Network security management optimization method and system for non-controlled services

Abstract

The invention relates to the technical field of smart power grids, and provides a network security management optimization method and system for non-controlled services, and the method comprises the steps: achieving the network security optimization through constructing a main and auxiliary dual-node redundancy architecture and a dynamic topology confusion mechanism; wherein the main node generates a communication topology containing an actual link weight and a scheduling priority based on a real attribute, and the auxiliary node constructs a virtual topology by using camouflage data to form double-layer communication protection. The main node and the auxiliary node operate synchronously and monitor the heartbeat state in real time, when the main node fails, the auxiliary node is triggered to take over the flow, a real data mode is seamlessly switched, a credible topology is reconstructed, and the system continuity is guaranteed. In the face of network attacks, a hierarchical isolation strategy is adopted to actively identify traffic anomalies, and a secondary node takes over when a main node is attacked, so that an attack path is blocked; when the auxiliary node is attacked, pseudo parameters are injected into the camouflage layer to induce an attacker and collect behavior characteristics, so that the anti-attack capability and the operation reliability of the energy network are improved.

Images