data transmission requirements according to the comparison result; If not, the current remaining bandwidth capacity value is called to meet the demand of the data transmission bandwidth value, and the waiting calling time of the current remaining bandwidth capacity value is counted.

[0013] By adopting the above technical solution, since the internal and external networks of the new energy power grid system need to process multiple business data requests at the same time, the current remaining broadband capacity may not match the data transmission bandwidth value of the target data. Therefore, according to the data distribution request, the corresponding target data is found in the internal and external networks of the new energy power grid system, and the data transmission bandwidth value of the target data is calculated, so as to help to allocate the corresponding bandwidth resources in real time according to the data transmission bandwidth value, improve the accuracy of bandwidth resource allocation, and calculate the current remaining bandwidth capacity of the internal and external networks of the new energy power grid system, which helps to allocate to the corresponding target data in real time according to the current remaining bandwidth capacity value, improve the adaptability of the target data to the current remaining bandwidth capacity, and then judge whether the internal and external networks of the new energy power grid system can meet the transmission requirements of the target data according to the comparison result between the data transmission bandwidth value and the current remaining bandwidth capacity. If it meets the requirements, the corresponding bandwidth resources are directly called for target data transmission. If not, the transmission of the target data enters the waiting stage, and the current remaining bandwidth capacity of the internal and external networks of the new energy power grid system is called until it meets the requirements of the data transmission bandwidth value, thereby reducing the loss of business data caused by data overflow, and the waiting call time of the current remaining bandwidth capacity value of the internal and external networks of the new energy power grid system is counted, and the allocation order of bandwidth resources is adjusted according to the waiting call time, thereby improving the timeliness of business data processing.

[0014] In a preferred example, the present application may be further configured as follows: before searching for the corresponding target data according to the data distribution request and calculating the data transmission bandwidth value of the target data, the present application may further include: According to the data distribution request, the configuration initialization processing is performed on the internal and external networks of the new energy power grid system to obtain the configuration item data that meets the data distribution request; According to the configuration item data, uniformly configure each configuration parameter value of the new energy power grid system device middleware so that the configuration of the new energy power grid system device middleware meets the requirements of the data distribution request; Upon receiving the data distribution request, associating the target new energy power grid system device with the new energy power grid system device middleware to obtain a new energy power grid system device association relationship between the target new energy power grid system device and the new energy power grid system device middleware; According to the association relationship of the new energy power grid system equipment, the corresponding message sender in the new energy power grid system internal and external network is called to perform data distribution processing, so as to perform targeted configuration on each target new energy power grid system equipment.

[0015] By adopting the above technical scheme, the configuration initialization processing of the internal and external networks of the new energy power grid system is carried out in real time according to the data distribution request, so that the configuration item data of the internal and external networks of the new energy power grid system are more in line with the needs of the data distribution request. Through the unified configuration of the abstract new energy power grid system equipment middleware of the internal and external networks of the new energy power grid system, the new energy power grid system equipment configuration is dynamically configured according to real-time business needs, reducing the underlying data changes of the internal and external networks of the new energy power grid system caused by each change of the new energy power grid system equipment. When receiving the data distribution request, each new energy power grid system equipment can inherit the configuration parameters of each configuration item from the new energy power grid system equipment middleware according to the association relationship of the new energy power grid system equipment, and call the corresponding message sender to distribute the data, thereby simplifying the configuration steps of the configuration parameters of the new energy power grid system equipment according to business needs and improving the configuration efficiency of the internal and external networks of the new energy power grid system.

[0016] In a preferred example, the present application may be further configured as follows: before the real-time acquisition of log data of the new energy power grid system, the present application may further include: Real-time acquisition of business data sent from the database to the internal and external networks of the new energy power grid system; Compare the business data with the initialization data in the database to obtain the accumulated data that was not successfully consumed; Performing timed task matching processing on the accumulated data to obtain a timed allocation strategy for the accumulated data, so as to allocate the accumulated data according to the timed allocation strategy for the accumulated data; When the accumulated data exceeds a preset threshold, an accumulation monitoring alarm process is performed on the accumulated data to generate an accumulation data alarm solution strategy.

[0017] By adopting the above technical solution, when pulling business data from the database to the intranet and extranet of the new energy power grid system, the comparison result between the business data successfully received by the message framework and the initialization data in the database is used to screen out the unsuccessfully consumed accumulated data in the initialization data, reduce the transmission omissions of business data, and perform timed task matching processing on the accumulated data, thereby obtaining an accumulated data timing allocation strategy, which helps to process the accumulated data regularly according to the accumulated data allocation strategy, so as to achieve the effect of staggered execution of accumulated data processing. When the capacity value of the accumulated data exceeds the preset threshold, the accumulated data is subjected to accumulation monitoring and alarm processing, and an accumulated data alarm resolution strategy is obtained, so as to facilitate timely processing of the accumulated data according to the accumulated data alarm resolution strategy, reduce the transmission link congestion caused by data accumulation, and thus improve the data processing efficiency of the intranet and extranet of the new energy power grid system.

[0018] In a preferred example, the present application can be further configured as follows: performing a timed asynchronous distribution process on the alarm data according to the alarm timing task strategy to obtain an asynchronous data distribution strategy for the alarm data, so as to dynamically and asynchronously allocate the attack valid data, and further comprising: Real-time acquisition of log data of the new energy power grid system during the periodic asynchronous distribution of the alarm data; When the log data of the new energy power grid system is abnormal, a reallocation instruction is generated to call the attack valid data for redistribution, so as to reconnect the alarm data with abnormal data distribution.

[0019] By adopting the above technical scheme, in the process of regular asynchronous distribution of alarm data according to the asynchronous data distribution strategy, the log data of the new energy power grid system of each alarm data is obtained in real time, including successful distribution and abnormal distribution, and when the log data of the new energy power grid system is abnormal, such as alarm data loss, transmission link interruption, etc., the redistribution instruction is called according to the abnormal situation to redistribute the attack valid data, such as rebuilding the transmission link between the new energy power grid system equipment and the internal and external networks of the new energy power grid system, and re-calling the corresponding business data from the database for redistribution, so as to achieve data reconnection of the alarm data with data distribution abnormality, reduce the data loss of the alarm data, and thus improve the reliability of the high-availability system.

[0020] The second object of the invention is achieved by the following technical solutions: A new energy power grid system internal and external network security analysis system is provided, characterized in that the new energy power grid system internal and external network security analysis system comprises: A data status acquisition module, used for acquiring log data of the new energy power grid system in real time, wherein the log data of the new energy power grid system includes consumed data and attack valid data; A data monitoring and processing module, used for performing monitoring and alarm processing on the attack valid data, and obtaining alarm data respectively matching the attack valid data; A strategy matching processing module is used to perform alarm resolution strategy matching processing on the alarm data, and perform timed task matching processing on each attack valid data to obtain a corresponding alarm timed task strategy; The asynchronous distribution processing module is used to perform timed asynchronous distribution processing on the alarm data according to the alarm timing task strategy, and obtain the asynchronous data distribution strategy of the alarm data, so as to facilitate dynamic asynchronous deployment of attack valid data.

[0021] By adopting the above technical solution, the log data of the new energy power grid system of the business data in the internal and external networks of the new energy power grid system is obtained to monitor the data processing progress of the effective attack data in real time. By monitoring and alarming the effective attack data, the alarm data is obtained, which is helpful to monitor the real-time processing status of the effective attack data, and through the matching result of the alarm resolution strategy, the timed task matching processing is performed for each effective attack data, and the alarm resolution strategy is executed in a staggered manner according to the alarm timed task strategy, so as to achieve the effect of dynamically allocating business processing resources and reduce data congestion. The alarm data is distributed asynchronously at a scheduled time to obtain an asynchronous data distribution strategy that matches the alarm data, so as to facilitate the dynamic allocation of data resources of the internal and external networks of the new energy power grid system according to the actual situation of each effective attack data, to perform staggered asynchronous execution of the business data, to reduce the data loss that is easy to occur during the data peak period, and to enable the complete data transmission link of each message data to be accurately traced, thereby improving the security analysis capability of the security protection module of the new energy power grid system and improving the security of the new energy power grid system.

[0022] The third objective of the present application is achieved through the following technical solutions: A computer device comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the above-mentioned method for analyzing the internal and external network security of a new energy power grid system when executing the computer program.

[0023] The fourth objective of the present application is achieved through the following technical solutions: A computer-readable storage medium stores a computer program, which, when executed by a processor, implements the steps of the above-mentioned new energy power grid system internal and external network security analysis method.

[0024] In summary, the present application includes at least one of the following beneficial technical effects: 1. By acquiring the log data of the new energy power grid system of the business data in the internal and external networks of the new energy power grid system, the data processing progress of the effective attack data is monitored in real time. By monitoring and alarming the effective attack data, the alarm data is obtained, which is helpful to monitor the real-time processing status of the effective attack data, and through the matching result of the alarm resolution strategy, the timed task matching processing is performed for each effective attack data, and the alarm resolution strategy is executed in a staggered manner according to the alarm timed task strategy, so as to achieve the effect of dynamically allocating business processing resources and reduce data congestion. By performing timed asynchronous distribution processing on the alarm data, an asynchronous data distribution strategy matching the alarm data is obtained, so as to facilitate the dynamic allocation of data resources of the internal and external networks of the new energy power grid system according to the actual situation of each effective attack data, to perform staggered asynchronous execution of the business data, to reduce the situation that data loss is easy to occur during the data peak period, so that the complete data transmission link of each message data can be accurately traced, thereby improving the security analysis capability of the security protection module of the new energy power grid system and improving the security of the new energy power grid system; 2. By acquiring data distribution requests sent by all new energy power grid system devices to the internal and external networks of the new energy power grid system in real time, it is helpful to accurately match the corresponding data processing resources according to the data distribution requests, calculate the current idle bandwidth resource capacity of the internal and external networks of the new energy power grid system according to the data distribution requests, and dynamically allocate the corresponding bandwidth resources according to the current bandwidth to be allocated of the internal and external networks of the new energy power grid system, thereby reducing the ineffective use of bandwidth resources. According to the calculation of the idle degree of the transmission link between the internal and external networks of the new energy power grid system and each new energy power grid system device, the idle value of the transmission link that can be used for data distribution is obtained, which is helpful to judge whether the current data transmission is in the peak period according to the idle value of the transmission link, and to perform the transmission of business data in a staggered manner according to the judgment result. According to the idle value of the transmission link and the current bandwidth to be allocated, the bandwidth resources are accurately allocated, so that the high-availability data framework can accurately distribute the target data, reduce the data overflow or invalid occupation of bandwidth resources caused by the mismatch between the data and the required bandwidth resource allocation, and reduce the data loss caused by the data overflow, thereby improving the timeliness of the consumption processing of the target data, and improving the timeliness and reliability of the data processing of the internal and external networks of the new energy power grid system; 3. According to the waiting time for bandwidth resources required for each target data, the processing order of the target data is adjusted so that each message data can be processed and executed in time, and the authority of all target data is allocated according to the length of the waiting time to be allocated, which is helpful to orderly allocate bandwidth resources according to the priority queue, improve the orderliness of data processing in the internal and external networks of the new energy power grid system, and reduce the bandwidth allocation waiting time of the best target data by giving priority to the target data with the best priority, and improve the timeliness of data processing of business data. When the target data matches the corresponding bandwidth resources, the target data is sent to the corresponding new energy power grid system equipment to reduce the data overflow and loss caused by the mismatch between bandwidth resources and the target data to be transmitted, thereby improving the reliability of the internal and external networks of the new energy power grid system, and reducing the loss of target data by synchronous backup of target data, thereby improving the high availability and data security of the internal and external networks of the new energy power grid system. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 It is a flow chart for implementing a method for analyzing internal and external network security of a new energy power grid system according to an embodiment of the present application.

[0026] Figure 2 It is another implementation flow chart of the method for analyzing internal and external network security of a new energy power grid system according to an embodiment of the present application.

[0027] Figure 3 This is another implementation flow chart of step S102 of the new energy power grid system internal and external network security analysis method according to an embodiment of the present application.

[0028] Figure 4 This is another implementation flowchart of step S201 of the new energy power grid system internal and external network security analysis method in one embodiment of the present application.

[0029] Figure 5 This is another implementation flowchart of step S104 of the new energy power grid system internal and external network security analysis method in one embodiment of the present application.

[0030] Figure 6 This is another implementation flowchart of step S40 of the new energy power grid system internal and external network security analysis method in one embodiment of the present application.

[0031] Figure 7 This is another implementation flow chart before step S10 of the new energy power grid system internal and external network security analysis method in one embodiment of the present application.

[0032] Figure 8 It is a structural diagram of an internal and external network security analysis system of a new energy power grid system according to an embodiment of the present application.

[0033] Fig. 9It is a schematic diagram of the internal structure of computer equipment for realizing the internal and external network security analysis method of the new energy power grid system. DETAILED DESCRIPTION

[0034] The present application is further described in detail below in conjunction with the accompanying drawings.

[0035] In one embodiment, if Figure 1 As shown, the present application discloses a method for analyzing the security of internal and external networks of a new energy power grid system, which specifically includes the following steps: S10: Obtaining log data of the new energy power grid system in real time, wherein the log data of the new energy power grid system includes consumed data and attack valid data.

[0036] Specifically, for example, a heartbeat detection mechanism is established between the internal and external networks of the new energy power grid system and the new energy power grid system equipment. When the new energy power grid system equipment successfully receives the business data, it returns a feedback data packet. After the internal and external networks of the new energy power grid system receive the corresponding feedback data packet, it is determined that the business data transmission is successful. Then, the log data of the new energy power grid system for the business data is marked as consumed data. If the internal and external networks of the new energy power grid system do not receive the feedback data packet, the business data is marked as valid attack data, thereby obtaining the log data of the new energy power grid system for each business data in the internal and external networks of the new energy power grid system.

[0037] In one embodiment, in order to better perform peak-shifting on business data and reduce the congestion of data transmission, as shown in FIG. Figure 2 As shown, before obtaining the log data of the new energy power grid system in real time and performing monitoring and alarm processing on the effective attack data to obtain the alarm data respectively matching the effective attack data, it also includes S101: Acquire data distribution requests sent by all new energy power grid system devices in real time.

[0038] Specifically, based on the unique identification code of the new energy grid system equipment, a data transmission channel is established between the high-availability consumption framework and all the new energy grid system equipment. When the new energy grid system equipment end initiates a data distribution request, the data distribution request is transmitted to the new energy grid system internal and external networks through the corresponding data transmission channel, so that the new energy grid system internal and external networks can pull the corresponding business data according to the data distribution request.

[0039] S102: Calculate the current idle bandwidth resource capacity of the new energy power grid system internal and external networks according to the data distribution request to obtain the current bandwidth to be allocated of the new energy power grid system internal and external networks.

[0040] Specifically, at the same time node, the current idle bandwidth resources of the new energy power grid system's internal and external networks are calculated according to the amount of business data corresponding to the data distribution request. For example, according to the amount of business data, 100 data distribution requests are received per second, and the maximum bandwidth resource capacity of the new energy power grid system's internal and external networks is a maximum allocation of 2000 business data per second, then the current bandwidth resources to be allocated of the new energy power grid system's internal and external networks are 1900, that is, the real-time difference between the maximum bandwidth resource capacity and the business data currently being processed.

[0041] In one embodiment, in order to better evaluate the data distribution performance of the new energy power grid system internal and external networks, such as Figure 3 As shown, step S102 also includes: S201: Search for corresponding target data according to a data distribution request, and calculate a data transmission bandwidth value of the target data.

[0042] Specifically, the corresponding target data is searched according to the data distribution request of the new energy power grid system equipment. For example, in the process of advertising delivery, according to the requirements of the advertising delivery field, advertising delivery time period and advertising delivery target group in the data distribution request, the corresponding target data is searched in the high-availability message queue, such as the advertising delivery field selection, advertising delivery time selection, advertising delivery target group selection, etc. According to the data transmission bandwidth demand of the target data, the data transmission bandwidth value for transmitting the target data to the corresponding new energy power grid system equipment is calculated, such as using the data memory capacity of the target data as the data transmission bandwidth value.

[0043] In one embodiment, in order to reduce the underlying logic changes of the new energy power grid system internal and external networks when the new energy power grid system equipment sends changes, and improve the applicability of the new energy power grid system internal and external networks, such as Figure 4 As shown, before searching for the corresponding target data according to the data distribution request and calculating the data transmission bandwidth value of the target data, it also includes: S301: According to the data distribution request, the configuration initialization processing is performed on the internal and external networks of the new energy power grid system to obtain the configuration item data that meets the data distribution request.

[0044] Specifically, according to the data distribution request, the configuration initialization processing of the new energy power grid system internal and external networks is performed, such as introducing the new energy power grid system internal and external network dependencies corresponding to the data distribution request, configuring various configuration parameters of the abstract new energy power grid system equipment according to the message framework dependency configuration, and using the abstract new energy power grid system equipment as the new energy power grid system equipment middleware. Each new energy power grid system equipment connected to the new energy power grid system internal and external networks inherits the configuration parameters from the new energy power grid system equipment middleware and modifies its own configuration items accordingly, thereby obtaining the configuration item data of the message consumption topic that meets the data distribution request.

[0045] S302: performing unified configuration processing on each configuration parameter value of the new energy power grid system device middleware according to the configuration item data, so that the configuration of the new energy power grid system device middleware meets the requirements of the data distribution request.

[0046] Specifically, each configuration parameter value of the new energy power grid system equipment middleware is uniformly configured according to the configuration item data, so that when a data distribution request of the new energy power grid system equipment is received, the corresponding dependency items are found in the internal and external networks of the new energy power grid system, and each configuration parameter value of the new energy power grid system equipment middleware is uniformly configured according to the corresponding dependency items, such as the configuration of the advertising delivery area, population and delivery range, so that the new energy power grid system equipment middleware configuration meets the requirements of the data distribution request.

[0047] S303: upon receiving the data distribution request, associating the target new energy power grid system device with the new energy power grid system device middleware to obtain a new energy power grid system device association relationship between the target new energy power grid system device and the new energy power grid system device middleware.

[0048] Specifically, when a data distribution request is received, the target new energy grid system device is registered to the new energy grid system internal and external networks according to the unique identification code of the target new energy grid system device, such as the IP address of the target new energy grid system device, and the successfully registered target new energy grid system device is associated with the new energy grid system device middleware, thereby obtaining the new energy grid system device association relationship between the target new energy grid system device and the new energy grid system device middleware, such as a one-to-many association relationship between the new energy grid system device middleware and multiple target new energy grid system devices.

[0049] S304: According to the association relationship of the new energy power grid system equipment, the corresponding message sender in the internal and external network of the new energy power grid system is called to perform data distribution processing, so as to perform targeted configuration on each target new energy power grid system equipment.

[0050] Specifically, according to the association relationship of the new energy power grid system equipment, the target new energy power grid system equipment inherits the corresponding configuration parameters from the new energy power grid system equipment middleware, and adjusts its own configuration items to meet the needs of business data, so as to meet the configuration needs of the new energy power grid system equipment without changing the underlying logic of the framework, establish a mapping channel between the target new energy power grid system equipment and the new energy power grid system equipment middleware, and call the corresponding message sender in the new energy power grid system internal and external networks to distribute the business data, so as to facilitate targeted configuration of each target new energy power grid system equipment and select an adapted message sender for data distribution.

[0051] S202: Calculate the current remaining bandwidth capacity of the new energy power grid system's internal and external networks to obtain the current remaining bandwidth capacity value of the new energy power grid system's internal and external networks.

[0052] Specifically, the current remaining bandwidth capacity is calculated by the difference between the maximum bandwidth capacity of the internal and external networks of the new energy power grid system and the currently occupied bandwidth capacity. For example, if the maximum bandwidth capacity is 3000 and the occupied bandwidth capacity is 100, the current remaining bandwidth capacity value is 2000. The current remaining loan capacity value of the internal and external networks of the new energy power grid system is dynamically calculated based on the real-time occupied bandwidth capacity of the internal and external networks of the new energy power grid system.

[0053] S203: Compare the data transmission bandwidth value with the current remaining bandwidth capacity, and determine whether the internal and external networks of the new energy power grid system meet the target data transmission requirements based on the comparison result.

[0054] Specifically, the data transmission bandwidth value is compared with the current remaining bandwidth capacity, and the difference between the data transmission bandwidth value and the current remaining bandwidth capacity is taken as the bandwidth comparison result. According to the comparison result, it is judged whether the current remaining bandwidth capacity of the internal and external networks of the new energy power grid system meets the bandwidth transmission demand of the target data. If the difference within the error range is greater than 0, it means that the current remaining bandwidth capacity does not meet the target data transmission demand. If the error range is less than 0, it means that the current remaining bandwidth resource capacity meets the target data transmission demand.

[0055] S204: If not, call the current remaining bandwidth capacity value to meet the data transmission bandwidth value requirement, and count the waiting call time of the current remaining bandwidth capacity value.

[0056] Specifically, if the current remaining bandwidth capacity value does not meet the target data transmission demand, the target data is divided into the waiting bandwidth resource queue, and the authority value of the target data is calculated. The bandwidth resources of the end thread are called to the remaining bandwidth capacity value according to the authority value, until the remaining bandwidth resource capacity value meets the data transmission bandwidth value demand, and the waiting call time for the target data to wait for the current remaining bandwidth capacity value is calculated, so as to evaluate the data distribution performance of the internal and external networks of the new energy power grid system according to the length of the waiting call time. For example, the shorter the waiting call time, the better the data distribution performance.

[0057] S103: Calculate the idleness of the transmission link between the new energy power grid system internal and external networks and each new energy power grid system device to obtain an idle value of the transmission link that can be used for data distribution.

[0058] Specifically, if it is set that a corresponding data transmission thread is constructed between each new energy power grid system device and the internal and external networks of the new energy power grid system, the internal and external networks of the new energy power grid system can respond to 500 threads per second. According to the number of data distribution requests, such as 50, it means that there are 50 threads waiting for response. After the internal and external networks of the new energy power grid system respond, the idle value of the transmission link waiting for the next data distribution is 450, that is, the idle value of the transmission link that can be used for data distribution is the difference between the highest number of response threads of the internal and external networks of the new energy power grid system and the number of data distribution requests of the new energy power grid system devices being responded.

[0059] S104: performing bandwidth resource allocation processing on the data distribution request according to the idle value of the transmission link and the current bandwidth to be allocated, so that the new energy power grid system internal and external networks can smoothly distribute the target data.

[0060] Specifically, according to whether the idle value of the transmission link meets the data distribution request, for example, if the idle value of the transmission link is 50 and the number of data distribution requests is 100, then according to different priorities, the 50 data distribution requests with the best priority are processed first, and the remaining 50 data distribution requests are processed sequentially according to the length of the waiting time to ensure the orderliness of data processing in the internal and external networks of the new energy power grid system. Secondly, according to whether the current bandwidth value to be allocated meets the bandwidth resource requirements of the business data to be executed, if the bandwidth resources to be allocated are 200 and the bandwidth resources required for the business requirements to be executed are 500, the current data distribution request needs to enter the waiting stage, and the bandwidth resources are allocated to the new energy power grid system equipment with the best priority according to the waiting time. Until the demand for idle bandwidth resources of 500 is met, the current data distribution request is processed to reduce the situation of data overflow and loss caused by insufficient bandwidth resources, so that the internal and external networks of the new energy power grid system can smoothly distribute the target data.

[0061] In one embodiment, in order to improve the orderliness of data distribution of business data, such as Figure 5 As shown, step S104 also includes: S401: Acquire the waiting time for allocation of bandwidth resources required by each target data in real time.

[0062] Specifically, the time taken to call bandwidth resources for each target data is compared, for example, based on the required bandwidth resources of the target data and the remaining bandwidth resources of the internal and external networks of the new energy power grid system. If the remaining bandwidth resources meet the data distribution requirements of the target data, the waiting time to be allocated is 0 within the error range. If the remaining bandwidth resources are less than the required bandwidth resources of the target data, then based on the bandwidth resource difference, wait for the executing thread to end and release the excess bandwidth resources until the required bandwidth resources of the target data are met. The waiting time for bandwidth resource allocation is counted to obtain the waiting time to be allocated of the bandwidth resources required for each target data.

[0063] S402: According to the waiting time to be allocated, the bandwidth resources required by each target data are allocated rights to obtain the priority queues of all target data.

[0064] Specifically, the bandwidth resources required for each target data are allocated permissions according to the waiting time to be allocated. For example, the longer the waiting time, the higher the permission value of the target data. The target data with the same waiting time is reallocated according to the capacity of the required bandwidth resources. For example, the larger the required bandwidth resources, the lower the priority. That is, the target data with less required bandwidth resources and short bandwidth resource allocation time are distributed first, so as to facilitate the rapid consumption of effective attack data in the internal and external networks of the new energy power grid system and reduce data congestion, thereby obtaining a priority queue for all target data.

[0065] S403: Allocate bandwidth resources of the new energy power grid system's internal and external networks to the target data with the best priority according to the priority queue, so as to preferentially distribute data to the target data with the best priority.

[0066] Specifically, according to the priority queue order, the bandwidth resources of the internal and external networks of the new energy power grid system are targetedly allocated, the target data with the best priority is processed first, and the bandwidth resources are centrally allocated to the target data with the best priority, so as to quickly meet the bandwidth resource needs of the target data with the best priority and improve the data distribution efficiency of the target data with the best priority.

[0067] S404: When the target data matches the corresponding bandwidth resources, the target data is sent to the corresponding new energy power grid system equipment and synchronous backup processing is performed.

[0068] Specifically, when the target data matches the corresponding bandwidth resources, it is judged whether the target data matches the corresponding bandwidth resources based on the difference between the bandwidth resources required by the target data and the idle bandwidth resources in the internal and external networks of the new energy power grid system. Within the error range, when the difference is 0, the target data is automatically sent to the corresponding new energy power grid system equipment through the corresponding data distributor, and the target data is synchronously backed up to the database through the internal and external networks of the new energy power grid system, thereby reducing the loss caused by data loss, and improving the data reliability and security of the internal and external networks of the new energy power grid system through secondary backup storage of the target data.

[0069] S20: Perform monitoring and alarm processing on the attack valid data to obtain alarm data that matches the attack valid data.

[0070] Specifically, when it is detected that the business data is not consumed by the internal and external networks of the new energy power grid system, the business data is marked as attack valid data and matched with a monitoring alarm mechanism, such as transmitting the distribution status of the attack valid data to the client in real time, so that the client can monitor the attack valid data in real time, and can accurately know and perform corresponding processing when the attack valid data is lost, thereby obtaining alarm data matching each attack valid data.

[0071] S30: Perform alarm resolution strategy matching processing on the alarm data, and perform scheduled task matching processing on each attack valid data to obtain the corresponding alarm scheduled task strategy.

[0072] Specifically, trace the abnormal reasons for the attack on the effective data based on the alarm data, including whether the data transmission link between the internal and external networks of the new energy power grid system and the new energy power grid system equipment is transmitted normally, whether the bandwidth resources are compatible with the business data, and whether data overflow occurs during the transmission process, so as to obtain the reasons for the alarm data, and match them with the alarm resolution strategies in the internal and external networks of the new energy power grid system according to the reasons, and perform a preliminary resolution on the alarm data according to the alarm resolution strategy, and judge whether the resolution strategy is successful through the log data of the new energy power grid system of the attack effective data, and perform scheduled task matching processing on each attack effective data, and execute the alarm resolution strategy according to the scheduled tasks, so as to obtain the alarm scheduled task strategy for each attack effective data.

[0073] S40: According to the alarm timing task strategy, the alarm data is asynchronously distributed on a regular basis to obtain an asynchronous data distribution strategy for the alarm data, so as to dynamically and asynchronously allocate the attack valid data.

[0074] Specifically, the alarm data is distributed and processed asynchronously on a regular basis according to the alarm timing task strategy. For example, the attack valid data is sent to the corresponding new energy power grid system equipment end according to the corresponding timing task, and the log data of the new energy power grid system of the alarm data is monitored regularly through the timing task, so that each alarm data is asynchronously executed at the peak of data distribution according to the alarm timing task strategy, thereby obtaining an asynchronous data distribution strategy matching each alarm data, so as to dynamically allocate bandwidth resources to the corresponding attack valid data according to the asynchronous data distribution strategy, facilitate the smooth distribution of the attack valid data, and enable each business data to be executed and processed in a timely and traceable manner, thereby improving the reliability of the internal and external networks of the new energy power grid system.

[0075] In one embodiment, in order to better perform timely data reconnection processing on data in abnormal state, so as to reduce data loss or data accumulation caused by data abnormality, as shown in FIG. Figure 6 As shown, step S40 also includes: S501: Acquire log data of the new energy power grid system in the process of scheduled asynchronous distribution of alarm data in real time.

[0076] Specifically, through a preset data monitoring mechanism, the alarm data in the process of timed asynchronous distribution is monitored, and the log data of the new energy power grid system of the alarm data is obtained, such as the abnormal state of successful distribution and unsuccessful distribution. The abnormal state includes data sent but not successfully received, data not sent, or data overflow causing data loss, etc.

[0077] S502: When an abnormality occurs in the log data of the new energy power grid system, a reallocation instruction is generated to call the attack valid data for redistribution, so as to reconnect the alarm data with abnormal data distribution.

[0078] Specifically, when an abnormality occurs in the log data of the new energy power grid system, such as when the data monitoring mechanism sends a monitoring data packet but fails to successfully receive a feedback data packet, it is determined that an abnormality occurs in the log data of the new energy power grid system. According to the asynchronous data distribution strategy, the data transmission link in the abnormal state is reconnected and repaired, and then the corresponding attack valid data is re-called from the database according to the redistribution instruction for redistribution, thereby reducing the loss of attack valid data due to abnormal data distribution.

[0079] In one embodiment, in the process of distributing business data from the database to the intranet and extranet of the new energy power grid system, in order to reduce the situation where the business data of the database is incompletely transmitted, such as Figure 7 As shown, before step S10, it also includes: S601: Acquire business data sent from the database to the internal and external networks of the new energy power grid system in real time.

[0080] Specifically, all business data is pulled from the database through RocketMQ message middleware, and all business data sent by the database to the internal and external networks of the new energy power grid system are obtained through message monitoring mechanisms such as heartbeat packet monitoring mechanism. When the business data is sent to the internal and external networks of the new energy power grid system, a feedback data packet of successful consumption will be fed back. When the database end receives the corresponding feedback data packet, it indicates that the business data has been successfully received by the internal and external networks of the new energy power grid system.

[0081] S602: Compare the business data with the initialization data in the database to obtain the accumulated data that was not successfully consumed.

[0082] Specifically, the business data in the internal and external networks of the new energy power grid system are compared with the initialization data in the database, including the data capacity and data identification of the business data. According to the comparison result, the data in the database that has not been consumed by the internal and external networks of the new energy power grid system is marked as accumulated data. The accumulated data refers to the initialization data in the database that has not been successfully sent to the internal and external networks of the new energy power grid system.

[0083] S603: Performing timed task matching processing on the accumulated data to obtain a timed allocation strategy for the accumulated data, so as to allocate the accumulated data according to the timed allocation strategy for the accumulated data.

[0084] Specifically, the accumulated data that have not been successfully consumed are matched with scheduled tasks respectively, and the accumulated data are consumed again in a staggered manner through the accumulated data timing allocation strategy, including priority sorting according to the accumulation time of the accumulated data and the required bandwidth resources, and the accumulated data with the best priority is processed first according to the priority sorting results, thereby speeding up the processing efficiency of the accumulated data.

[0085] S604: When the accumulated data exceeds a preset threshold, an accumulation monitoring alarm process is performed on the accumulated data to generate an accumulation data alarm solution strategy.

[0086] Specifically, in the process of the accumulated data waiting to be processed again according to the scheduled task, the number of the waiting accumulated data is counted in real time. When the number of accumulated data exceeds the preset threshold, such as 2000 data processing threads supported by the database per second, when the number of accumulated data exceeds 2000, it is easy to cause the database to crash, causing the entire system to crash. Therefore, after the number of accumulated data exceeds the maximum preset threshold that can be processed, the accumulated data is monitored and alarmed. The accumulated data is processed first according to the accumulated data alarm solution strategy, so that the accumulated data can accelerate data reconnection, and the accumulated data alarm solution strategy is sent to the management end, which is convenient for internal personnel to check and solve problems in time, thereby further improving the reliability of the internal and external networks of the new energy power grid system.

[0087] It should be understood that the size of the serial numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0088] In one embodiment, a new energy power grid system internal and external network security analysis system is provided, and the new energy power grid system internal and external network security analysis system corresponds to the new energy power grid system internal and external network security analysis method in the above embodiment. Figure 8 As shown, the new energy power grid system internal and external network security analysis system includes a data status acquisition module, a data monitoring processing module, a strategy matching processing module and an asynchronous distribution processing module. The detailed description of each functional module is as follows: The data status acquisition module is used to acquire the log data of the new energy power grid system in real time, wherein the log data of the new energy power grid system includes consumed data and attack valid data.

[0089] The data monitoring and processing module is used to perform monitoring and alarm processing on the effective attack data to obtain alarm data that matches the effective attack data.

[0090] The strategy matching processing module is used to perform alarm resolution strategy matching processing on the alarm data, and perform scheduled task matching processing on each attack valid data to obtain the corresponding alarm scheduled task strategy.

[0091] The asynchronous distribution processing module is used to perform timed asynchronous distribution processing on the alarm data according to the alarm timing task strategy, and obtain the asynchronous data distribution strategy of the alarm data, so as to facilitate dynamic asynchronous deployment of effective attack data.

[0092] In one embodiment, in order to better stagger the execution of business data and reduce the congestion of data transmission, after obtaining the log data of the new energy power grid system in real time, and before monitoring and alarming the attack valid data and obtaining the alarm data that matches the attack valid data, it also includes The data distribution request acquisition submodule is used to obtain the data distribution requests sent by all new energy power grid system devices in real time.

[0093] The bandwidth to be allocated calculation submodule is used to calculate the current idle bandwidth resource capacity of the new energy power grid system internal and external networks according to the data distribution request, and obtain the current bandwidth to be allocated of the new energy power grid system internal and external networks.

[0094] The transmission link idle value calculation submodule is used to calculate the idleness of the transmission link between the internal and external networks of the new energy power grid system and each new energy power grid system device to obtain the transmission link idle value that can be used for data distribution.

[0095] The bandwidth resource allocation submodule is used to allocate bandwidth resources for data distribution requests according to the idle value of the transmission link and the current bandwidth to be allocated, so that the target data can be distributed smoothly within the internal and external networks of the new energy power grid system.

[0096] In one embodiment, in order to improve the orderliness of data distribution of service data, the bandwidth resource allocation submodule further includes: The waiting time acquisition submodule is used to acquire the waiting time to be allocated of the bandwidth resources required by each target data in real time; The priority allocation submodule is used to allocate the bandwidth resources required by each target data according to the waiting time to be allocated, and obtain the priority queue of all target data; The bandwidth resource priority allocation submodule is used to allocate the bandwidth resources of the new energy power grid system's internal and external networks to the target data with the best priority according to the priority queue, so as to preferentially distribute the data to the target data with the best priority; The data allocation submodule is used to send the target data to the corresponding new energy power grid system equipment and perform synchronous backup processing when the target data matches the corresponding bandwidth resources.

[0097] In one embodiment, in order to better evaluate the data distribution performance of the new energy power grid system internal and external networks, the bandwidth calculation submodule to be allocated further includes: The data transmission bandwidth value calculation submodule is used to find the corresponding target data according to the data distribution request and calculate the data transmission bandwidth value of the target data.

[0098] The current remaining bandwidth capacity calculation submodule is used to calculate the current remaining bandwidth capacity of the internal and external networks of the new energy power grid system to obtain the current remaining bandwidth capacity value of the internal and external networks of the new energy power grid system.

[0099] The bandwidth capacity comparison submodule is used to compare the data transmission bandwidth value with the current remaining bandwidth capacity, and judge whether the internal and external networks of the new energy power grid system meet the target data transmission requirements based on the comparison results.

[0100] The bandwidth calling submodule is used to call the current remaining bandwidth capacity value to meet the data transmission bandwidth value requirement if not, and to count the waiting calling time of the current remaining bandwidth capacity value.

[0101] In one embodiment, in order to reduce the underlying logic changes of the new energy power grid system internal and external networks when the new energy power grid system device sends changes, and improve the applicability of the new energy power grid system internal and external networks, before searching for the corresponding target data according to the data distribution request and calculating the data transmission bandwidth value of the target data, it also includes: The configuration initialization processing submodule is used to perform configuration initialization processing on the internal and external networks of the new energy power grid system according to the data distribution request, and obtain configuration item data that meets the data distribution request.

[0102] The configuration processing submodule is used to uniformly configure each configuration parameter value of the new energy power grid system equipment middleware according to the configuration item data, so that the new energy power grid system equipment middleware configuration meets the requirements of the data distribution request.

[0103] The new energy grid system equipment association submodule is used to associate the target new energy grid system equipment with the new energy grid system equipment middleware when receiving a data distribution request, and obtain the new energy grid system equipment association relationship between the target new energy grid system equipment and the new energy grid system equipment middleware.

[0104] The data distribution processing submodule is used to call the corresponding message sender in the internal and external networks of the new energy power grid system to perform data distribution processing according to the association relationship of the new energy power grid system equipment, so as to facilitate targeted configuration of each target new energy power grid system equipment.

[0105] In one embodiment, in the process of distributing business data from the database to the intranet and extranet of the new energy power grid system, in order to reduce the situation where the business data transmission of the database is incomplete, before obtaining the log data of the new energy power grid system in real time, it also includes: The business data acquisition submodule is used to obtain the business data sent by the database to the internal and external networks of the new energy power grid system in real time.

[0106] The accumulated data acquisition submodule is used to compare the business data with the initialization data in the database to obtain the accumulated data that was not successfully consumed.

[0107] The accumulation timing allocation submodule is used to perform timing task matching processing on the accumulation data to obtain the accumulation data timing allocation strategy so as to allocate the accumulation data according to the accumulation data timing allocation strategy.

[0108] The accumulation monitoring and alarm submodule is used to perform accumulation monitoring and alarm processing on the accumulation data when the accumulation data exceeds a preset threshold and generate an accumulation data alarm solution strategy.

[0109] In one embodiment, in order to better perform timely data reconnection processing on data in an abnormal state and to reduce data loss or data accumulation caused by data anomalies, the asynchronous distribution processing module further includes: The log data acquisition submodule of the new energy power grid system is used to acquire the log data of the new energy power grid system in real time during the periodic asynchronous distribution of alarm data.

[0110] The data reconnection processing submodule is used to generate a redistribution instruction for calling the attack valid data for redistribution when the log data of the new energy power grid system is abnormal, so as to facilitate data reconnection of the alarm data with abnormal data distribution.

[0111] For the specific limitations of the internal and external network security analysis system of the new energy power grid system, please refer to the limitations of the internal and external network security analysis method of the new energy power grid system mentioned above, which will not be repeated here. Each module in the above-mentioned internal and external network security analysis system of the new energy power grid system can be implemented in whole or in part through software, hardware and a combination thereof. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0112] In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as follows: Fig. 9 As shown. The computer device includes a processor, a memory, a network interface and a database connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store all business data and intermediate files generated by processing business data in the internal and external networks of the new energy power grid system. The network interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a method for security analysis of the internal and external networks of the new energy power grid system is implemented.

[0113] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps of the above-mentioned method for analyzing the internal and external network security of a new energy power grid system are implemented.

[0114] Those of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be implemented by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application may include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

[0115] Those skilled in the art will clearly understand that for the sake of convenience and brevity of description, only the division of the above-mentioned functional units and modules is used as an example. In actual applications, the above-mentioned functions can be distributed and completed by different functional units and modules as needed, that is, the internal structure of the system can be divided into different functional units or modules to complete all or part of the functions described above.

[0116] The embodiments described above are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, a person skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application, and should all be included in the protection scope of the present application.

Claims

1. A new energy power grid system internal and external network security analysis method, characterized in that: The new energy power grid system internal and external network security analysis method includes: Acquire log data of the new energy power grid system in real time, wherein the log data of the new energy power grid system includes consumed data and attack valid data; Performing monitoring and alarm processing on the attack valid data to obtain alarm data respectively matching the attack valid data; Perform alarm resolution strategy matching processing on the alarm data, and perform scheduled task matching processing on each attack valid data to obtain the corresponding alarm scheduled task strategy; According to the alarm timing task strategy, the alarm data is subjected to timed asynchronous distribution processing to obtain an asynchronous data distribution strategy for the alarm data, so as to facilitate dynamic asynchronous deployment of attack valid data.

2. The method for analyzing the security of the internal and external networks of the new energy power grid system according to claim 1 is characterized in that: In the real-time acquisition of the log data of the new energy power grid system, and before the monitoring and alarm processing of the effective attack data is performed to obtain the alarm data respectively matching the effective attack data, it also includes Obtain data distribution requests sent by all new energy grid system equipment in real time; According to the data distribution request, the current idle bandwidth resource capacity of the internal and external networks of the new energy power grid system is calculated to obtain the current bandwidth to be allocated of the internal and external networks of the new energy power grid system; Calculating the idleness of the transmission link between the internal and external networks of the new energy power grid system and each new energy power grid system device to obtain an idle value of the transmission link that can be used for data distribution; According to the idle value of the transmission link and the current bandwidth to be allocated, bandwidth resource allocation processing is performed on the data distribution request, so that the internal and external networks of the new energy power grid system can smoothly distribute the target data.

3. The method for analyzing the security of the internal and external networks of the new energy power grid system according to claim 2 is characterized in that: The method of performing bandwidth resource allocation processing on the data distribution request according to the transmission link idle value and the current bandwidth to be allocated, so that each target data can be smoothly distributed in the internal and external networks of the new energy power grid system, further includes: Obtain the waiting time for bandwidth resources to be allocated for each target data in real time; According to the waiting time to be allocated, the bandwidth resources required by each target data are allocated rights to obtain a priority queue of all target data; According to the priority queue, bandwidth resources of the internal and external networks of the new energy power grid system are allocated to the target data with the best priority, so as to preferentially distribute data to the target data with the best priority; When the target data matches the corresponding bandwidth resources, the target data is sent to the corresponding new energy power grid system equipment and synchronous backup processing is performed.

4. The method for analyzing the security of the internal and external networks of the new energy power grid system according to claim 2 is characterized in that: The method further comprises: calculating the current idle bandwidth resource capacity of the internal and external networks of the new energy power grid system according to the data distribution request to obtain the current bandwidth to be allocated of the internal and external networks of the new energy power grid system; Searching for corresponding target data according to the data distribution request, and calculating a data transmission bandwidth value of the target data; Calculate the current remaining bandwidth capacity of the internal and external networks of the new energy power grid system to obtain the current remaining bandwidth capacity value of the internal and external networks of the new energy power grid system; Compare the data transmission bandwidth value with the current remaining bandwidth capacity, and determine whether the internal and external networks of the new energy power grid system meet the target data transmission requirements according to the comparison result; If not, the current remaining bandwidth capacity value is called to meet the demand of the data transmission bandwidth value, and the waiting calling time of the current remaining bandwidth capacity value is counted.

5. The method for analyzing the security of the internal and external networks of the new energy power grid system according to claim 4 is characterized in that: Before searching for the corresponding target data according to the data distribution request and calculating the data transmission bandwidth value of the target data, the method further includes: According to the data distribution request, the configuration initialization processing is performed on the internal and external networks of the new energy power grid system to obtain the configuration item data that meets the data distribution request; According to the configuration item data, uniformly configure each configuration parameter value of the new energy power grid system device middleware so that the configuration of the new energy power grid system device middleware meets the requirements of the data distribution request; Upon receiving the data distribution request, associating the target new energy power grid system device with the new energy power grid system device middleware to obtain a new energy power grid system device association relationship between the target new energy power grid system device and the new energy power grid system device middleware; According to the association relationship of the new energy power grid system equipment, the corresponding message sender in the new energy power grid system internal and external network is called to perform data distribution processing, so as to perform targeted configuration on each target new energy power grid system equipment.

6. The method for analyzing the security of the internal and external networks of the new energy power grid system according to claim 1 is characterized in that: Before obtaining the log data of the new energy power grid system in real time, the method further includes: Real-time acquisition of business data sent from the database to the internal and external networks of the new energy power grid system; Compare the business data with the initialization data in the database to obtain the accumulated data that was not successfully consumed; Performing timed task matching processing on the accumulated data to obtain a timed allocation strategy for the accumulated data, so as to allocate the accumulated data according to the timed allocation strategy for the accumulated data; When the accumulated data exceeds a preset threshold, an accumulation monitoring alarm process is performed on the accumulated data to generate an accumulation data alarm solution strategy.

7. The method for analyzing the security of the internal and external networks of the new energy power grid system according to claim 1 is characterized in that: The method further comprises: performing a timed asynchronous distribution process on the alarm data according to the alarm timing task strategy to obtain an asynchronous data distribution strategy for the alarm data so as to dynamically and asynchronously allocate the attack valid data; Real-time acquisition of log data of the new energy power grid system during the periodic asynchronous distribution of the alarm data; When the log data of the new energy power grid system is abnormal, a reallocation instruction is generated to call the attack valid data for redistribution, so as to reconnect the alarm data with abnormal data distribution.

8. A new energy power grid system internal and external network security analysis system, characterized in that: The new energy power grid system internal and external network security analysis system includes: A data status acquisition module, used to acquire log data of the new energy power grid system in real time, wherein the log data of the new energy power grid system includes consumed data and attack valid data; A data monitoring and processing module, used for monitoring and alarming the effective attack data, and obtaining alarm data respectively matching the effective attack data; A strategy matching processing module is used to perform alarm resolution strategy matching processing on the alarm data, and perform timed task matching processing on each attack valid data to obtain a corresponding alarm timed task strategy; The asynchronous distribution processing module is used to perform timed asynchronous distribution processing on the alarm data according to the alarm timing task strategy, and obtain the asynchronous data distribution strategy of the alarm data, so as to facilitate dynamic asynchronous deployment of attack valid data.

9. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the steps of the method for analyzing the internal and external network security of the new energy power grid system as described in any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the steps of the method for analyzing the internal and external network security of a new energy power grid system as described in any one of claims 1 to 7 are implemented.

Images