Fine-granularity infinitesimal node equipment management method and system

Abstract

The invention discloses a fine-granularity infinitesimal node equipment management method and system, and relates to the technical field of data models.The fine-granularity infinitesimal node equipment management method comprises the steps that fine-granularity infinitesimal nodes are constructed based on answer node transceiving data characteristics of power grid equipment and corresponding data storage units; all the power grid devices are selected; and executing a data interaction task based on an output result of the security honeypot. The system provides powerful technical support for construction and operation of the intelligent power grid, not only improves the intelligent level of power grid equipment management, but also greatly enhances the safety protection capability of the system, and is of great significance for promoting informatization construction of the power industry.

Description

Technical Field

[0001] The present invention relates to the technical field of data models, and in particular to a fine-grained micro-element node device management method and system. Background Art

[0002] At present, in the field of management models of power grid control equipment, the data structure of the management model often adopts multi-source heterogeneous data. The structural data sources of multi-source heterogeneous data are highly diverse. In the process of data security protection, the unified correlation analysis capability of multi-source heterogeneous data such as inducement data, missing flow data and terminal data that threaten the management model is low, which will greatly reduce the security of management model data.

[0003] At present, it is necessary to propose a fine-grained micro-element node device management method and system to address the low security defects of the traditional management model. Summary of the invention

[0004] In view of the problems existing in the existing fine-grained micro-element node device management method and system, the present invention is proposed.

[0005] Therefore, the problem to be solved by the present invention is.

[0006] In order to solve the above technical problems, the present invention provides the following technical solutions:

[0007] In the first aspect, an embodiment of the present invention provides a fine-grained micro-element node device management method, which includes incorporating power grid equipment into a management model, selecting a power grid equipment, and constructing a fine-grained micro-element node based on the data sending and receiving characteristics of the answer node of the power grid equipment and the corresponding data storage unit; mirroring the micro-element node to form a mirrored micro-element node, returning to select a power grid device until all power grid devices are selected; forming a security honeypot based on all the mirrored micro-element nodes, sending the received data to the security honeypot, obtaining the output result after the security honeypot analysis, and performing data interaction tasks based on the output result of the security honeypot.

[0008] As a preferred solution of the fine-grained micro-element node device management method of the present invention, in which: incorporating the power grid device into the management model includes receiving a list of power grid devices before incorporating each power grid device into the management model, selecting management data of a power grid device, abstracting the core capability of the management data into a function, forming access characteristics of the management model based on the characteristics of the function, returning and selecting management data of a power grid device, until the management data of all power grid devices are selected;

[0009] Selecting a power grid device includes dividing the secure honeypot data storage area before incorporating each power grid device into the management model, dividing the secure honeypot data storage area based on access characteristics to form multiple data areas, incorporating the function characteristics of each data area into the management function, and associating the management function with the Trojan analysis program.

[0010] As a preferred solution of the fine-grained micro-element node device management method of the present invention, wherein: based on the data transmission and reception characteristics of the answer node of the power grid device and the corresponding data storage unit, the answer node of the file library of the power grid device, the answer node of the database, the answer node of the code management library, the answer node of the account program, and the answer node of the password program are extracted;

[0011] Parse the response node of the file library, the response node includes an identification unit and an access unit, extract the received data features of the identification unit and the sent data features of the access unit, and determine whether the received data features of the identification unit match the features of the function;

[0012] If the received data feature of the identification unit matches the feature of the function, the identification unit is incorporated into the management model using the access feature;

[0013] If the collected data feature of the identification unit does not match the feature of the function, then extracting the difference between the collected data feature of the identification unit and the feature of the function;

[0014] Call the function corresponding to the application programming interface, form a counterpart function with the difference points, incorporate the identification unit into the management model based on the access characteristics based on the counterpart function, replace the received data characteristics of the identification unit with the sent data characteristics of the access unit, and return to determine whether the received data characteristics of the identification unit match the characteristics of the function.

[0015] As a preferred solution of the fine-grained micro-element node device management method of the present invention, wherein: constructing a fine-grained micro-element node includes constructing a fine-grained micro-element node based on the characteristics of data transmission and reception of the response node and the corresponding data storage unit, setting a communication password based on the security level of the response node, encrypting the communication data between the response node and the management model using the communication password, and forming a one-to-one correspondence between the communication data and the data storage unit. The specific steps are as follows:

[0016] Mirror the characteristics of the data sent and received by the response node to form a mirror file, select a mirror file, invalidate the database corresponding to the mirror file, generate an induction file, incorporate the induction file into the data area, form a one-to-one correspondence between the mirror file and the data area, form a mirror micro-element node based on the mirror file and the data area, return to select a mirror file until all mirror files are selected, select a data area, establish a mapping relationship between the data area and the virus detection program, return to select a data area until all data areas are selected; incorporate the virus detection program into the management model, call the unified correlation analysis data of the management model, and determine whether the unified correlation analysis data of the management model reaches the uniformity threshold;

[0017] If the unified correlation analysis data of the management model reaches the uniformity threshold, the security protection task is executed based on the risk protection conclusion in the unified correlation analysis data;

[0018] If the unified correlation analysis data of the management model does not reach the uniformity threshold, all access devices will communicate with the security honeypot;

[0019] Provided is a fine-grained micro-element node device management system, including a server for executing a fine-grained micro-element node device management method, and a plurality of power grid devices, all of which are communicatively connected to the server.

[0020] As a preferred solution of the fine-grained micro-element node device management method of the present invention, wherein: mirroring the micro-element node includes selecting a data area, establishing a mapping relationship between the data area and the virus detection program, returning to select a data area, until all data areas are selected, and incorporating the virus detection program into the management model;

[0021] Incorporating the virus detection program into the management model includes incorporating each power grid device into the management system through the management model, extracting the response nodes of the file library of the power grid device, the response nodes of the database, the response nodes of the code management library, the response nodes of the account program, and the response nodes of the password program, completing the extraction of multi-source heterogeneous data, mirroring the multi-source heterogeneous data to form mirrored micro-element nodes, and forming a security honeypot based on all the mirrored micro-element nodes.

[0022] As a preferred solution of the fine-grained micro-element node device management method of the present invention, wherein: sending the received data to the security honeypot includes sending the received data to the security honeypot and obtaining the output result after the security honeypot analyzes;

[0023] Based on the output results of the security honeypot, data interaction tasks are performed, a list of power grid devices is received, management data of one power grid device is selected, the core capabilities of the management data are abstracted into functions, access features of the management model are formed based on the characteristics of the functions, and management data of one power grid device is selected, until the management data of all power grid devices are selected.

[0024] As a preferred solution of the fine-grained micro-element node device management method of the present invention, wherein: executing data interaction tasks based on the output results of the security honeypot includes mirroring multi-source heterogeneous data to form mirror micro-element nodes, and forming a security honeypot based on all the mirror micro-element nodes;

[0025] When receiving external interactive information, the security honeypot is the executor of the interactive information, sends the received data to the security honeypot, obtains the output results after the security honeypot analysis, and executes the data interaction task based on the output results of the security honeypot.

[0026] In the second aspect, an embodiment of the present invention provides a fine-grained micro-element node device management system, which includes: a construction module, which incorporates power grid equipment into a management model, selects a power grid equipment, and constructs fine-grained micro-element nodes based on the data sending and receiving characteristics of the answer node of the power grid equipment and the corresponding data storage unit; a selection module, which mirrors the micro-element node to form a mirrored micro-element node, and returns to select a power grid device until all power grid devices are selected; a management module, which forms a security honeypot based on all the mirrored micro-element nodes, sends the received data to the security honeypot, obtains the output result after the security honeypot analysis, and performs data interaction tasks based on the output result of the security honeypot.

[0027] In a third aspect, an embodiment of the present invention provides a computer device, including a memory and a processor, wherein the memory stores a computer program, wherein: when the processor executes the computer program, any step of the above-mentioned fine-grained micro-element node device management method is implemented.

[0028] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium having a computer program stored thereon, wherein: when the computer program is executed by a processor, any step of the above-mentioned fine-grained micro-element node device management method is implemented.

[0029] The beneficial effects of the present invention are as follows: the present invention can effectively improve the security and management efficiency of power grid equipment. By abstracting the management data of each power grid device into a function and constructing a management model based on the characteristics of these functions, refined management of power grid equipment is achieved. This method also introduces a security honeypot mechanism, which improves the security of the system by mirroring the micro-element nodes and identifying and analyzing potential threats in combination with a virus detection program. In addition, the scheme further ensures the security of data transmission and reduces the occurrence of security incidents by encrypting communication data, building a secure data interaction environment and other measures. At the same time, the technical solution supports the effective management and utilization of multi-source heterogeneous data, enhances the flexibility and scalability of the system, and provides strong technical support for the construction and operation of smart grids. In summary, this technical solution not only improves the level of intelligence in power grid equipment management, but also greatly enhances the security protection capability of the system, which is of great significance for promoting the informatization construction of the power industry. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for describing the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. Among them:

[0031] Figure 1 A specific flow chart of a fine-grained micro-element node device management method and system provided for one embodiment of the present invention. DETAILED DESCRIPTION

[0032] In order to make the above-mentioned purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the drawings of the specification. Obviously, the described embodiments are part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary persons in the art without creative work should fall within the scope of protection of the present invention.

[0033] In the following description, many specific details are set forth to facilitate a full understanding of the present invention, but the present invention may also be implemented in other ways different from those described herein, and those skilled in the art may make similar generalizations without violating the connotation of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.

[0034] Secondly, the term "one embodiment" or "embodiment" as used herein refers to a specific feature, structure, or characteristic that may be included in at least one implementation of the present invention. The term "in one embodiment" that appears in different places in this specification does not necessarily refer to the same embodiment, nor does it refer to a separate or selective embodiment that is mutually exclusive with other embodiments.

[0035] The present invention is described in detail with reference to the schematic diagram. When describing the embodiments of the present invention, for the sake of convenience, the cross-sectional diagrams showing the device structure will not be partially enlarged according to the general scale, and the schematic diagrams are only examples, which should not limit the scope of protection of the present invention. In addition, in actual production, the three-dimensional dimensions of length, width and depth should be included.

[0036] At the same time, in the description of the present invention, it should be noted that the directions or positional relationships indicated by the terms "upper, lower, inner and outer" are based on the directions or positional relationships shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific direction, be constructed and operated in a specific direction, and therefore cannot be understood as limiting the present invention. In addition, the terms "first, second or third" are only used for descriptive purposes and cannot be understood as indicating or implying relative importance.

[0037] In the present invention, unless otherwise clearly specified and limited, the terms "install, connect, connect" should be understood in a broad sense, for example: it can be a fixed connection, a detachable connection or an integral connection; it can also be a mechanical connection, an electrical connection or a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0038] Example 1

[0039] Reference Figure 1 , which is the first embodiment of the present invention, and provides a fine-grained micro-element node device management method, including:

[0040] S1: Incorporate the power grid equipment into the management model, select a power grid equipment, and build a fine-grained micro-element node based on the data transmission and reception characteristics of the node of the power grid equipment and the corresponding data storage unit.

[0041] Including the power grid equipment in the management model includes, before including each power grid equipment in the management model, receiving a list of power grid equipment, selecting management data of a power grid equipment, abstracting the core capability of the management data into a function, forming access features of the management model based on the features of the function, returning and selecting management data of a power grid equipment, until the management data of all power grid equipment are selected;

[0042] Selecting a power grid device includes dividing the secure honeypot data storage area before incorporating each power grid device into the management model, dividing the secure honeypot data storage area based on access characteristics to form multiple data areas, incorporating the function characteristics of each data area into the management function, and associating the management function with the Trojan analysis program.

[0043] S1.1: Based on the data receiving and sending characteristics of the answer node of the power grid device and the corresponding data storage unit, the answer node of the file library of the power grid device, the answer node of the database, the answer node of the code management library, the answer node of the account program, and the answer node of the password program are extracted;

[0044] Parse the response node of the file library, the response node includes an identification unit and an access unit, extract the received data features of the identification unit and the sent data features of the access unit, and determine whether the received data features of the identification unit match the features of the function;

[0045] If the received data feature of the identification unit matches the feature of the function, the identification unit is incorporated into the management model using the access feature;

[0046] If the collected data feature of the identification unit does not match the feature of the function, then extracting the difference between the collected data feature of the identification unit and the feature of the function;

[0047] Call the function corresponding to the application programming interface, form a counterpart function with the difference points, incorporate the identification unit into the management model based on the access characteristics based on the counterpart function, replace the received data characteristics of the identification unit with the sent data characteristics of the access unit, and return to determine whether the received data characteristics of the identification unit match the characteristics of the function.

[0048] S1.2: Constructing fine-grained micro-element nodes includes constructing fine-grained micro-element nodes based on the characteristics of data transmission and reception of the response node and the corresponding data storage unit, setting a communication password based on the security level of the response node, encrypting the communication data between the response node and the management model using the communication password, and forming a one-to-one correspondence between the communication data and the data storage unit. The specific steps are as follows:

[0049] Mirror the characteristics of the data sent and received by the response node to form a mirror file, select a mirror file, invalidate the database corresponding to the mirror file, generate an induction file, incorporate the induction file into the data area, form a one-to-one correspondence between the mirror file and the data area, form a mirror micro-element node based on the mirror file and the data area, return to select a mirror file until all mirror files are selected, select a data area, establish a mapping relationship between the data area and the virus detection program, return to select a data area until all data areas are selected; incorporate the virus detection program into the management model, call the unified correlation analysis data of the management model, and determine whether the unified correlation analysis data of the management model reaches the uniformity threshold;

[0050] If the unified correlation analysis data of the management model reaches the uniformity threshold, the security protection task is executed based on the risk protection conclusion in the unified correlation analysis data;

[0051] If the unified correlation analysis data of the management model does not reach the uniformity threshold, all access devices will communicate with the security honeypot;

[0052] Provided is a fine-grained micro-element node device management system, including a server for executing a fine-grained micro-element node device management method, and a plurality of power grid devices, all of which are communicatively connected to the server.

[0053] S2: Mirror the micro-element node to form a mirror micro-element node, and return to select a power grid device until all power grid devices are selected.

[0054] Among them, mirroring the micro-element node includes selecting a data area, establishing a mapping relationship between the data area and the virus detection program, returning to select a data area, until all data areas are selected, and incorporating the virus detection program into the management model;

[0055] Incorporating the virus detection program into the management model includes incorporating each power grid device into the management system through the management model, extracting the response nodes of the file library of the power grid device, the response nodes of the database, the response nodes of the code management library, the response nodes of the account program, and the response nodes of the password program, completing the extraction of multi-source heterogeneous data, mirroring the multi-source heterogeneous data to form mirrored micro-element nodes, and forming a security honeypot based on all the mirrored micro-element nodes.

[0056] S3: A security honeypot is formed based on all mirrored micro-element nodes, the received data is sent to the security honeypot, the output result after the security honeypot analysis is obtained, and the data interaction task is performed based on the output result of the security honeypot.

[0057] Wherein, sending the received data to the security honeypot includes sending the received data to the security honeypot and obtaining the output result after the security honeypot analyzes it;

[0058] Based on the output results of the security honeypot, data interaction tasks are performed, a list of power grid devices is received, management data of one power grid device is selected, the core capabilities of the management data are abstracted into functions, access features of the management model are formed based on the characteristics of the functions, and management data of one power grid device is selected, until the management data of all power grid devices are selected.

[0059] S3.1: Executing data interaction tasks based on the output results of the security honeypot includes mirroring multi-source heterogeneous data to form mirrored micro-element nodes, and forming a security honeypot based on all mirrored micro-element nodes;

[0060] When receiving external interactive information, the security honeypot is the executor of the interactive information, sends the received data to the security honeypot, obtains the output results after the security honeypot analysis, and executes the data interaction task based on the output results of the security honeypot.

[0061] In a preferred embodiment, a fine-grained micro-element node device management system includes a construction module, which incorporates power grid equipment into a management model, selects a power grid equipment, and constructs fine-grained micro-element nodes based on the data transmission and reception characteristics of the answer node of the power grid equipment and the corresponding data storage unit; a selection module, which mirrors the micro-element node to form a mirrored micro-element node, and returns to select a power grid device until all power grid devices are selected; a management module, which forms a security honeypot based on all the mirrored micro-element nodes, sends the received data to the security honeypot, obtains the output result after the security honeypot analysis, and performs data interaction tasks based on the output result of the security honeypot.

[0062] The computer device may be a terminal, and the computer device includes a processor, a memory, a communication interface, a display screen and an input device connected via a system bus. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be achieved through WIFI, an operator network, NFC (near field communication) or other technologies. The display screen of the computer device may be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device may be a touch layer covering the display screen, or a key, trackball or touchpad provided on the housing of the computer device, or an external keyboard, touchpad or mouse, etc.

[0063] In summary, the present invention can effectively improve the security and management efficiency of power grid equipment. By abstracting the management data of each power grid device into functions and building a management model based on the characteristics of these functions, refined management of power grid equipment is achieved. This method also introduces a security honeypot mechanism, which improves the security of the system by mirroring the micro-element nodes and identifying and analyzing potential threats in combination with a virus detection program. In addition, the scheme further ensures the security of data transmission and reduces the occurrence of security incidents by encrypting communication data, building a secure data interaction environment and other measures. At the same time, the technical solution supports the effective management and utilization of multi-source heterogeneous data, enhances the flexibility and scalability of the system, and provides strong technical support for the construction and operation of smart grids. In summary, this technical solution not only improves the level of intelligence in power grid equipment management, but also greatly enhances the security protection capability of the system, which is of great significance for promoting the informatization construction of the power industry.

[0064] Example 2

[0065] Reference Figure 1 , which is the second embodiment of the present invention, and this embodiment provides a fine-grained micro-element node device management method. In order to verify the beneficial effects of the present invention, scientific demonstration is carried out through simulation experiments.

[0066] In the above-mentioned fine-grained micro-element node device management method, when constructing fine-grained micro-element nodes, it will be implemented based on the data sending and receiving characteristics of the response node and the corresponding data storage unit. The specific steps include: first, mirroring the data sending and receiving characteristics of the response node to form a mirror file, then, selecting a mirror file, invalidating the database corresponding to the mirror file, generating an induction file, and incorporating it into the data area to ensure that the mirror file and the data area form a one-to-one correspondence. After forming a mirror micro-element node based on the mirror file and the data area, repeat this process until all mirror files are selected. Next, select a data area and establish a mapping relationship between the data area and the virus detection program until the selection of all data areas is completed. The virus detection program is then incorporated into the management model, and the management model will call the unified association analysis data to determine whether the data has reached a preset uniformity threshold, such as a 95% data consistency rate.

[0067] If the unified association analysis data of the management model shows that 95% of the data has reached the consistency threshold standard, the corresponding security protection tasks are performed according to the risk protection conclusions in the unified association analysis data, such as automatically isolating suspicious devices or updating security policies. Conversely, if the unified association analysis data of the management model does not reach the 95% consistency threshold, the system will communicate with all access devices and the security honeypot to further detect and analyze potential security threats. This mechanism ensures that even in a complex and changing network environment, various security challenges can be efficiently identified and responded to to ensure the stable operation of power grid equipment. The thresholds for the association analysis data of the present invention are shown in Table 1 below:

[0068] Table 1. Threshold table of association analysis data of the present invention

[0069]

[0070] Table 1 comprehensively shows the key data points involved in the above technical solution, which helps to better understand and evaluate the performance and effectiveness of the solution. The comparison between the present invention and the prior art is shown in Table 2 below:

[0071] Table 2 Comparison between the present invention and the prior art

[0072]

[0073] Table 2 Through the above comparison, it can be seen that the technical solution of the present invention has obvious advantages in many aspects such as management strength, data encryption, security honeypot, multi-source heterogeneous data management, data analysis, data consistency threshold, virus detection program integration, response speed, system scalability, security protection task execution, maximum number of carrying devices and maximum processing volume per unit time, and can better meet the needs of modern power grid equipment management.

[0074] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A fine-grained micro-element node device management method, characterized in that: include, Incorporate power grid equipment into the management model, select a power grid equipment, and build fine-grained micro-element nodes based on the data transmission and reception characteristics of the answer node of the power grid equipment and the corresponding data storage unit; Mirror the micro-element node to form a mirror micro-element node, and return to select a power grid device until all power grid devices are selected; A security honeypot is formed based on all mirrored micro-element nodes, the received data is sent to the security honeypot, the output results after the security honeypot analysis are obtained, and the data interaction task is performed based on the output results of the security honeypot.

2. The fine-grained micro-element node device management method according to claim 1, characterized in that: Incorporating the power grid equipment into the management model includes, before incorporating each power grid equipment into the management model, receiving a list of power grid equipment, selecting management data of one power grid equipment, abstracting the core capability of the management data into a function, forming access features of the management model based on the features of the function, returning and selecting management data of one power grid equipment, until the management data of all power grid equipment are selected; Selecting a power grid device includes dividing the secure honeypot data storage area before incorporating each power grid device into the management model, dividing the secure honeypot data storage area based on access characteristics to form multiple data areas, incorporating the function characteristics of each data area into the management function, and associating the management function with the Trojan analysis program.

3. The fine-grained micro-element node device management method according to claim 2, characterized in that: The answer node based on the power grid device sends and receives data characteristics and the corresponding data storage unit includes extracting the answer node of the file library of the power grid device, the answer node of the database, the answer node of the code management library, the answer node of the account program, and the answer node of the password program; Parse the response node of the file library, the response node includes an identification unit and an access unit, extract the received data features of the identification unit and the sent data features of the access unit, and determine whether the received data features of the identification unit match the features of the function; If the received data feature of the identification unit matches the feature of the function, the identification unit is incorporated into the management model using the access feature; If the collected data feature of the identification unit does not match the feature of the function, then extracting the difference between the collected data feature of the identification unit and the feature of the function; Call the function corresponding to the application programming interface, form a counterpart function with the difference points, incorporate the identification unit into the management model based on the access characteristics based on the counterpart function, replace the received data characteristics of the identification unit with the sent data characteristics of the access unit, and return to determine whether the received data characteristics of the identification unit match the characteristics of the function.

4. The fine-grained micro-element node device management method as claimed in claim 3, characterized in that: The construction of fine-grained micro-element nodes includes constructing fine-grained micro-element nodes based on the characteristics of data transmission and reception of the response node and the corresponding data storage unit, setting a communication password based on the security level of the response node, encrypting the communication data between the response node and the management model by using the communication password, and forming a one-to-one correspondence between the communication data and the data storage unit. The specific steps are as follows: Mirror the characteristics of the data sent and received by the response node to form a mirror file, select a mirror file, invalidate the database corresponding to the mirror file, generate an induction file, incorporate the induction file into the data area, form a one-to-one correspondence between the mirror file and the data area, form a mirror micro-element node based on the mirror file and the data area, return to select a mirror file until all mirror files are selected, select a data area, establish a mapping relationship between the data area and the virus detection program, return to select a data area until all data areas are selected; incorporate the virus detection program into the management model, call the unified correlation analysis data of the management model, and determine whether the unified correlation analysis data of the management model reaches the uniformity threshold; If the unified correlation analysis data of the management model reaches the uniformity threshold, the security protection task is executed based on the risk protection conclusion in the unified correlation analysis data; If the unified correlation analysis data of the management model does not reach the uniformity threshold, all access devices will communicate with the security honeypot; Provided is a fine-grained micro-element node device management system, including a server for executing a fine-grained micro-element node device management method, and a plurality of power grid devices, all of which are communicatively connected to the server.

5. The fine-grained micro-element node device management method according to claim 4, characterized in that: The mirroring of the micro-element node includes selecting a data area, establishing a mapping relationship between the data area and the virus detection program, returning to select a data area, until all data areas are selected, and incorporating the virus detection program into the management model; Incorporating the virus detection program into the management model includes incorporating each power grid device into the management system through the management model, extracting the response nodes of the file library of the power grid device, the response nodes of the database, the response nodes of the code management library, the response nodes of the account program, and the response nodes of the password program, completing the extraction of multi-source heterogeneous data, mirroring the multi-source heterogeneous data to form mirrored micro-element nodes, and forming a security honeypot based on all the mirrored micro-element nodes.

6. The fine-grained micro-element node device management method according to claim 5, characterized in that: The sending of the received data to the security honeypot includes sending the received data to the security honeypot and obtaining the output result after the security honeypot analyzes it; Based on the output results of the security honeypot, data interaction tasks are performed, a list of power grid devices is received, management data of one power grid device is selected, the core capabilities of the management data are abstracted into functions, access features of the management model are formed based on the characteristics of the functions, and management data of one power grid device is selected, until the management data of all power grid devices are selected.

7. The fine-grained micro-element node device management method according to claim 6, characterized in that: The data interaction task performed based on the output result of the security honeypot includes mirroring multi-source heterogeneous data to form mirrored micro-element nodes, and forming a security honeypot based on all the mirrored micro-element nodes; When receiving external interactive information, the security honeypot is the executor of the interactive information, sends the received data to the security honeypot, obtains the output results after the security honeypot analysis, and executes the data interaction task based on the output results of the security honeypot.

8. A fine-grained micro-element node device management system, based on the fine-grained micro-element node device management method according to any one of claims 1 to 7, characterized in that: include, The construction module incorporates the power grid equipment into the management model, selects a power grid equipment, and constructs a fine-grained micro-element node based on the data transmission and reception characteristics of the answer node of the power grid equipment and the corresponding data storage unit; A selection module, which mirrors the micro-element nodes to form mirror micro-element nodes, and returns to select a power grid device until all power grid devices are selected; The management module forms a security honeypot based on all mirrored micro-element nodes, sends the received data to the security honeypot, obtains the output results after the security honeypot analysis, and performs data interaction tasks based on the output results of the security honeypot.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the fine-grained micro-element node device management method of any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the fine-grained micro-element node device management method of any one of claims 1 to 7 are implemented.

Images