An emergency communication linkage system and method based on network security early warning

Abstract

The present invention discloses an emergency communication linkage system and method based on network security early warning, belonging to the field of communication linkage technology. The system obtains the geographic location information of all communication infrastructure in an urban communication area, constructs a communication infrastructure distribution grid map, and constructs a network abnormality data jump time difference sequence. The stability coefficient of a single communication infrastructure is calculated, and a communication infrastructure-stability coefficient coordinate system and a communication infrastructure-stability coefficient curve of a grid unit are constructed to calculate the stability abnormality of a single grid unit. The similarity between different grid units is calculated, a threshold is preset, and emergency communication linkage is performed. By constructing the stability abnormality of a grid unit and the similarity index of adjacent grids, the present invention can realize distributed perception and regional clustering identification of network security abnormalities, significantly improving the sensitivity of network security early warning and the real-time response while ensuring the efficient scheduling of communication resources.

Description

Technical Field

[0001] The present invention relates to the field of communication linkage technology, and in particular to an emergency communication linkage system and method based on network security early warning. Background Art

[0002] Currently, communications infrastructure faces numerous anomaly risks, including DDoS attacks, phishing, and route hijacking. These risks are highly sudden and interconnected, potentially causing multiple communication nodes to fail simultaneously within a short period of time, leading to regional disruptions in urban communications. Against this backdrop, early warning and response mechanisms for network security anomalies have become a key research focus for communications network operation and maintenance. Traditional emergency communications linkages are primarily based on fixed rules or static topology configurations. Once an anomaly is triggered, they are often handled through single-point isolation or reboots. These mechanisms lack dynamic assessment and accurate identification of anomaly propagation trends, and fail to effectively balance network hierarchical relationships and regional characteristics. Therefore, building agile perception mechanisms based on real-time network behavior data and achieving highly robust coordinated responses has become a technical bottleneck in the current communications security field.

[0003] Existing technologies have the following significant deficiencies in emergency communication linkage: First, most methods fail to consider the spatial distribution relationship and service capability differences between communication infrastructures, making it difficult to perform reasonable division and linkage configuration in complex urban network environments; second, there is a lack of temporal modeling and quantitative analysis of the evolution process of network anomalies, making it impossible to extract stability characteristics from jump behaviors, and thus unable to determine potential anomaly clustering areas; third, linkage strategies are mostly based on global static rules, ignoring the diffusion trend of abnormal events in local areas, and the response range is too wide or insufficient, affecting resource scheduling efficiency and communication guarantee accuracy. Summary of the Invention

[0004] The purpose of the present invention is to provide an emergency communication linkage system and method based on network security early warning to solve the problems raised in the above background technology.

[0005] In order to solve the above technical problems, the present invention provides the following technical solutions:

[0006] An emergency communication linkage method based on network security early warning comprises the following steps: step S1: obtaining geographical location information of all communication infrastructures in an urban communication area and constructing a communication infrastructure distribution grid map; step S2: obtaining a network log of each communication infrastructure in a grid unit in the communication infrastructure distribution grid map and constructing a network abnormality data jump time difference sequence; step S3: calculating the stability coefficient of a single communication infrastructure based on the network abnormality data jump time difference sequence; constructing a communication infrastructure-stability coefficient coordinate system and a communication infrastructure-stability coefficient curve of the grid unit based on the stability coefficient of each communication infrastructure in the grid unit; step S4: calculating the stability abnormality of a single grid unit based on the communication infrastructure-stability coefficient curve; calculating the similarity between different grid units, presetting a threshold and performing emergency communication linkage.

[0007] As a preferred solution of the emergency communication linkage method based on network security early warning described in the present invention, the geographical location information of all communication infrastructure in an urban communication area is obtained, and the communication infrastructure includes communication base stations, signal towers, routing nodes, and wireless relay devices; the geographical location information of all communication infrastructure is marked in the form of coordinates on a map, and a communication infrastructure distribution grid map is constructed, as follows:

[0008] Obtain the coverage and communication level of the communication infrastructure, and set manual planning rules to divide the urban communication area into N non-overlapping grid cells according to the geographical location information of all communication infrastructure. The manual planning rules include:

[0009] Prioritize the communication infrastructure according to its communication level, and use the communication infrastructure with a high communication level as the central facility of the grid unit.

[0010] Each grid cell contains at least one communication infrastructure.

[0011] The boundaries of each grid cell do not exceed the maximum coverage of the central facility, and overlapping areas are preferentially included in the grid cells where facilities with higher communication levels are located.

[0012] As a preferred solution of the emergency communication linkage method based on network security early warning described in the present invention, based on the communication infrastructure distribution grid map, the network log of each communication infrastructure in the grid unit is obtained, and the network log includes historical network normal data, historical network abnormal data and timestamps corresponding to the historical network normal data and the historical network abnormal data, and based on the timestamps, a historical network normal data time set and a historical network abnormal data time set are constructed.

[0013] Based on the timestamp, the historical network normal data time set and the historical network abnormal data time set are sorted in chronological order, and the difference between each two consecutive times in the time contained in the historical network normal data time set and the historical network abnormal data time set is calculated to obtain the network abnormal data jump time difference sequence, which is recorded as α={α i |i∈[1,I]}, where α i It represents the time difference of the communication infrastructure jumping from the historical network normal data to the historical network abnormal data for the i-th time, and I represents the total number of time differences of the communication infrastructure jumping from the historical network normal data to the historical network abnormal data.

[0014] As a preferred solution of the emergency communication linkage method based on network security early warning described in the present invention, based on the time difference α of the communication infrastructure jumping from the historical network normal data to the historical network abnormal data for the i-th time i , calculate the stability coefficient of the mth communication infrastructure, the calculation formula is as follows:

[0015]

[0016] Among them, SC m represents the stability coefficient of the mth communication infrastructure, σ m represents the standard deviation of the transition time of the mth communication infrastructure, μ m represents the mean transition time of the mth communication infrastructure, α m,i It represents the time difference of the transition from the historical normal network data to the historical abnormal network data of the mth communication infrastructure for the i-th time.

[0017] Stability coefficient SC based on the mth communication infrastructure m , obtain the stability coefficient of each communication infrastructure in the grid cell.

[0018] Based on the stability coefficient of each communication infrastructure in the grid unit, a communication infrastructure-stability coefficient coordinate system of the grid unit is constructed, wherein the horizontal coordinate of the communication infrastructure-stability coefficient coordinate system is a total of M communication infrastructures arranged in sequence, and the vertical coordinate of the communication infrastructure-stability coefficient coordinate system is the stability coefficient corresponding to the total of M communication infrastructures arranged in sequence. All coordinate points in the communication infrastructure-stability coefficient coordinate system are sequentially connected to construct a communication infrastructure-stability coefficient curve. The communication infrastructure-stability coefficient curve of the nth grid unit is recorded as TDH[SC n,m ].

[0019] As a preferred solution of the emergency communication linkage method based on network security early warning described in the present invention, the communication infrastructure-stability curve TDH[SC n,m ], calculate the stability anomaly of the nth grid cell, and the calculation formula is as follows:

[0020]

[0021] Among them, AS n represents the stability anomaly of the nth grid cell, M represents the total number of communication infrastructure in the nth grid cell, SC n,m represents the stability coefficient of the mth communication infrastructure in the nth grid cell, SC n,max represents the maximum stability coefficient in the nth grid cell, and γ represents the preset weight coefficient.

[0022] In the present invention, Reflects the degree to which the overall stability of the grid unit deviates from the normal level. The larger the value, the worse the overall stability of the facilities in the grid. Can be used as the coefficient of fluctuation, It can be used as a coefficient of variation to measure the stability differences between facilities. The more obvious the differences are, the more significant the abnormality amplification will be. Highlight the impact of stability degradation of key facilities (such as base stations with high communication levels). If the communication infrastructure-stability coefficient curve is recorded as TDH[SC n,m ] presents a "multi-point towering" shape (multiple SC n,m significantly higher than the mean), then and The numbers increase synchronously, and the degree of abnormality rises exponentially.

[0023] Calculate the similarity between different grid cells, the calculation formula is: ΔAS n =|AS n -AS n+1 |, where ΔAS n Represents the similarity between the nth grid cell and the n+1th grid cell, AS n+1 Indicates the stability anomaly of the n+1th grid cell.

[0024] Preset stability anomaly threshold and similarity threshold, if the stability anomaly of the nth grid unit AS n If the value is greater than or equal to the stability abnormality threshold and the similarity between the nth grid unit and the n+1th grid unit is less than or equal to the similarity threshold, it is determined that the nth grid unit has a network security abnormality and is similar to the n+1th grid unit.

[0025] If the nth grid unit has a network security anomaly, all grid units similar to the nth grid unit are obtained, and a unified warning is issued and emergency communication linkage is performed, as follows:

[0026] The communication infrastructure in the nth grid cell and all grid cells similar to the nth grid cell is isolated and switched to backup equipment.

[0027] Allocate network resources of the communication infrastructure in the grid unit without network security anomalies to the communication infrastructure in the grid unit with network security anomalies.

[0028] Priority will be given to the allocation of communication infrastructure with high communication levels.

[0029] An emergency communication linkage system based on network security early warning includes: a data acquisition and grid map construction module, a log acquisition and difference calculation module, a stability calculation and curve construction module, and a stability anomaly and analysis module.

[0030] The data acquisition and grid map construction module is used to obtain the geographical location information of all communication infrastructure in the urban communication area and to construct a communication infrastructure distribution grid map.

[0031] The log acquisition and difference calculation module acquires the network log of each communication infrastructure in the grid unit of the communication infrastructure distribution grid map, and constructs a network abnormal data jump time difference sequence.

[0032] The stability calculation and curve construction module calculates the stability coefficient of a single communication infrastructure based on the network abnormal data jump time difference sequence; and constructs the communication infrastructure-stability coefficient coordinate system and communication infrastructure-stability coefficient curve of the grid unit based on the stability coefficient of each communication infrastructure in the grid unit.

[0033] The stability anomaly and analysis module calculates the stability anomaly of a single grid unit based on the communication infrastructure-stability coefficient curve; calculates the similarity between different grid units, presets a threshold and performs emergency communication linkage.

[0034] Furthermore, the data acquisition and grid map construction module includes a data acquisition unit and a grid map construction unit.

[0035] The data acquisition unit is configured to acquire geographic location information of all communication infrastructure in a city communication area, wherein the communication infrastructure includes communication base stations, signal towers, routing nodes, and wireless relay devices.

[0036] The grid map construction unit is configured to mark the geographical location information of all communication infrastructures on a map in the form of coordinates and construct a communication infrastructure distribution grid map, as follows:

[0037] Obtain the coverage and communication level of the communication infrastructure, and set manual planning rules to divide the urban communication area into N non-overlapping grid cells according to the geographical location information of all communication infrastructure. The manual planning rules include:

[0038] Prioritize the communication infrastructure according to its communication level, and use the communication infrastructure with a high communication level as the central facility of the grid unit.

[0039] Each grid cell contains at least one communication infrastructure.

[0040] The boundaries of each grid cell do not exceed the maximum coverage of the central facility, and overlapping areas are preferentially included in the grid cells where facilities with higher communication levels are located.

[0041] Furthermore, the log acquisition and difference calculation module includes a log acquisition unit and a difference calculation unit.

[0042] The log acquisition unit: based on the communication infrastructure distribution grid map, obtains the network log of each communication infrastructure in the grid unit, the network log includes historical network normal data, historical network abnormal data and timestamps corresponding to the historical network normal data and the historical network abnormal data, and constructs a historical network normal data time set and a historical network abnormal data time set based on the timestamps.

[0043] The difference calculation unit: based on the timestamp, sorts the historical network normal data time set and the historical network abnormal data time set in chronological order, and calculates the difference between each two consecutive times contained in the historical network normal data time set and the historical network abnormal data time set to obtain a network abnormal data jump time difference sequence.

[0044] Furthermore, the stability calculation and curve construction module includes a stability calculation unit and a curve construction unit.

[0045] The stability calculation unit calculates the stability coefficient of a single communication infrastructure based on the time difference when the communication infrastructure jumps from historical network normal data to historical network abnormal data.

[0046] The curve construction unit: based on the stability coefficient of a single communication infrastructure, obtains the stability coefficient of each communication infrastructure in the grid unit; based on the stability coefficient of each communication infrastructure in the grid unit, constructs a communication infrastructure-stability coefficient coordinate system of the grid unit, wherein the horizontal coordinate of the communication infrastructure-stability coefficient coordinate system is the communication infrastructures arranged in sequence, and the vertical coordinate of the communication infrastructure-stability coefficient coordinate system is the stability coefficient corresponding to the communication infrastructures arranged in sequence, and all coordinate points in the communication infrastructure-stability coefficient coordinate system are connected in sequence to construct a communication infrastructure-stability coefficient curve.

[0047] Furthermore, the stability abnormality calculation and analysis module includes a stability abnormality calculation unit and an analysis unit.

[0048] The stability abnormality calculation unit calculates the stability abnormality of a single grid unit based on the communication infrastructure-stability curve of the single grid unit.

[0049] The analysis unit: calculates the similarity between different grid units; presets a stability anomaly threshold and a similarity threshold; if the stability anomaly of a single grid unit is greater than or equal to the stability anomaly threshold, and the similarity between the single grid unit and another grid unit is less than or equal to the similarity threshold, then it is determined that the single grid unit has a network security anomaly and is similar to the other grid unit; if the grid unit has a network security anomaly, all grid units similar to the grid unit are obtained, and a unified warning is issued, and emergency communication linkage is performed, specifically as follows: the communication infrastructure in the grid unit is isolated and switched to backup equipment; the network resources of the communication infrastructure in the grid unit without network security anomalies are allocated to the communication infrastructure in the grid unit with network security anomalies; and communication infrastructure with a high communication level is allocated first.

[0050] Compared with existing technologies, the present invention achieves the following beneficial effects: The present invention provides a network security early warning-based emergency communication linkage system and method. By acquiring geographic location information for all communication infrastructure within a city's communication area and dividing grid cells according to communication level and coverage, a grid map of the communication infrastructure distribution is constructed. This enables orderly planning and hierarchical management of the spatial distribution of urban communication resources, laying the foundation for subsequent precise location of risk areas and dispatch of communication resources. Based on the constructed grid map, network logs for each communication infrastructure are collected, and the time difference sequence of transitions between normal and abnormal states is extracted. This accurately characterizes the changing patterns of network operating states and constructs basic data features reflecting the suddenness of communication anomalies. The stability coefficient is calculated using the time difference sequence, establishing a corresponding relationship between communication infrastructure and its stability. This is then presented as a graphical curve, allowing for intuitive comparison and quantitative analysis of the stability characteristics of facilities within a single grid cell, further enhancing the operability and visualization capabilities of network stability monitoring. The stability anomaly degree of each grid cell is calculated based on the communication infrastructure-stability curve. The similarity between different grid cells is further calculated, and linkage threshold conditions are set. This enables a coordinated response for spatially similar and risk-related regions, effectively improving the ability of multiple regions to collaboratively handle network security incidents. Ultimately, by isolating and switching communication facilities in similar abnormal areas and dispatching resources, important facilities with high communication levels are given priority operation, ensuring rapid positioning, accurate warning and efficient handling in sudden network security incidents, thereby significantly improving the security protection capabilities of urban communication systems and the efficiency of emergency communication linkage. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] The accompanying drawings are used to provide further understanding of the present invention and constitute a part of the specification. They are used to explain the present invention together with the embodiments of the present invention and do not constitute a limitation of the present invention.

[0052] Figure 1 This is a schematic diagram of the steps of an emergency communication linkage method based on network security early warning according to the present invention;

[0053] Figure 2 It is a structural diagram of an emergency communication linkage system based on network security early warning of the present invention. DETAILED DESCRIPTION

[0054] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0055] See also Figure 1 In the first embodiment of the present invention, a method for emergency communication linkage based on network security early warning is provided, the method comprising the following steps:

[0056] Step S1: Obtain the geographical location information of all communication infrastructures in the urban communication area and construct a communication infrastructure distribution grid map.

[0057] Specifically, the geographic location information of all communication infrastructure in the urban communication area is obtained, and the communication infrastructure includes communication base stations, signal towers, routing nodes, and wireless relay devices; the geographic location information of all communication infrastructure is marked in the form of coordinates on the map, and a communication infrastructure distribution grid map is constructed, as follows:

[0058] Obtain the coverage and communication level of the communication infrastructure, and set manual planning rules to divide the urban communication area into N non-overlapping grid cells according to the geographical location information of all communication infrastructure. The manual planning rules include:

[0059] Prioritize the communication infrastructure according to its communication level, and use the communication infrastructure with a high communication level as the central facility of the grid unit.

[0060] Each grid cell contains at least one communication infrastructure.

[0061] The boundaries of each grid cell do not exceed the maximum coverage of the central facility, and overlapping areas are preferentially included in the grid cells where facilities with higher communication levels are located.

[0062] It should be noted that by obtaining the geographic location information of all communication base stations, signal towers, routing nodes, and wireless relay devices in the urban communication area, and dividing the grid units according to communication coverage capabilities and communication levels, a spatial structured expression of urban communication resources is achieved, thus laying the foundation for geographical zoning for subsequent data attribution, regional analysis, and stability modeling. This step effectively avoids the problems of duplicate resource statistics and blurred regional boundaries through orderly spatial division, making the management and scheduling of communication facilities spatially visible and controllable, especially in disaster emergency scenarios, allowing for the rapid location of areas with abnormal communication. This achieves the effect of regionalized, hierarchical, and visualized management of communication resources, providing a clear spatial structure basis for subsequent network log attribution, stability analysis, and emergency linkage strategy formulation, and enhancing the system's scenario adaptability and deployment flexibility.

[0063] Step S2: Obtain the network log of each communication infrastructure in the grid unit in the communication infrastructure distribution grid map, and construct a network abnormal data jump time difference sequence.

[0064] Specifically, based on the communication infrastructure distribution grid map, the network log of each communication infrastructure in the grid unit is obtained, the network log includes historical network normal data, historical network abnormal data and timestamps corresponding to the historical network normal data and the historical network abnormal data, and the historical network normal data time set and the historical network abnormal data time set are constructed based on the timestamps.

[0065] Furthermore, based on the timestamp, the historical network normal data time set and the historical network abnormal data time set are sorted in chronological order, and the difference between each two consecutive times in the time contained in the historical network normal data time set and the historical network abnormal data time set is calculated to obtain the network abnormal data jump time difference sequence, which is recorded as α={α i |i∈[1,I]}, where α i It represents the time difference of the communication infrastructure jumping from the historical network normal data to the historical network abnormal data for the i-th time, and I represents the total number of time differences of the communication infrastructure jumping from the historical network normal data to the historical network abnormal data.

[0066] It's important to note that this step extracts the timestamps of normal and abnormal data from the communication facility's historical network logs and constructs a sequence of jump time differences, quantifying the frequency and intervals of anomalies. This provides a time series basis for changes in the operational status of communication facilities. Jump time differences accurately capture the temporal dynamics of network anomaly fluctuations, providing fundamental data with more temporal significance than traditional "anomaly counts," enabling a better measurement of the volatility and instability of facility operations.

[0067] Step S3: Based on the network abnormal data jump time difference sequence, calculate the stability coefficient of a single communication infrastructure; based on the stability coefficient of each communication infrastructure in the grid unit, construct the communication infrastructure-stability coefficient coordinate system and communication infrastructure-stability coefficient curve of the grid unit.

[0068] Specifically, based on the time difference α of the communication infrastructure jumping from the historical network normal data to the historical network abnormal data for the i-th time i , calculate the stability coefficient of the mth communication infrastructure, the calculation formula is as follows:

[0069]

[0070] Among them, SC m represents the stability coefficient of the mth communication infrastructure, σ m represents the standard deviation of the transition time of the mth communication infrastructure, μ m represents the mean transition time of the mth communication infrastructure, αm,i It represents the time difference of the transition from the historical normal network data to the historical abnormal network data of the mth communication infrastructure for the i-th time.

[0071] Stability coefficient SC based on the mth communication infrastructure m , obtain the stability coefficient of each communication infrastructure in the grid cell.

[0072] Furthermore, a communication infrastructure-stability coefficient coordinate system of the grid unit is constructed based on the stability coefficient of each communication infrastructure in the grid unit, wherein the horizontal coordinate of the communication infrastructure-stability coefficient coordinate system is a total of M communication infrastructures arranged in sequence, and the vertical coordinate of the communication infrastructure-stability coefficient coordinate system is the stability coefficient corresponding to the total of M communication infrastructures arranged in sequence. All coordinate points in the communication infrastructure-stability coefficient coordinate system are sequentially connected to construct a communication infrastructure-stability coefficient curve, and the communication infrastructure-stability coefficient curve of the nth grid unit is recorded as TDH[SC n,m ].

[0073] It should be noted that this step further models the jump time difference as a stability coefficient, and establishes a facility stability-coefficient curve at the grid level, completing the spatial expression of stability from point (single facility) to surface (grid set). The stability coefficient reflects the abnormal change law of communication facilities through a combination of mean and standard deviation. The construction of the curve shows the overall situation and differential distribution of the operating status of each facility in a grid area, forming a quantifiable and comparable stability map. This step converts the abnormal characteristics of the time dimension into a stability curve of the spatial distribution dimension, realizes the quantitative analysis of regional stability, facilitates the monitoring and response strategy formulation of key areas (such as key facility-intensive areas), and improves the accuracy of risk assessment.

[0074] Step S4: Based on the communication infrastructure-stability coefficient curve, calculate the stability anomaly of a single grid unit; calculate the similarity between different grid units, preset the threshold and perform emergency communication linkage.

[0075] Specifically, the communication infrastructure based on the nth grid unit - stability curve TDH[SC n,m ], calculate the stability anomaly of the nth grid cell, and the calculation formula is as follows:

[0076]

[0077] Among them, AS n represents the stability anomaly of the nth grid cell, M represents the total number of communication infrastructure in the nth grid cell, SC n,mrepresents the stability coefficient of the mth communication infrastructure in the nth grid cell, SC n,max represents the maximum stability coefficient in the nth grid cell, and γ represents the preset weight coefficient.

[0078] Furthermore, the similarity between different grid cells is calculated using the formula: ΔAS n =|AS n -AS n+1 , where ΔAS n Represents the similarity between the nth grid cell and the n+1th grid cell, AS n+1 Indicates the stability anomaly of the n+1th grid cell.

[0079] Furthermore, the stability anomaly threshold and similarity threshold are preset. If the stability anomaly of the nth grid unit AS n If the value is greater than or equal to the stability abnormality threshold and the similarity between the nth grid unit and the n+1th grid unit is less than or equal to the similarity threshold, it is determined that the nth grid unit has a network security abnormality and is similar to the n+1th grid unit.

[0080] If the nth grid unit has a network security anomaly, all grid units similar to the nth grid unit are obtained, and a unified warning is issued and emergency communication linkage is performed, as follows:

[0081] The communication infrastructure in the nth grid cell and all grid cells similar to the nth grid cell is isolated and switched to backup equipment.

[0082] Allocate network resources of the communication infrastructure in the grid unit without network security anomalies to the communication infrastructure in the grid unit with network security anomalies.

[0083] Priority will be given to the allocation of communication infrastructure with high communication levels.

[0084] It should be noted that this step calculates the abnormality of a single grid based on the stability curve, and evaluates the similarity between adjacent grids. Combined with the dual threshold judgment of abnormality and similarity, it triggers a multi-region linkage response and resource allocation strategy. Through the quantitative analysis of stability abnormality, high-risk areas where the operating status deviates significantly from the normal range can be identified; and the similarity analysis helps to determine whether the abnormality has regional diffusion, thereby realizing multi-grid linkage disposal. This step constructs a linkage disposal mechanism for network security abnormalities, achieving a technological leap from "single-point abnormality perception" to "multi-region coordinated response", improving the resilience of the emergency communication system and the ability to quickly isolate and compensate for local faults, and significantly enhancing the overall risk management and control capabilities of the system and the level of service continuity assurance.

[0085] See also Figure 2 In the second embodiment of the present invention, an emergency communication linkage system based on network security early warning is provided, which includes: a data acquisition and grid map construction module, a log acquisition and difference calculation module, a stability calculation and curve construction module, and a stability anomaly and analysis module.

[0086] The data acquisition and grid map construction module is used to obtain the geographical location information of all communication infrastructure in the urban communication area and to construct a communication infrastructure distribution grid map.

[0087] The log acquisition and difference calculation module acquires the network log of each communication infrastructure in the grid unit of the communication infrastructure distribution grid map, and constructs a network abnormal data jump time difference sequence.

[0088] The stability calculation and curve construction module calculates the stability coefficient of a single communication infrastructure based on the network abnormal data jump time difference sequence; and constructs the communication infrastructure-stability coefficient coordinate system and communication infrastructure-stability coefficient curve of the grid unit based on the stability coefficient of each communication infrastructure in the grid unit.

[0089] The stability anomaly and analysis module calculates the stability anomaly of a single grid unit based on the communication infrastructure-stability coefficient curve; calculates the similarity between different grid units, presets a threshold and performs emergency communication linkage.

[0090] Furthermore, the data acquisition and grid map construction module includes a data acquisition unit and a grid map construction unit.

[0091] The data acquisition unit is configured to acquire geographic location information of all communication infrastructure in a city communication area, wherein the communication infrastructure includes communication base stations, signal towers, routing nodes, and wireless relay devices.

[0092] The grid map construction unit is configured to mark the geographical location information of all communication infrastructures on a map in the form of coordinates and construct a communication infrastructure distribution grid map, as follows:

[0093] Obtain the coverage and communication level of the communication infrastructure, and set manual planning rules to divide the urban communication area into N non-overlapping grid cells according to the geographical location information of all communication infrastructure. The manual planning rules include:

[0094] Prioritize the communication infrastructure according to its communication level, and use the communication infrastructure with a high communication level as the central facility of the grid unit.

[0095] Each grid cell contains at least one communication infrastructure.

[0096] The boundaries of each grid cell do not exceed the maximum coverage of the central facility, and overlapping areas are preferentially included in the grid cells where facilities with higher communication levels are located.

[0097] Furthermore, the log acquisition and difference calculation module includes a log acquisition unit and a difference calculation unit.

[0098] The log acquisition unit: based on the communication infrastructure distribution grid map, obtains the network log of each communication infrastructure in the grid unit, the network log includes historical network normal data, historical network abnormal data and timestamps corresponding to the historical network normal data and the historical network abnormal data, and constructs a historical network normal data time set and a historical network abnormal data time set based on the timestamps.

[0099] The difference calculation unit: based on the timestamp, sorts the historical network normal data time set and the historical network abnormal data time set in chronological order, and calculates the difference between each two consecutive times contained in the historical network normal data time set and the historical network abnormal data time set to obtain a network abnormal data jump time difference sequence.

[0100] Furthermore, the stability calculation and curve construction module includes a stability calculation unit and a curve construction unit.

[0101] The stability calculation unit calculates the stability coefficient of a single communication infrastructure based on the time difference when the communication infrastructure jumps from historical network normal data to historical network abnormal data.

[0102] The curve construction unit: based on the stability coefficient of a single communication infrastructure, obtains the stability coefficient of each communication infrastructure in the grid unit; based on the stability coefficient of each communication infrastructure in the grid unit, constructs a communication infrastructure-stability coefficient coordinate system of the grid unit, wherein the horizontal coordinate of the communication infrastructure-stability coefficient coordinate system is the communication infrastructures arranged in sequence, and the vertical coordinate of the communication infrastructure-stability coefficient coordinate system is the stability coefficient corresponding to the communication infrastructures arranged in sequence, and all coordinate points in the communication infrastructure-stability coefficient coordinate system are connected in sequence to construct a communication infrastructure-stability coefficient curve.

[0103] Furthermore, the stability abnormality calculation and analysis module includes a stability abnormality calculation unit and an analysis unit.

[0104] The stability abnormality calculation unit calculates the stability abnormality of a single grid unit based on the communication infrastructure-stability curve of the single grid unit.

[0105] The analysis unit: calculates the similarity between different grid units; presets a stability anomaly threshold and a similarity threshold; if the stability anomaly of a single grid unit is greater than or equal to the stability anomaly threshold, and the similarity between the single grid unit and another grid unit is less than or equal to the similarity threshold, then it is determined that the single grid unit has a network security anomaly and is similar to the other grid unit; if the grid unit has a network security anomaly, all grid units similar to the grid unit are obtained, and a unified warning is issued, and emergency communication linkage is performed, specifically as follows: the communication infrastructure in the grid unit is isolated and switched to backup equipment; the network resources of the communication infrastructure in the grid unit without network security anomalies are allocated to the communication infrastructure in the grid unit with network security anomalies; and communication infrastructure with a high communication level is allocated first.

[0106] It should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that includes a list of elements includes not only those elements but also other elements not explicitly listed, or elements inherent to such process, method, article, or apparatus.

[0107] Finally, it should be noted that the above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art will be able to modify the technical solutions described in the aforementioned embodiments or substitute equivalents for some of the technical features. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention shall be included within the scope of protection of the present invention.

Claims

1. A method for emergency communication linkage based on network security early warning, characterized in that: The method comprises the following steps: Step S1: Obtaining geographic location information of all communication infrastructure in the urban communication area and constructing a communication infrastructure distribution grid map; Step S2: obtaining the network log of each communication infrastructure in the grid cell in the communication infrastructure distribution grid map, and constructing a network abnormal data jump time difference sequence; Step S3: Calculate the stability coefficient of a single communication infrastructure based on the network abnormal data jump time difference sequence; construct a communication infrastructure-stability coefficient coordinate system and a communication infrastructure-stability coefficient curve for the grid unit based on the stability coefficient of each communication infrastructure in the grid unit; Step S4: Based on the communication infrastructure-stability coefficient curve, calculate the stability abnormality of a single grid unit; calculate the similarity between different grid units, preset a threshold and perform emergency communication linkage; Calculate the stability anomaly of the nth grid cell. The calculation formula is as follows: Among them, AS n represents the stability anomaly of the nth grid cell, M represents the total number of communication infrastructure in the nth grid cell, SC n,m represents the stability coefficient of the mth communication infrastructure in the nth grid cell, SC n,max represents the maximum stability coefficient in the nth grid cell, and γ represents the preset weight coefficient; Calculate the similarity between different grid cells, the calculation formula is: ΔAS n =|AS n -AS n+1 |, where ΔAS n Represents the similarity between the nth grid cell and the n+1th grid cell, AS n+1 represents the stability anomaly of the n+1th grid cell; Preset stability anomaly threshold and similarity threshold, if the stability anomaly of the nth grid unit AS n If the value of the network security anomaly is greater than or equal to the stability anomaly threshold, and the similarity between the network security anomaly and the n+1th grid unit is less than or equal to the similarity threshold, then it is determined that the nth grid unit has a network security anomaly and is similar to the n+1th grid unit; Carry out emergency communication linkage, as follows: Isolate the communication infrastructure in the nth grid cell and all grid cells similar to the nth grid cell and switch to backup equipment; allocating network resources of the communication infrastructure in the grid cells without network security anomalies to the communication infrastructure in the grid cells with network security anomalies; Priority will be given to the allocation of communication infrastructure with high communication levels.

2. The method for emergency communication linkage based on network security early warning according to claim 1, characterized in that: The specific implementation process of step S1 includes: Obtain the geographic location information of all communication infrastructure in the urban communication area, including communication base stations, signal towers, routing nodes, and wireless relay devices; mark the geographic location information of all communication infrastructure in the form of coordinates on a map, and construct a communication infrastructure distribution grid map, as follows: Obtain the coverage and communication level of the communication infrastructure, and set manual planning rules to divide the urban communication area into N non-overlapping grid cells according to the geographical location information of all communication infrastructure. The manual planning rules include: Prioritize communication infrastructure according to its communication level, and use the communication infrastructure with a high communication level as the central facility of the grid unit; Each grid cell contains at least one communication infrastructure; The boundaries of each grid cell do not exceed the maximum coverage of the central facility, and overlapping areas are preferentially included in the grid cells where facilities with higher communication levels are located.

3. The method for emergency communication linkage based on network security early warning according to claim 2, characterized in that: The specific implementation process of step S2 includes: Based on the communication infrastructure distribution grid map, obtaining a network log of each communication infrastructure in the grid unit, the network log including historical normal network data, historical abnormal network data, and timestamps corresponding to the historical normal network data and the historical abnormal network data, and constructing a historical normal network data time set and a historical abnormal network data time set based on the timestamps; Based on the timestamp, the historical network normal data time set and the historical network abnormal data time set are sorted in chronological order, and the difference between each two consecutive times in the time contained in the historical network normal data time set and the historical network abnormal data time set is calculated to obtain the network abnormal data jump time difference sequence, which is recorded as α={α i |i∈[1,I]}, where α i It represents the time difference of the communication infrastructure jumping from the historical network normal data to the historical network abnormal data for the i-th time, and I represents the total number of time differences of the communication infrastructure jumping from the historical network normal data to the historical network abnormal data.

4. The method for emergency communication linkage based on network security early warning according to claim 3 is characterized in that: The specific implementation process of step S3 includes: Based on the time difference α of the communication infrastructure jumping from the historical network normal data to the historical network abnormal data for the i-th time i , calculate the stability coefficient of the mth communication infrastructure, the calculation formula is as follows: Among them, SC m represents the stability coefficient of the mth communication infrastructure, σ m represents the standard deviation of the transition time of the mth communication infrastructure, μ m represents the mean transition time of the mth communication infrastructure, α m,i It represents the time difference of the transition from the historical normal network data to the historical abnormal network data for the i-th time of the m-th communication infrastructure; Stability coefficient SC based on the mth communication infrastructure m , obtain the stability coefficient of each communication infrastructure in the grid cell; Based on the stability coefficient of each communication infrastructure in the grid unit, a communication infrastructure-stability coefficient coordinate system of the grid unit is constructed, wherein the horizontal coordinate of the communication infrastructure-stability coefficient coordinate system is a total of M communication infrastructures arranged in sequence, and the vertical coordinate of the communication infrastructure-stability coefficient coordinate system is the stability coefficient corresponding to the total of M communication infrastructures arranged in sequence. All coordinate points in the communication infrastructure-stability coefficient coordinate system are sequentially connected to construct a communication infrastructure-stability coefficient curve. The communication infrastructure-stability coefficient curve of the nth grid unit is recorded as TDH[SC n,m ].

5. The method for emergency communication linkage based on network security early warning according to claim 4 is characterized in that: The specific implementation process of step S4 includes: Communication infrastructure based on the nth grid cell - stability curve TDH[SC n,m ], calculate the stability anomaly of the nth grid unit and calculate the similarity between different grid units; If there is a network security anomaly in the nth grid unit, all grid units similar to the nth grid unit are obtained, and a unified early warning is issued to perform emergency communication linkage.

6. An emergency communication linkage system based on network security early warning, executing an emergency communication linkage method based on network security early warning according to any one of claims 1 to 5, characterized in that: The system includes: a data acquisition and grid map construction module, a log acquisition and difference calculation module, a stability calculation and curve construction module, and a stability anomaly and analysis module; The data acquisition and grid map construction module is used to obtain the geographical location information of all communication infrastructure in the urban communication area and construct a communication infrastructure distribution grid map; The log acquisition and difference calculation module is used to acquire the network log of each communication infrastructure in the grid unit of the communication infrastructure distribution grid map and construct a network abnormal data jump time difference sequence; The stability calculation and curve construction module calculates the stability coefficient of a single communication infrastructure based on a time difference sequence of network abnormal data jumps; and constructs a communication infrastructure-stability coefficient coordinate system and a communication infrastructure-stability coefficient curve for the grid unit based on the stability coefficient of each communication infrastructure in the grid unit. The stability anomaly and analysis module calculates the stability anomaly of a single grid unit based on the communication infrastructure-stability coefficient curve; calculates the similarity between different grid units, presets a threshold and performs emergency communication linkage.

7. The emergency communication linkage system based on network security early warning according to claim 6 is characterized in that: The data acquisition and grid map construction module includes a data acquisition unit and a grid map construction unit; The data acquisition unit is configured to acquire geographic location information of all communication infrastructure in the urban communication area, wherein the communication infrastructure includes communication base stations, signal towers, routing nodes, and wireless relay devices; The grid map construction unit is configured to mark the geographical location information of all communication infrastructures on a map in the form of coordinates and construct a communication infrastructure distribution grid map, as follows: Obtain the coverage and communication level of the communication infrastructure, and set manual planning rules to divide the urban communication area into N non-overlapping grid cells according to the geographical location information of all communication infrastructure. The manual planning rules include: Prioritize communication infrastructure according to its communication level, and use the communication infrastructure with a high communication level as the central facility of the grid unit; Each grid cell contains at least one communication infrastructure; The boundaries of each grid cell do not exceed the maximum coverage of the central facility, and overlapping areas are preferentially included in the grid cells where facilities with higher communication levels are located.

8. The emergency communication linkage system based on network security early warning according to claim 7 is characterized in that: The log acquisition and difference calculation module includes a log acquisition unit and a difference calculation unit; The log acquisition unit is configured to acquire a network log of each communication infrastructure in the grid unit based on the communication infrastructure distribution grid map, wherein the network log includes historical normal network data, historical abnormal network data, and timestamps corresponding to the historical normal network data and the historical abnormal network data, and construct a time set of historical normal network data and a time set of historical abnormal network data based on the timestamps; The difference calculation unit: based on the timestamp, sorts the historical network normal data time set and the historical network abnormal data time set in chronological order, and calculates the difference between each two consecutive times contained in the historical network normal data time set and the historical network abnormal data time set to obtain a network abnormal data jump time difference sequence.

9. The emergency communication linkage system based on network security early warning according to claim 8, characterized in that: The stability calculation and curve construction module includes a stability calculation unit and a curve construction unit; The stability calculation unit is configured to calculate the stability coefficient of a single communication infrastructure based on the time difference between the communication infrastructure's single jump from historical network normal data to historical network abnormal data; The curve construction unit: based on the stability coefficient of a single communication infrastructure, obtains the stability coefficient of each communication infrastructure in the grid unit; Based on the stability coefficient of each communication infrastructure in the grid unit, a communication infrastructure-stability coefficient coordinate system of the grid unit is constructed. The horizontal coordinate of the communication infrastructure-stability coefficient coordinate system is the communication infrastructures arranged in sequence, and the vertical coordinate of the communication infrastructure-stability coefficient coordinate system is the stability coefficient corresponding to the communication infrastructures arranged in sequence. All coordinate points in the communication infrastructure-stability coefficient coordinate system are connected in sequence to construct a communication infrastructure-stability coefficient curve.

10. The emergency communication linkage system based on network security early warning according to claim 9, characterized in that: The stability abnormality calculation and analysis module includes a stability abnormality calculation unit and an analysis unit; The stability abnormality calculation unit calculates the stability abnormality of a single grid unit based on the communication infrastructure-stability curve of the single grid unit; The analysis unit calculates the similarity between different grid units; A stability anomaly threshold and a similarity threshold are preset. If the stability anomaly of a single grid unit is greater than or equal to the stability anomaly threshold, and the similarity between the grid unit and another grid unit is less than or equal to the similarity threshold, then it is determined that the single grid unit has a network security anomaly and is similar to the other grid unit; if a grid unit has a network security anomaly, all grid units similar to the grid unit are obtained, and a unified warning is issued, and emergency communication linkage is performed, specifically as follows: the communication infrastructure in the grid unit is isolated and switched to backup equipment; the network resources of the communication infrastructure in the grid unit without network security anomalies are allocated to the communication infrastructure in the grid unit with network security anomalies; and communication infrastructure with a high communication level is allocated first.

Images