Application access security monitoring system based on 5G campus private network

Abstract

The invention discloses an application access security monitoring system based on a 5G campus private network, and particularly relates to the technical field of network security and information. Comprising a sub-region division module, a sub-region access information acquisition module, a sub-region data standardization processing module, a sub-region application access security comprehensive analysis module, a target region application access security comprehensive analysis module, an application access security comprehensive judgment module and an interactive feedback module. According to the method, the application access security of the campus private network is comprehensively monitored through accurate region division, and the application access security is evaluated by constructing a comprehensive mathematical model by collecting the sub-region multi-dimensional information covering the system state, the security event and the state of the Internet of Things equipment. According to the campus private network application access monitoring system, the comprehensiveness and fineness of monitoring are improved, the system performance is optimized through multi-dimensional evaluation, and the overall working efficiency and safety of the campus private network application access monitoring system are effectively improved.

Description

Technical Field

[0001] The present invention relates to the field of network security and information technology, and more specifically, to an application access security monitoring system based on a 5G campus private network. Background Art

[0002] With the rapid development of information technology and the continuous deepening of smart campus construction, various application systems on campus are increasing day by day. How to ensure the secure access and stable operation of these systems has become an important issue in campus information management. Especially in the context of the widespread application of 5G communication technology, the application access security monitoring system based on 5G campus private network has emerged. It aims to provide all-round and efficient security protection for the campus information environment by integrating the high bandwidth and low latency characteristics of 5G with advanced information security technology.

[0003] The application access security monitoring system based on the 5G campus private network is an important tool for addressing the security challenges of smart campuses. It takes advantage of 5G communication technology and combines it with advanced information security technology to provide a comprehensive and efficient security protection solution for the campus information environment.

[0004] However, it still has some shortcomings in actual use, such as the data collected by the existing technology is too single, which makes it difficult to accurately judge the overall situation of the campus private network application access security monitoring system. In addition, the current monitoring of campus private network application access security is mainly judged by a single dimension, such as the number of behaviors that violate the access control policy, and lacks comprehensive indicators. If monitoring is only carried out from a single dimension, the influence of the campus private network level and hardware status is ignored, which in turn affects the final work quality and efficiency of the application access security monitoring system. Summary of the invention

[0005] In order to overcome the above-mentioned defects of the prior art, an embodiment of the present invention provides an application access security monitoring system based on a 5G campus private network, which solves the problems raised in the above-mentioned background technology through the following scheme.

[0006] To achieve the above-mentioned objectives, the present invention provides the following technical solutions: an application access security monitoring system based on a 5G campus private network, comprising a sub-area division module, a sub-area access information collection module, a sub-area data standardization processing module, a sub-area application access security comprehensive analysis module, a target area application access security comprehensive analysis module, an application access security comprehensive judgment module and an interactive feedback module.

[0007] Preferably, the sub-area division module is used to record the campus network coverage area to be monitored as the target monitoring area, divide the target monitoring area into sub-monitoring areas according to the timestamp, and mark them as 1, 2, 3...i in sequence; The sub-area access information collection module includes a system status information collection unit, a security event information collection unit and an Internet of Things device information collection unit, which are used to collect data from the sub-area to obtain comprehensive parameters and output the comprehensive parameters to the sub-area data standardization processing module; The sub-region data standardization processing module is used to standardize the collected data. Since the measurement units of various indicators may be different, the collected data is subjected to Z-score standardization to eliminate the effect of dimension influence and output the processed comprehensive parameters to the sub-region application access security comprehensive analysis module; The sub-region application access security comprehensive analysis module is used to import the data collected in the sub-region access information collection module into the mathematical model of the sub-region security risk coefficient, the mathematical model of the sub-region network performance coefficient, the mathematical model of the sub-region Internet of Things device hardware status coefficient, and the mathematical model of the sub-region private network security access comprehensive performance index and calculate to obtain the sub-region security risk coefficient, the sub-region network performance coefficient, the sub-region Internet of Things device hardware status coefficient, and the sub-region private network security access comprehensive performance index; The target area application access security comprehensive analysis module is used to import the data obtained by the sub-area application access security comprehensive analysis module into the mathematical model of the target area private network security access comprehensive performance index and perform calculations to obtain the target area private network security access comprehensive performance index; The application access security comprehensive judgment module is used to compare the target area private network security access comprehensive performance index with a preset value, and input the comparison result into the interactive feedback module; The interactive feedback module is used to import the comparison result into the administrator terminal, and when the comparison result of the comprehensive performance index of the private network security access in the target area is lower than the preset value, an alarm will be issued to the administrator's equipment.

[0008] Preferably, the specific method for acquiring the comprehensive parameters of each sub-region in the sub-region access information acquisition module is as follows: Comprehensive parameters refer to the sub-area system average response time parameter, sub-area system throughput parameter, sub-area concurrent user number parameter, sub-area system average load parameter, sub-area CPU resource occupancy parameter, sub-area memory occupancy parameter, sub-area bandwidth parameter, sub-area delay parameter, sub-area frequency band parameter, sub-area coverage parameter, sub-area I / O number per second parameter, sub-area vulnerability repair speed parameter, sub-area malicious attack number parameter, sub-area identity authentication success rate parameter, sub-area access control policy violation number parameter, and sub-area blocked illegal access request ratio parameter; The sub-region system average response time parameter refers to the sub-region system average response time ; The sub-area system throughput parameter refers to the sub-area system throughput ; The sub-area concurrent user number parameter refers to the number of concurrent users in the sub-area ; The sub-area system average load parameter refers to the sub-area system average load ; The sub-region CPU resource occupancy rate parameter refers to the sub-region CPU resource occupancy rate ; The sub-region memory occupancy parameter refers to the sub-region memory occupancy ; The sub-area bandwidth parameter refers to the sub-area bandwidth ; The sub-area delay parameter refers to the sub-area delay ; The sub-region frequency band parameter refers to the sub-region frequency band ; The sub-area coverage parameter refers to the sub-area coverage ; The sub-area I / O number per second parameter refers to the number of I / Os per second in the sub-area ; The sub-region vulnerability repair speed parameter refers to the sub-region vulnerability repair speed ; The parameter of the number of malicious attacks on the sub-area refers to the number of malicious attacks on the sub-area ; The sub-region identity authentication success rate parameter refers to the sub-region identity authentication success rate ; The parameter of the number of times the sub-region violates the access control policy refers to the number of times the sub-region violates the access control policy ; The illegal access request ratio parameter blocked in the sub-area refers to the illegal access request ratio blocked in the sub-area. .

[0009] Preferably, the system average response time parameter specifically refers to: the time required for the system to respond to a user request. This time includes the time required for the entire process from the user sending a request from the software client to the user receiving the returned data, as well as the processing time of the middleware (such as the server, database, etc.).

[0010] Preferably, the system throughput parameter specifically refers to: the amount of work that the system can complete per unit time, measuring the processing capacity of the software system server. The measurement unit of throughput can be the number of requests / second, the number of pages / second, the number of visitors / day, the number of transactions processed / hour, etc.

[0011] Preferably, the concurrent user number parameter specifically refers to: the number of users requesting and accessing at the same time. For example, for a certain software, if 100 users request to log in at the same time, then the concurrent user number is 100.

[0012] Preferably, the system average load parameter specifically refers to: the average number of processes in the running queue within a specific time interval, which reflects the average workload of the system over a period of time.

[0013] Preferably, the sub-area I / O number per second parameter specifically refers to: the number of disk I / O operations completed per second, which is an important indicator for measuring disk performance.

[0014] Preferably, the mathematical model of the sub-region safety risk coefficient is as follows: ,in Refers to the safety risk factor of the sub-region, Sub-region vulnerability repair speed, Refers to the number of malicious attacks on the sub-area. Refers to the success rate of identity authentication in the sub-region. Refers to the number of times a sub-area violates the access control policy. Refers to the ratio of illegal access requests blocked in a sub-area.

[0015] Preferably, the mathematical model of the sub-area network performance coefficient is as follows: ,in refers to the sub-area network performance coefficient, Refers to the average response time of the sub-region system. Refers to the sub-region system throughput, Refers to the number of concurrent users in a sub-area. Refers to the average load of the sub-region system. Refers to the sub-area delay, Refers to the maximum load that does not affect system functions based on daily practice.

[0016] Preferably, the mathematical model of the hardware status coefficient of the sub-region IoT device is as follows: ,in Refers to the hardware status coefficient of IoT devices in the sub-region, Refers to the CPU resource usage of the sub-region, Refers to the memory usage of the sub-region. Refers to the sub-area bandwidth, Refers to the sub-region frequency band, Refers to the sub-region coverage, Refers to the number of I / Os per second in the sub-area.

[0017] Preferably, the mathematical model of the sub-region private network security access comprehensive performance index is as follows: ,in Refers to the comprehensive performance index of sub-region private network security access. Refers to the safety risk factor of the sub-region, refers to the sub-area network performance coefficient, Refers to the hardware status coefficient of IoT devices in the sub-region, , , Refers to the weight coefficient.

[0018] Preferably, the weight coefficient , , It is calculated by the entropy method, and the specific calculation steps of the entropy method are as follows: Data standardization: Since the measurement units of various indicators may be different, in order to eliminate the impact of the dimension, the collected data needs to be standardized. Commonly used standardization methods include Z-score standardization and range method standardization; Calculate the proportion of indicators: Calculate the proportion of the i-th sample value under the j-th indicator to the sum of all sample values ​​of the indicator. This step is the basis for the subsequent calculation of information entropy; Calculate information entropy: According to the definition and calculation formula of information entropy, calculate the information entropy ej of the jth indicator. The smaller the information entropy, the greater the degree of variation of the indicator and the greater the amount of information provided; Calculate information entropy redundancy: Information entropy redundancy dj is the complement of information entropy, that is, dj = 1 - ej. The greater the information entropy redundancy, the more information the indicator contains, and the greater the impact on the comprehensive evaluation; Calculate weight: Calculate the weight of each indicator in the comprehensive evaluation according to its information entropy redundancy. The weight coefficient is the ratio of the information entropy redundancy of each indicator to the sum of the information entropy redundancy of all indicators.

[0019] Preferably, the mathematical model of the comprehensive performance index of the target area private network security access is as follows: ,in Refers to the comprehensive performance index of private network security access in the target area. Refers to the comprehensive performance index of sub-region private network security access.

[0020] Preferably, the preset value is a warning value for evaluating the network performance, security risk and hardware status of the campus private network application access security monitoring system obtained based on industry practical experience. When the target area private network security access comprehensive performance index of the target area is lower than the preset value, it means that the network performance in the area is poor, the security risk is high and the hardware status is poor, and corresponding measures need to be taken to reduce the risk.

[0021] Technical effects and advantages of the present invention: 1. The present invention realizes real-time and comprehensive monitoring of the target area through precise area division. The target area is divided into several sub-areas through the sub-area division module, and basic information is collected in each sub-area. The basic information includes sub-area system average response time information, sub-area system throughput information, sub-area concurrent user number information, sub-area system average load information, sub-area CPU resource occupancy information, sub-area memory occupancy information, sub-area bandwidth information, sub-area delay information, sub-area frequency band information, sub-area coverage information, sub-area I / O number per second information, sub-area vulnerability repair speed information, sub-area malicious attack times information, sub-area identity authentication success rate information, sub-area access control policy violation behavior times information, sub-area blocked illegal access request ratio information, covering the system status information, security event information and Internet of Things device information of the campus private network, thereby providing a more comprehensive and detailed monitoring means for the overall performance of the campus private network application access security monitoring system; 2. By conducting an in-depth analysis of the collected data, the present invention establishes a mathematical model that can comprehensively measure the overall situation of campus private network application access security. By establishing such a comprehensive model, the present invention can better measure the overall effect of the low-voltage switchgear from different dimensions. This comprehensive evaluation method can more comprehensively understand the effect of the campus private network application access security monitoring system during actual operation, thereby improving the overall work efficiency of the campus private network application access monitoring system. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 It is a schematic diagram of the overall structure of the present invention. DETAILED DESCRIPTION

[0023] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0024] As attached Figure 1An application access security monitoring system based on a 5G campus private network is shown, comprising a sub-area division module, a sub-area access information collection module, a sub-area data standardization processing module, a sub-area application access security comprehensive analysis module, a target area application access security comprehensive analysis module, an application access security comprehensive judgment module and an interactive feedback module.

[0025] The output end of the sub-area division module is connected to the input end of the sub-area access information collection module by telecommunication, the output end of the sub-area access information collection module is connected to the input end of the sub-area data standardization processing module by telecommunication, the output end of the sub-area data standardization processing module is connected to the input end of the sub-area application access security comprehensive analysis module by telecommunication, the output end of the sub-area application access security comprehensive analysis module is connected to the input end of the target area application access security comprehensive analysis module by telecommunication, the output end of the target area application access security comprehensive analysis module is connected to the input end of the application access security comprehensive judgment module by telecommunication, and the output end of the application access security comprehensive judgment module is connected to the input end of the interactive feedback module by telecommunication.

[0026] The sub-area division module is used to record the campus network coverage area to be monitored as the target monitoring area, divide the target monitoring area into various sub-monitoring areas according to the timestamp, and mark them as 1, 2, 3...i in sequence; The sub-area access information collection module includes a system status information collection unit, a security event information collection unit and an Internet of Things device information collection unit, which are used to collect data from the sub-area to obtain comprehensive parameters and output the comprehensive parameters to the sub-area data standardization processing module; In a preferred technical solution of the present application, the specific method for obtaining the comprehensive parameters of each sub-region in the sub-region access information acquisition module is as follows: In this embodiment, it should be specifically explained that the comprehensive parameters refer to the average response time parameter of the sub-area system, the throughput parameter of the sub-area system, the number of concurrent users of the sub-area, the average load parameter of the sub-area system, the CPU resource occupancy parameter of the sub-area, the memory occupancy parameter of the sub-area, the bandwidth parameter of the sub-area, the delay parameter of the sub-area, the frequency band parameter of the sub-area, the coverage parameter of the sub-area, the number of I / Os per second of the sub-area, the vulnerability repair speed parameter of the sub-area, the number of malicious attacks on the sub-area, the identity authentication success rate parameter of the sub-area, the number of violations of the access control policy of the sub-area, and the proportion of illegal access requests blocked by the sub-area; The sub-region system average response time parameter refers to the sub-region system average response time ; The sub-area system throughput parameter refers to the sub-area system throughput ; The sub-area concurrent user number parameter refers to the number of concurrent users in the sub-area ; The sub-area system average load parameter refers to the sub-area system average load ; The sub-region CPU resource occupancy rate parameter refers to the sub-region CPU resource occupancy rate ; The sub-region memory occupancy parameter refers to the sub-region memory occupancy ; The sub-area bandwidth parameter refers to the sub-area bandwidth ; The sub-area delay parameter refers to the sub-area delay ; The sub-region frequency band parameter refers to the sub-region frequency band ; The sub-area coverage parameter refers to the sub-area coverage ; The sub-area I / O number per second parameter refers to the number of I / Os per second in the sub-area ; The sub-region vulnerability repair speed parameter refers to the sub-region vulnerability repair speed ; The parameter of the number of malicious attacks on the sub-area refers to the number of malicious attacks on the sub-area ; The sub-region identity authentication success rate parameter refers to the sub-region identity authentication success rate ; The parameter of the number of times the sub-region violates the access control policy refers to the number of times the sub-region violates the access control policy ; The illegal access request ratio parameter blocked in the sub-area refers to the illegal access request ratio blocked in the sub-area. ; In this embodiment, it should be specifically explained that the parameters of the average response time of the sub-area system, the throughput of the sub-area system, the number of concurrent users in the sub-area, the average load of the sub-area system, the CPU resource occupancy rate of the sub-area, the memory occupancy rate of the sub-area, the bandwidth of the sub-area, the delay of the sub-area, the frequency band of the sub-area, the coverage of the sub-area, the number of I / Os per second in the sub-area, the vulnerability repair speed of the sub-area, the number of malicious attacks on the sub-area, the success rate of identity authentication in the sub-area, the number of violations of the access control policy in the sub-area, and the proportion of illegal access requests blocked in the sub-area are all obtained by conventional methods or conventional devices. The obtained data may be obtained, for example, through the system work log, a sub-area system average response time parameter, a sub-area system throughput parameter, a sub-area concurrent user number parameter, a sub-area system average load parameter, a sub-area CPU resource occupancy parameter, a sub-area memory occupancy parameter, a sub-area bandwidth parameter, a sub-area delay parameter, a sub-area frequency band parameter, a sub-area coverage parameter, a sub-area I / O number per second parameter, a sub-area vulnerability repair speed parameter, a sub-area malicious attack number parameter, a sub-area identity authentication success rate parameter, a sub-area access control policy violation number parameter, and a sub-area blocked illegal access request ratio parameter, so this embodiment does not make specific limitations; It should be specifically explained in this embodiment that the system average response time parameter specifically refers to: the time required for the system to respond to a user request. This time includes the time required for the entire process from the user sending a request from the software client to the user receiving the returned data, as well as the processing time of the middleware (such as the server, database, etc.); It should be specifically explained in this embodiment that the system throughput parameter specifically refers to: the amount of work that the system can complete per unit time, which measures the processing capacity of the software system server. The measurement unit of throughput can be the number of requests / second, the number of pages / second, the number of visitors / day, the number of transactions processed / hour, etc. In this embodiment, it should be specifically explained that the number of concurrent users parameter specifically refers to: the number of users who request and access at the same time. For example, for a certain software, if 100 users request to log in at the same time, then the number of concurrent users is 100; It should be specifically explained in this embodiment that the system average load parameter specifically refers to: the average number of processes in the running queue within a specific time interval. It reflects the average workload of the system over a period of time; It should be specifically explained in this embodiment that the sub-area I / O number per second parameter specifically refers to: the number of disk I / O operations completed per second, which is an important indicator for measuring disk performance; The sub-area data standardization processing module is used to standardize the collected data. Since the measurement units of various indicators may be different, the collected data is subjected to Z-score standardization to eliminate the influence of the dimension and output the processed comprehensive parameters to the sub-area application access security comprehensive analysis module.

[0027] It should be specifically noted in this embodiment that Z-score standardization is a commonly used data preprocessing method, which converts the original data into a standardized Z-Score by calculating the mean and standard deviation of the original data. This method can eliminate the magnitude differences between data, so that data of different magnitudes can be compared and comprehensively analyzed.

[0028] The sub-region application access security comprehensive analysis module is used to import the data collected in the sub-region access information collection module into the mathematical model of the sub-region security risk coefficient, the mathematical model of the sub-region network performance coefficient, the mathematical model of the sub-region Internet of Things device hardware status coefficient, and the mathematical model of the sub-region private network security access comprehensive performance index and calculate to obtain the sub-region security risk coefficient, the sub-region network performance coefficient, the sub-region Internet of Things device hardware status coefficient, and the sub-region private network security access comprehensive performance index; It should be specifically explained in this embodiment that the mathematical model of the sub-region safety risk coefficient is as follows: ,in Refers to the safety risk factor of the sub-region, Sub-region vulnerability repair speed, Refers to the number of malicious attacks on the sub-area. Refers to the success rate of identity authentication in the sub-region. Refers to the number of times a sub-area violates the access control policy. Refers to the proportion of illegal access requests blocked in a sub-area; It should be specifically explained in this embodiment that the mathematical model of the sub-area network performance coefficient is as follows: ,in refers to the sub-area network performance coefficient, Refers to the average response time of the sub-region system. Refers to the sub-region system throughput, Refers to the number of concurrent users in a sub-area. Refers to the average load of the sub-region system. Refers to the sub-area delay, Refers to the maximum load that does not affect system functions based on daily practice; It should be specifically explained in this embodiment that the mathematical model of the hardware status coefficient of the sub-region IoT device is as follows: ,in Refers to the hardware status coefficient of IoT devices in the sub-region, Refers to the CPU resource usage of the sub-region, Refers to the memory usage of the sub-region. Refers to the sub-area bandwidth, Refers to the sub-region frequency band, Refers to the sub-region coverage, Refers to the number of I / Os per second in the sub-area; It should be specifically explained in this embodiment that the mathematical model of the sub-region private network security access comprehensive performance index is as follows: ,in Refers to the comprehensive performance index of sub-region private network security access. Refers to the safety risk factor of the sub-region, refers to the sub-area network performance coefficient, Refers to the hardware status coefficient of IoT devices in the sub-region, , , Refers to the weight coefficient; It should be specifically explained in this embodiment that the weight coefficient , , It is calculated by the entropy method, and the specific calculation steps of the entropy method are as follows: Data standardization: Since the measurement units of various indicators may be different, in order to eliminate the impact of the dimension, the collected data needs to be standardized. Commonly used standardization methods include Z-score standardization and range method standardization; Calculate the proportion of indicators: Calculate the proportion of the i-th sample value under the j-th indicator to the sum of all sample values ​​of the indicator. This step is the basis for the subsequent calculation of information entropy; Calculate information entropy: According to the definition and calculation formula of information entropy, calculate the information entropy ej of the jth indicator. The smaller the information entropy, the greater the degree of variation of the indicator and the greater the amount of information provided; Calculate information entropy redundancy: Information entropy redundancy dj is the complement of information entropy, that is, dj = 1 - ej. The greater the information entropy redundancy, the more information the indicator contains, and the greater the impact on the comprehensive evaluation; Calculate weight: Calculate the weight of each indicator in the comprehensive evaluation according to its information entropy redundancy. The weight coefficient is the ratio of the information entropy redundancy of each indicator to the sum of the information entropy redundancy of all indicators.

[0029] The target area application access security comprehensive analysis module is used to import the data obtained by the sub-area application access security comprehensive analysis module into the mathematical model of the target area private network security access comprehensive performance index and perform calculations to obtain the target area private network security access comprehensive performance index; It should be specifically explained in this embodiment that the mathematical model of the comprehensive performance index of the target area private network security access is as follows: ,in Refers to the comprehensive performance index of private network security access in the target area. Refers to the comprehensive performance index of sub-region private network security access.

[0030] The application access security comprehensive judgment module is used to compare the target area private network security access comprehensive performance index with a preset value, and input the comparison result into the interactive feedback module; What needs to be specifically explained in this embodiment is that the preset value is the warning value for evaluating the network performance, security risk and hardware status of the campus private network application access security monitoring system obtained based on industry practical experience. When the comprehensive performance index of the target area private network security access is lower than the preset value, it means that the network performance in the area is poor, the security risk is high and the hardware status is poor, and corresponding measures need to be taken to reduce the risk.

[0031] The interactive feedback module is used to import the comparison result into the administrator terminal, and when the comparison result of the comprehensive performance index of the private network security access in the target area is lower than the preset value, an alarm will be issued to the administrator's equipment; What needs to be specifically explained in this embodiment is that when the comparison result of the interactive feedback module is lower than the preset value, the system will trigger the alarm function on the terminal, send a warning signal to the management personnel through sound, vibration and pop-up window and give relevant parameters, and use artificial intelligence to help management personnel analyze the reasons affecting the comprehensive performance index of private network security access in the target area, and further track down the specific aspects affecting the comprehensive performance, such as poor network performance, high security risks and poor hardware status.

[0032] Secondly: In the drawings of the embodiments disclosed in the present invention, only the structures related to the embodiments disclosed in the present invention are involved, and other structures can refer to the general design. In the absence of conflict, the same embodiment and different embodiments of the present invention can be combined with each other; Finally: The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. An application access security monitoring system based on 5G campus private network, characterized in that: include: Sub-area division module, sub-area access information collection module, sub-area data standardization processing module, sub-area application access security comprehensive analysis module, target area application access security comprehensive analysis module, application access security comprehensive judgment module and interactive feedback module; Sub-area division module: used to record the campus network coverage area to be monitored as the target monitoring area, divide the target monitoring area into sub-monitoring areas according to the timestamp, and mark them as 1, 2, 3...i in sequence; Sub-area access information collection module: including system status information collection unit, security event information collection unit and IoT device information collection unit, used to collect data from sub-areas to obtain comprehensive parameters and output the comprehensive parameters to the sub-area data standardization processing module; Sub-area data standardization processing module: used to standardize the collected data. Since the measurement units of various indicators may be different, the collected data is standardized by Z-score to eliminate the impact of the dimension and output the processed comprehensive parameters to the sub-area application access security comprehensive analysis module; Sub-area application access security comprehensive analysis module: used to import the data collected in the sub-area access information collection module into the mathematical model of the sub-area security risk coefficient, the mathematical model of the sub-area network performance coefficient, the mathematical model of the sub-area IoT device hardware status coefficient, and the mathematical model of the sub-area private network security access comprehensive performance index and calculate, to obtain the sub-area security risk coefficient, the sub-area network performance coefficient, the sub-area IoT device hardware status coefficient, and the sub-area private network security access comprehensive performance index; Target area application access security comprehensive analysis module: used to import the data obtained by the sub-area application access security comprehensive analysis module into the mathematical model of the target area private network security access comprehensive performance index and perform calculations to obtain the target area private network security access comprehensive performance index; Application access security comprehensive judgment module: used to compare the comprehensive performance index of private network security access in the target area with the preset value, and input the comparison result into the interactive feedback module; Interactive feedback module: used to import the comparison results into the administrator terminal. When the comparison result of the comprehensive performance index of private network security access in the target area is lower than the preset value, an alarm will be issued to the administrator's equipment.

2. According to claim 1, an application access security monitoring system based on a 5G campus private network is characterized in that: The specific method for obtaining the comprehensive parameters of each sub-region in the sub-region access information acquisition module is as follows: Comprehensive parameters refer to the sub-area system average response time parameter, sub-area system throughput parameter, sub-area concurrent user number parameter, sub-area system average load parameter, sub-area CPU resource occupancy parameter, sub-area memory occupancy parameter, sub-area bandwidth parameter, sub-area delay parameter, sub-area frequency band parameter, sub-area coverage parameter, sub-area I / O number per second parameter, sub-area vulnerability repair speed parameter, sub-area malicious attack number parameter, sub-area identity authentication success rate parameter, sub-area access control policy violation number parameter, and sub-area blocked illegal access request ratio parameter; The sub-region system average response time parameter refers to the sub-region system average response time ; The sub-area system throughput parameter refers to the sub-area system throughput ; The sub-area concurrent user number parameter refers to the number of concurrent users in the sub-area ; The sub-area system average load parameter refers to the sub-area system average load ; The sub-region CPU resource occupancy rate parameter refers to the sub-region CPU resource occupancy rate ; The sub-region memory occupancy parameter refers to the sub-region memory occupancy ; The sub-area bandwidth parameter refers to the sub-area bandwidth ; The sub-area delay parameter refers to the sub-area delay ; The sub-region frequency band parameter refers to the sub-region frequency band ; The sub-area coverage parameter refers to the sub-area coverage ; The sub-area I / O number per second parameter refers to the number of I / Os per second in the sub-area ; The sub-region vulnerability repair speed parameter refers to the sub-region vulnerability repair speed ; The parameter of the number of malicious attacks on the sub-area refers to the number of malicious attacks on the sub-area ; The sub-region identity authentication success rate parameter refers to the sub-region identity authentication success rate ; The parameter of the number of times the sub-region violates the access control policy refers to the number of times the sub-region violates the access control policy ; The illegal access request ratio parameter blocked in the sub-area refers to the illegal access request ratio blocked in the sub-area. .

3. According to claim 1, an application access security monitoring system based on a 5G campus private network is characterized in that: The mathematical model of the sub-regional safety risk coefficient is as follows: ,in Refers to the safety risk factor of the sub-region, Sub-region vulnerability repair speed, Refers to the number of malicious attacks on the sub-area. Refers to the success rate of identity authentication in the sub-region. Refers to the number of times a sub-area violates the access control policy. Refers to the ratio of illegal access requests blocked in a sub-area.

4. According to claim 1, an application access security monitoring system based on a 5G campus private network is characterized in that: The mathematical model of the sub-area network performance coefficient is as follows: ,in refers to the sub-area network performance coefficient, Refers to the average response time of the sub-region system. refers to the sub-region system throughput, Refers to the number of concurrent users in a sub-area. Refers to the average load of the sub-region system. Refers to the sub-area delay, Refers to the maximum load that does not affect system functions based on daily practice.

5. According to claim 1, an application access security monitoring system based on a 5G campus private network is characterized in that: The mathematical model of the hardware status coefficient of the sub-region IoT device is as follows: ,in Refers to the hardware status coefficient of IoT devices in the sub-region, Refers to the CPU resource usage of the sub-region, Refers to the memory usage of the sub-region. Refers to the sub-area bandwidth, Refers to the sub-region frequency band, Refers to the sub-region coverage, Refers to the number of I / Os per second in the sub-area.

6. According to claim 1, an application access security monitoring system based on 5G campus private network is characterized in that: The mathematical model of the sub-area private network security access comprehensive performance index is as follows: ,in Refers to the comprehensive performance index of sub-region private network security access. Refers to the safety risk factor of the sub-region, refers to the sub-area network performance coefficient, Refers to the hardware status coefficient of IoT devices in the sub-region, , , Refers to the weight coefficient.

7. According to claim 1, an application access security monitoring system based on 5G campus private network is characterized in that: The mathematical model of the comprehensive performance index of the target area private network security access is as follows: ,in Refers to the comprehensive performance index of private network security access in the target area. Refers to the comprehensive performance index of sub-region private network security access.

Images