Operation and maintenance management method and device, electronic equipment and storage medium

Abstract

The invention discloses an operation and maintenance management method and device, electronic equipment and a storage medium, and the method comprises the steps: obtaining equipment information in an information system based on preset index items which at least comprise a basic index item and a configuration index item; determining a first evaluation value corresponding to the equipment information according to the data similarity between the preset index item and the equipment information; and based on the first evaluation value, determining an operation and maintenance strategy of the terminal equipment corresponding to the equipment information in a security strategy library. The equipment information is obtained through the preset index item at least comprising the basic index item and the configuration index item, the comprehensiveness of equipment information obtaining is ensured, and the reliability of equipment operation and maintenance management is improved; the corresponding first evaluation value is obtained through the data similarity between the equipment information and the corresponding preset index item, and the operation and maintenance strategy is obtained according to the first evaluation value, so that the obtaining objectivity and accuracy of the operation and maintenance strategy are ensured, the deviation of artificial subjective judgment is avoided, and the equipment management efficiency is improved.

Description

Technical Field

[0001] The present invention relates to the field of operation and maintenance management technology, and in particular to an operation and maintenance management method, device, electronic equipment and storage medium. Background Art

[0002] With the continuous advancement of enterprise informatization, the scale of information systems has grown exponentially, and the variety and number of devices have increased dramatically, posing significant challenges to operations and maintenance management. Traditional operations and maintenance management methods rely primarily on manual inspections and empirical judgment, resulting in inefficiency, error-proneness, and slow response times. Furthermore, due to the lack of a scientific evaluation system, traditional operations and maintenance strategies are often ill-defined and fail to meet the actual needs of different devices, resulting in inefficient operations and maintenance management. Therefore, providing an efficient and effective operations and maintenance management method with precise policy matching capabilities has become a pressing issue in the field of operations and maintenance management technology. Summary of the Invention

[0003] The present invention provides an operation and maintenance management method, device, electronic device and storage medium. The present invention ensures the comprehensiveness of equipment information acquisition and improves the reliability of equipment operation and maintenance management; ensures the objectivity and accuracy of operation and maintenance strategy acquisition, avoids deviations from human subjective judgment, and improves equipment management efficiency.

[0004] One aspect of an embodiment of the present invention provides an operation and maintenance management method, including:

[0005] Acquiring device information in the information system based on preset indicator items, wherein the preset indicator items include at least basic indicator items and configuration indicator items;

[0006] Determining a first evaluation value corresponding to the device information according to the data similarity between the preset indicator item and the device information;

[0007] Based on the first evaluation value, an operation and maintenance policy of the terminal device corresponding to the device information is determined in a security policy library.

[0008] In one aspect of an embodiment of the present invention, an operation and maintenance management device is provided, comprising:

[0009] An information acquisition module, configured to acquire device information within the information system based on preset indicator items, wherein the preset indicator items include at least basic indicator items and configuration indicator items;

[0010] an information evaluation module, configured to determine a first evaluation value corresponding to the device information based on a data similarity between the preset indicator item and the device information;

[0011] A policy acquisition module is used to determine the operation and maintenance policy of the terminal device corresponding to the device information in the security policy library based on the first evaluation value.

[0012] Another aspect of an embodiment of the present invention provides an electronic device, including:

[0013] at least one processor; and

[0014] a memory communicatively coupled to the at least one processor;

[0015] The memory stores a computer program that can be executed by at least one processor, and the computer program is executed by at least one processor so that the at least one processor can execute the operation and maintenance management method of any embodiment of the present invention.

[0016] Another aspect of an embodiment of the present invention provides a computer-readable storage medium, comprising: computer instructions, where the computer instructions are used to enable a processor to execute the operation and maintenance management method of any embodiment of the present invention when executed.

[0017] In an embodiment of the present invention, device information within an information system is obtained based on preset indicator items that at least include basic indicator items and configuration indicator items, and a first evaluation value of the device information is determined based on the data similarity between the obtained device information and the corresponding preset indicator items. Based on the first evaluation value, an operation and maintenance policy for the terminal device corresponding to the device information is determined in a security policy library. In an embodiment of the present invention, device information within an information system is obtained through preset indicator items that at least include basic indicator items and configuration indicator items, thereby ensuring the comprehensiveness of device information acquisition, avoiding the one-sidedness of relying solely on a single indicator item to obtain device information, and improving the reliability of device operation and maintenance management; obtaining the corresponding first evaluation value based on the data similarity between the device information and the corresponding preset indicator items, and obtaining the operation and maintenance policy based on the first evaluation value ensures the objectivity and accuracy of the operation and maintenance policy acquisition, avoiding the deviation of human subjective judgment, and improving the efficiency of device management.

[0018] It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present invention, nor is it intended to limit the scope of the present invention. Other features of the present invention will become readily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0020] Figure 1 This is a flow chart of an operation and maintenance management method provided according to the first embodiment of the present invention;

[0021] Figure 2 This is a flow chart of another operation and maintenance management method provided according to the second embodiment of the present invention;

[0022] Figure 3 This is a flow chart of another operation and maintenance management method provided according to the third embodiment of the present invention;

[0023] Figure 4 This is a block diagram of an operation and maintenance management device provided according to a fourth embodiment of the present invention;

[0024] Figure 5 This is a block diagram of another operation and maintenance management device provided according to the fifth embodiment of the present invention;

[0025] Figure 6 This is a block diagram of an electronic device for executing an operation and maintenance management method provided in Example 6 of the present invention. DETAILED DESCRIPTION

[0026] In order to enable those skilled in the art to better understand the solutions of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the embodiments described are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of the present invention.

[0027] It should be noted that the terms "first", "second", etc. in the description and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that the numbers used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0028] Example 1

[0029] Figure 1 A flowchart of an operation and maintenance management method is provided for the first embodiment of the present invention. The embodiment of the present invention is applicable to scenarios where automated and precise operation and maintenance of massive equipment in an information system is performed. The method can be executed by an operation and maintenance management device, which can be implemented in the form of hardware and / or software and can be configured in an electronic device. Figure 1 As shown, the method includes:

[0030] S110. Acquire device information in the information system based on preset indicator items, where the preset indicator items at least include basic indicator items and configuration indicator items.

[0031] Among them, preset indicator items refer to a set of structured data pre-defined for collecting device information, which serves as a benchmark for collecting device information and can be used for standardized collection of device information. There are at least two types of preset indicator items: basic indicator items and configuration indicator items. Basic indicator items refer to a set of original monitoring data that reflects the real-time operating status of the device. For example, basic indicator items may include data such as the device's CPU utilization, memory usage, or disk read and write rates, which can be used for real-time device performance monitoring or fault diagnosis; configuration indicator items can be understood as a series of quantitative evaluation indicators used to measure whether the device complies with management policies or security requirements. For example, configuration indicator items may include: performance indicator items, security indicator items, and availability indicator items. Optionally, preset indicator items can be obtained by calling expert system models or manual labeling based on the acquired historical device information, operation and maintenance management requirements, device characteristics within the information system, and / or other relevant factors.

[0032] Device information refers to a series of parameters related to the operation of various terminal devices within the information system, including but not limited to the CPU utilization, memory usage, disk read and write rates, system response speed, number of device vulnerabilities and / or device downtime of various terminal devices. Device information can exist in the information system or in each terminal device within the information system in the form of a configuration file or underlying resources. Device information can serve as the basis for operation and maintenance management, and operation and maintenance management within the information system can be achieved by scanning and monitoring the device information of the information system. Optionally, in some embodiments, before the operation and maintenance management of the information system is performed based on the device information, data preprocessing operations can be performed on the device information, such as data format conversion or normalization operations; the quality of the device information can also be verified, for example, by hash verification or manual sampling of key information to ensure the quality of the device information and improve operation and maintenance efficiency.

[0033] Specifically, based on the acquired historical device information, operation and maintenance management requirements, device characteristics within the information system, and / or other relevant factors, preset indicator items are obtained by calling an expert system model or manually labeling, wherein the preset indicator items include at least two categories: basic indicator items and configuration indicator items. Based on the basic indicator items and configuration indicator items in the preset indicator items, the configuration files or underlying resources of various terminal devices within the information system are scanned to obtain device information related to the operation of various terminal devices and that can reflect the real-time operating status of the devices, such as CPU utilization, memory usage, disk read and write rates, system response speed, number of device vulnerabilities, and / or device downtime. Optionally, in some embodiments, data preprocessing and / or data quality verification operations may also be performed on the device information to ensure data quality and improve operation and maintenance efficiency. The manner in which data preprocessing and / or data quality verification operations are performed on the device information is not limited in the embodiments of the present invention.

[0034] S120: Determine a first evaluation value corresponding to the device information according to the data similarity between the preset indicator item and the device information.

[0035] Data similarity is used to measure the degree of match between the preset indicator and the device information. The data similarity between the preset indicator and the device information can be determined by calculating the Levenshtein distance and / or cosine similarity between the preset indicator and the device information. When the data similarity between the preset indicator and the device information is determined based on both the Levenshtein distance and cosine similarity, different weights can be assigned to the Levenshtein distance and cosine similarity, and the data similarity can be determined by weighted summation.

[0036] The first evaluation value can be understood as a quantitative score that reflects the degree of conformity between device information and pre-set indicators. This conformity can also be used to further determine the operating status of the corresponding terminal device. The higher the data similarity between the pre-set indicators and the device information, the higher the first evaluation value and the better the device's operating status. Conversely, the lower the data similarity, the lower the first evaluation value, indicating potential abnormalities in device operation.

[0037] Specifically, the Levenshtein distance or cosine similarity between the preset indicator item and the device information is used as the data similarity between the preset indicator item and the device information. When the data similarity between the preset indicator item and the device information is determined based on both the Levenshtein distance and the cosine similarity, different weights may be assigned to the Levenshtein distance and the cosine similarity, and the data similarity is determined by weighted summation, and the data similarity is used as the first evaluation value of the device information. A higher first evaluation value indicates a better operating status of the corresponding terminal device.

[0038] S130. Based on the first evaluation value, determine the operation and maintenance policy of the terminal device corresponding to the device information in the security policy library.

[0039] Specifically, a first evaluation value of the device information determined based on the data similarity between the preset indicator item and the device information is obtained. The first evaluation value can be hashed using a hash algorithm to obtain a first evaluation hash value corresponding to the first evaluation value. The first evaluation hash value is used as a query condition to construct a first query statement of the security policy library. By executing the first query statement, the operation and maintenance policy corresponding to the first evaluation value is obtained; or if the operation and maintenance policy of the terminal device exists in the form of a key-value pair in the security policy library, the first evaluation value can be matched with the key value in the security policy library using a semantic similarity matching or a regular expression matching operation to obtain a value value corresponding to the key value matching the first evaluation value, and the content contained in the value value is the operation and maintenance policy.

[0040] In an embodiment of the present invention, device information within an information system is obtained based on preset indicator items that at least include basic indicator items and configuration indicator items, and a first evaluation value of the device information is determined based on the data similarity between the obtained device information and the corresponding preset indicator items. Based on the first evaluation value, an operation and maintenance policy for the terminal device corresponding to the device information is determined in a security policy library. In an embodiment of the present invention, device information within an information system is obtained through preset indicator items that at least include basic indicator items and configuration indicator items, thereby ensuring the comprehensiveness of device information acquisition, avoiding the one-sidedness of relying solely on a single indicator item to obtain device information, and improving the reliability of device operation and maintenance management; obtaining the corresponding first evaluation value based on the data similarity between the device information and the corresponding preset indicator items, and obtaining the operation and maintenance policy based on the first evaluation value ensures the objectivity and accuracy of the operation and maintenance policy acquisition, avoiding the deviation of human subjective judgment, and improving the efficiency of device management.

[0041] Optionally, another operation and maintenance management method provided by an embodiment of the present invention also includes: based on the first evaluation value, before determining the operation and maintenance policy of the terminal device corresponding to the device information in the security policy library, including: standardizing the device information to obtain standard information data; determining the information entropy value of the standard information data, and determining the preset information weight based on the information entropy value; multiplying the first evaluation value by the preset information weight to obtain the first evaluation value.

[0042] Among them, standard information data refers to the equipment information obtained after standardization processing, which has a unified format, dimension and specification. Standardization of equipment information can facilitate the subsequent calculation of information entropy value.

[0043] Specifically, before determining the operation and maintenance policy of the terminal device corresponding to the device information in the security policy library based on the first evaluation value, the device information can be standardized. The standardization method may include: range standardization and Z-score standardization. The standardized device information is used as standard information data. For the standard information data, an information entropy value used to measure the uncertainty information contained in the standard information data is calculated. Based on the information entropy value of each device information, a preset information weight of the device information is determined through a hierarchical analysis method or an entropy weight method. The preset information weight is multiplied by the first evaluation value, and the multiplication result can be used as a new first evaluation value. Subsequent operations are performed based on the new first evaluation value. It is understandable that the larger the information entropy value of the standard information data, the greater the uncertainty of the device information, and a smaller preset information weight is assigned to the device information with a large information entropy value. It can be understood that the warning weight can also be determined jointly by the hierarchical analysis method and the entropy weight method. The initial warning weight calculated by the hierarchical analysis method can be defined as the first warning weight, and the initial warning weight calculated by the entropy weight method can be defined as the second initial warning weight. The combined weight determined by the first warning weight and the second warning weight can be used as the preset information weight. The group of preset information weights can include the weighted sum or weighted average of the first warning weight and the second warning weight.

[0044] By standardizing device information and analyzing information entropy, and dynamically assigning preset information weights, the accuracy of obtaining operation and maintenance strategies can be further improved.

[0045] Optionally, another operation and maintenance management method provided by an embodiment of the present invention also includes: using an association rule mining algorithm to determine the correlation relationship between device information, the correlation relationship at least includes: a causal correlation relationship; using the correlation relationship to construct an operation and maintenance strategy for the information system, the operation and maintenance strategy at least includes an adjustment strategy for the device information within the information system.

[0046] Specifically, an association rule mining algorithm can be used to mine potential causal association rules and / or other association rules between device information, and the mined causal association rules and / or other association rules can be respectively determined as association relationships between each device information. The mined association relationships are used to construct an operation and maintenance strategy for the information system, wherein the operation and maintenance strategy at least includes an adjustment strategy for adjusting the device information within the information system.

[0047] For example, using the mined association relationships to construct an operation and maintenance strategy that at least includes adjusting the device information in the information system may include: if one of the association relationships between the device information mined by the association rule mining algorithm is that if the CPU usage is greater than 95% for 10 minutes, the hard disk failure rate increases by 30%, then the operation and maintenance strategy constructed may be to automatically migrate the load to an idle node when the CPU usage exceeds the threshold; or if another association relationship between the device information mined by the association rule mining algorithm is that if the memory usage is greater than 80% and the network delay is greater than 0ms, the application response time increases by 50%, then the operation and maintenance strategy constructed may be to automatically restart the application service when the memory usage exceeds the threshold. In an embodiment of the present invention, the rules for constructing an operation and maintenance strategy based on the association relationships between device information are not limited to the above two rules. The embodiment of the present invention is intended to illustrate the process of constructing an operation and maintenance strategy based on the association relationships between device information, and the construction process is not listed one by one here.

[0048] By mining the causal relationship between device information to build an operation and maintenance strategy, we can ensure the targeted construction of the operation and maintenance strategy, thereby improving the efficiency of equipment operation and maintenance management.

[0049] Optionally, another operation and maintenance management method provided by an embodiment of the present invention further includes: acquiring historical equipment information of the information system, calling an expert system model to evaluate the historical equipment information, and obtaining preset indicator items.

[0050] The expert system model can be understood as an artificial intelligence model that simulates the reasoning process of an expert. The expert system model is trained based on the experience of professionals and / or domain expert knowledge. The first expert system model may include at least one knowledge base and a rule engine. The knowledge base is used to store professional experience data, domain expert knowledge data, and / or domain rules. The rule engine can be used to manage predefined domain rule sets and automatically derive conclusions based on input data and domain rule sets.

[0051] Specifically, an expert system model trained based on professional experience and / or domain expert knowledge is obtained, and historical device information within the information system is obtained. This historical device information is input into the expert system model. The expert system model automatically outputs preset indicators corresponding to the historical device information based on its own stored experience data, domain expert knowledge data, and / or domain rules. Device information within the current information system can be obtained based on these preset indicators.

[0052] By calling the expert system model to evaluate historical equipment information, preset indicators can be obtained more objectively and accurately, which will help to make subsequent efficient operation and maintenance decisions.

[0053] Example 2

[0054] Figure 2A flowchart of another operation and maintenance management method is provided for the second embodiment of the present invention. The embodiment of the present invention is a refinement of the above embodiment. Specifically, it refines the specific steps of how to determine the degree of matching between preset indicator items and device information.

[0055] like Figure 2 As shown, another operation and maintenance management method may include the following specific steps:

[0056] S210: Acquire device information in the information system based on preset indicator items, where the preset indicator items at least include basic indicator items and configuration indicator items.

[0057] S220: Determine a first data similarity between the device information and the basic index item, and determine a second data similarity between the device information and the configuration index item.

[0058] Among them, the first data similarity refers to the data similarity between the device information and the basic indicator items, which is used to measure the degree of matching between the basic indicator items and the device information. The first data similarity between the basic indicator items and the device information can be determined by calculating the Levenshtein distance and / or cosine similarity between the basic indicator items and the device information.

[0059] The second data similarity refers to the data similarity between the device information and the configuration index item, which is used to measure the degree of matching between the configuration index item and the device information. The second data similarity between the configuration index item and the device information can also be determined by calculating the Levenshtein distance and / or cosine similarity between the configuration index item and the device information.

[0060] Specifically, basic indicators and configuration indicators from the preset indicators are obtained, and a first data similarity is determined by calculating a method such as the Levenshtein distance and / or cosine similarity between the basic indicators and the device information. A second data similarity is determined by calculating a method such as the Levenshtein distance and / or cosine similarity between the configuration indicators and the device information. Subsequent operations are performed based on the first and second data similarities. The above method for calculating data similarity is provided as an example in the embodiments of the present invention and is not intended to be limiting.

[0061] S230 , normalizing the result of adding the first data similarity and the second data similarity to obtain a binary determination value of the device information, and using the binary determination value as a first evaluation value.

[0062] Among them, the binary judgment value can be understood as a quantitative indicator used to measure the comprehensive matching degree between device information and preset indicator items. The binary judgment value is usually 0 or 1. When the binary judgment value is 0, it indicates that the device information does not match the preset indicator items. When the binary judgment value is 1, it indicates that the device information matches the preset indicator items.

[0063] Specifically, the first data similarity and the second data similarity between the preset indicator item and the device information are obtained, the first data similarity and the second data similarity are added together to obtain a cumulative value, the cumulative value is normalized to obtain a binary judgment value for the device information. For example, the normalization method can be: comparing the cumulative value with a preset threshold value, and when the cumulative value is less than the preset threshold value, the binary judgment value obtained is equal to 0, and when the cumulative value is greater than the preset threshold value, the binary judgment value obtained is equal to 1. Alternatively, a σ activation function or other suitable activation function can be called, and the activation function is used to process the cumulative value to obtain a binary judgment value of 0 or 1. Afterwards, the binary judgment value of the device information is used as the first evaluation value of the device information to perform subsequent operations. The above-mentioned normalization method is only used as an example in the embodiment of the present invention and is not limited thereto.

[0064] S240. Based on the first evaluation value, determine the operation and maintenance policy of the terminal device corresponding to the device information in the security policy library.

[0065] In an embodiment of the present invention, based on the basic indicator items and configuration indicator items of the preset indicator items, the device information in the information system is obtained, a first data similarity between the device information and the basic indicator items, and a second data similarity between the device information and the configuration indicator items are determined, the first data similarity and the second data similarity are added together, and normalization processing is performed to obtain a binary judgment value of the device information, and the binary judgment value is used as the first evaluation value. In an embodiment of the present invention, by separately calculating the data similarity between the device information and the basic indicator items and the configuration indicator items, a comprehensive multi-dimensional quantification of the device information is achieved, avoiding the one-sidedness of relying solely on a single indicator item to determine data similarity, and improving the reliability of equipment operation and maintenance management; through normalization processing, the first evaluation value can have a standardized range, which can simplify the judgment and decision-making of the equipment operating status, increase the speed of obtaining operation and maintenance strategies, and thus improve the efficiency of equipment management.

[0066] Example 3

[0067] Figure 3 A flowchart of another operation and maintenance management method is provided for the third embodiment of the present invention. The embodiment of the present invention is a refinement of the above embodiment. Specifically, it refines the specific steps of determining the first data similarity between device information and basic indicator items and the specific steps of how to determine the second data similarity between device information and configuration indicator items.

[0068] like Figure 3 As shown, another operation and maintenance management method may include the following specific steps:

[0069] S310: Acquire device information in the information system based on preset indicator items, where the preset indicator items at least include basic indicator items and configuration indicator items.

[0070] S320: Determine a first term frequency inverse document frequency value for each data field in the device information and a second term frequency inverse document frequency value for each data field in the basic index item.

[0071] Among them, the first term frequency inverse document frequency value is the product value of the term frequency and the inverse document frequency of each data field in the device information, and the second term frequency inverse document frequency value refers to the product value of the term frequency and the inverse document frequency of each data field in the basic indicator item. The term frequency is the frequency with which each data field in the device information appears in the device information, and the inverse document frequency is an indicator to measure the importance of the data field. The more a data field appears in the device information, the lower the inverse document frequency.

[0072] Specifically, the data fields in the device information can be decomposed according to the field meaning or identifier in the device information. According to the acquired device information and the data fields of the preset index items, the first word frequency and the first inverse document frequency corresponding to all data fields in the device information, as well as the second word frequency and the second inverse document frequency corresponding to all data fields in the preset index items can be determined. The first word frequency and the first inverse document frequency are multiplied to obtain the first word frequency inverse document frequency value, and the second word frequency and the second inverse document frequency are multiplied to obtain the second word frequency inverse document frequency value.

[0073] S330: Construct a first information vector of the device information based on the first term frequency inverse document frequency value, and construct a second information vector of the device information based on the second term frequency inverse document frequency value.

[0074] Among them, the first information vector refers to a vector composed of the first term frequency inverse document frequency values ​​corresponding to each data field in the device information, and the second information vector is similar to the first information vector, and refers to a vector composed of the second term frequency inverse document frequency values ​​corresponding to each data field in the preset indicator item.

[0075] Specifically, in the device information, determine that each data field corresponds to a first term frequency inverse document frequency value, use each first term frequency inverse document frequency value as a vector element, and arrange them into a first information vector in a certain order; in the preset indicator items, determine that each data field corresponds to a second term frequency inverse document frequency value, use each second term frequency inverse document frequency value as a vector element, and arrange them into a second information vector in a certain order.

[0076] S340: Perform a dot product operation on the first information vector and the second information vector, and use the ratio of the dot product operation result to the first vector modulus of the first information vector and the second vector modulus of the second information vector as the first data similarity.

[0077] The first vector modulus refers to the length of the first information vector, which can reflect the absolute size of the first information vector. The second vector modulus is similar to the first vector modulus, which refers to the length of the second information vector, which can reflect the absolute size of the second information vector. The first vector modulus and the second vector modulus are used to calculate the first data similarity.

[0078] Specifically, obtain the first information vector and the second information vector, and perform a dot product operation on the first information vector and the second information vector, that is, multiply and add each element in the first information vector and each element in the second information vector accordingly to obtain the sum of the products of the corresponding multiplications of each element of the first information vector and the second information vector, use the sum of the products as the result of the dot product operation, determine the absolute size of the first information vector and the second information vector, use the absolute size of the first information vector as the modulus of the first vector, use the absolute size of the second information vector as the modulus of the second vector, and use the ratio of the operation result to the modulus of the first vector and the modulus of the second vector as the first data similarity.

[0079] S350: Determine the Levenshtein distance between the device information and the configuration index item, and use the Levenshtein distance as the second data similarity.

[0080] Specifically, the device information and the configuration index items are converted into character sequences or word sequences, and the Levenshtein distance between each pair of character sequences or word sequences is calculated using a dynamic programming algorithm, and the Levenshtein distance is used as the second data similarity between the device information and the configuration index items.

[0081] S360 , normalize the result of adding the first data similarity and the second data similarity to obtain a binary determination value of the device information, and use the binary determination value as a first evaluation value.

[0082] S370. Based on the first evaluation value, determine the operation and maintenance policy of the terminal device corresponding to the device information in the security policy library.

[0083] In an embodiment of the present invention, based on basic indicator items and configuration indicator items of preset indicator items, device information in an information system is obtained, a first term frequency inverse document frequency value of each data field in the device information and a second term frequency inverse document frequency value of each data field in the basic indicator items are determined, each first term frequency inverse document frequency value is used as a vector element to construct a first information vector of the device information, each second term frequency inverse document frequency value is used as a vector element to construct a second information vector of the device information, a dot product operation is performed on the first information vector and the second information vector, a ratio of a result of the dot product operation to a first vector modulus of the first information vector and a second vector modulus of the second information vector is used as a first data similarity between the device information and the basic indicator item, a Levenshtein distance between the device information and the configuration indicator item is used as a second data similarity between the device information and the configuration indicator item, a result of adding the first data similarity and the second data similarity is normalized to obtain a binary judgment value of the device information, the binary judgment value is used as a first evaluation value, and based on the first evaluation value, an operation and maintenance policy of a terminal device corresponding to the device information is determined in a security policy library. The embodiment of the present invention jointly determines the first evaluation value by adopting different methods for calculating data similarity, thereby ensuring the accuracy of the calculation of the first evaluation value, improving the accuracy of obtaining the operation and maintenance strategy, and further improving the operation and maintenance management efficiency.

[0084] Example 4

[0085] Figure 4 This is a structural diagram of another operation and maintenance management device provided in the fourth embodiment of the present invention, which can execute the operation and maintenance management method of any of the above embodiments, such as Figure 4 As shown, the device includes: a data acquisition module 410, a data modeling module 420, a data storage module 430, a data mining module 440, a data training module 450, a data matching module 460, a data application module 470, a data visualization module 480, and a data governance module 490.

[0086] Data collection module 410 is used to collect system operation and maintenance data from the information system. This data includes, but is not limited to, system logs, operating parameters of devices within the information system, and network traffic data. System logs may include information such as the information system's startup, operation, and fault logs, ensuring a comprehensive record of the information system's operating status. Hardware parameters may include information such as the information system's CPU usage, memory usage, and disk input and output interfaces, providing basic data for device performance evaluation. Network traffic data may include information on the information system's latency and packet loss rate within the communication network.

[0087] The data modeling module 420 is used to perform modeling processing on the collected system operation and maintenance data, including calling the expert system model to evaluate the system operation and maintenance data, and obtaining basic indicator item data and configuration indicator item data corresponding to the system operation and maintenance data, wherein the basic indicator items may include the following indicator items: CPU usage, memory usage, disk input and output rate, network traffic, delay time and packet loss rate and other indicator items; configuration indicator items may include the following indicator items: performance indicators, such as information system response time, security indicators, such as the number of information system vulnerabilities and availability indicators, such as information system downtime.

[0088] The data storage module 430 is used to store collected system operation and maintenance data, untrained expert system models, and basic indicator data and configuration indicator data output by the expert system models. In an embodiment of the present invention, the data storage module 430 may also include a raw data storage submodule, a model data storage submodule, and an analysis result storage submodule. The raw data storage submodule is used to store system operation and maintenance data collected from the information system, ensuring data integrity and traceability; the model data storage submodule is used for untrained expert system models to facilitate subsequent call and update.

[0089] Data mining module 440 is used to receive system operation and maintenance data sent by data storage module 430 and mine potential relationships within the system operation and maintenance data to construct an operation and maintenance strategy for the information system. The constructed operation and maintenance strategy can be stored in the module itself or in the security policy library of data storage module 430. Data mining module 440 can also be used to identify outliers in the data based on the relationships between the system operation and maintenance data, helping to identify potential fault hazards in advance.

[0090] Data training module 450 is used to train the expert system model using collected historical system operation and maintenance data and mined relationships, adapting it to different operation and maintenance scenarios and requirements. The trained expert system model analyzes the currently acquired system operation and maintenance data to obtain basic indicators and configuration indicators specific to the system operation and maintenance data.

[0091] The data matching module 460 is used to determine a first data similarity between the system operation and maintenance data and the basic indicator item data, and to determine a second data similarity between the device information and the configuration indicator item. It is also used to normalize the result of adding the first data similarity and the second data similarity to obtain a first evaluation value for the device information.

[0092] The data application module 470 is used to search the information system's operation and maintenance strategy in the security policy library of the data storage module 330 according to the first evaluation value; it can also be used to issue early warning information to the operation and maintenance personnel and adjust the operating parameters and resource allocation of the information system according to the operation and maintenance strategy.

[0093] The data visualization module 480 is used to display the operation and maintenance strategy in the form of charts and reports, which can intuitively present the characteristics and trends of the data.

[0094] The data governance module 490 is used to manage and monitor the quality, security, and compliance of system operation and maintenance data, and is also used to correct unqualified system operation and maintenance data.

[0095] The operation and maintenance management device provided by the embodiment of the present invention can execute the operation and maintenance management method provided by any embodiment of the present invention, and has the corresponding beneficial effects of executing the method.

[0096] Example 5

[0097] Figure 5 This is a structural diagram of an operation and maintenance management device provided in the fifth embodiment of the present invention. This embodiment is applicable to scenarios where automated and precise operation and maintenance of massive equipment in an information system is performed. The device can be implemented in software and / or hardware. The device can be integrated into any electronic device that provides operation and maintenance management functions and can execute the operation and maintenance management method of any of the above embodiments. Figure 5 As shown, the operation and maintenance management device specifically includes: an information acquisition block 510, an information evaluation module 520 and a strategy acquisition module 530.

[0098] The information acquisition block 510 is used to acquire device information in the information system based on preset indicator items, where the preset indicator items include at least basic indicator items and configuration indicator items;

[0099] An information evaluation module 520 is configured to determine a first evaluation value corresponding to the device information based on a data similarity between a preset indicator item and the device information;

[0100] The policy acquisition module 530 is used to determine the operation and maintenance policy of the terminal device corresponding to the device information in the security policy library based on the first evaluation value.

[0101] Optionally, the operation and maintenance management device also includes: a weight determination module, which is used to standardize the equipment information to obtain standard information data; determine the information entropy value of the standard information data, and determine the preset information weight based on the information entropy value; multiply the first evaluation value by the preset information weight to obtain the first evaluation value.

[0102] Optionally, the operation and maintenance management device also includes: a strategy construction module, which is used to use an association rule mining algorithm to determine the association relationship between device information, and the association relationship at least includes: a causal relationship; and use association rules to construct an operation and maintenance strategy for the information system, and the operation and maintenance strategy at least includes an adjustment strategy for the device information in the information system.

[0103] Optionally, the operation and maintenance management device further includes: an indicator item acquisition module, which is used to obtain historical equipment information of the information system, call the expert system model to evaluate the historical equipment information, and obtain preset indicator items.

[0104] Optionally, the information evaluation module 520 of the operation and maintenance management device further includes: a similarity determination unit and an evaluation value determination unit. The similarity determination unit is configured to determine a first data similarity between the device information and the basic indicator item, and a second data similarity between the device information and the configuration indicator item; and the evaluation value determination unit is configured to normalize the sum of the first data similarity and the second data similarity to obtain a binary determination value for the device information, and use the binary determination value as the first evaluation value.

[0105] Optionally, the similarity determination unit is specifically used to determine the first term frequency inverse document frequency value of each data field in the device information and the second term frequency inverse document frequency value of each data field in the basic index item; construct a first information vector of the device information based on the first term frequency inverse document frequency value, and construct a second information vector of the device information based on the second term frequency inverse document frequency value; perform a dot product operation on the first information vector and the second information vector, and use the ratio of the result of the dot product operation to the first vector modulus of the first information vector and the second vector modulus of the second information vector as the first data similarity.

[0106] Optionally, the similarity determination unit is further specifically configured to determine a Levenshtein distance between the device information and the configuration index item, and use the Levenshtein distance as the second data similarity.

[0107] Optionally, the policy acquisition module 530 further includes: an information processing unit, a weight determination unit, and an evaluation value updating unit. The information processing unit is configured to perform standardization processing on the device information to obtain standard information data; the weight determination unit is configured to determine an information entropy value of the standard information data and determine a preset information weight based on the information entropy value; and the evaluation value updating unit is configured to multiply the first evaluation value by the preset information weight to obtain the first evaluation value.

[0108] The operation and maintenance management device provided by the embodiment of the present invention can execute the operation and maintenance management method provided by any embodiment of the present invention, and has the corresponding beneficial effects of executing the method.

[0109] Example 6

[0110] Embodiment 6 of the present invention provides an electronic device for executing an operation and maintenance management method, a computer-readable storage medium, and a computer program product.

[0111] Figure 6 A schematic diagram of the structure of an electronic device that can be used to implement the operation and maintenance management method of any embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown in the embodiments of the present invention, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the embodiments of the present invention described and / or required herein.

[0112] like Figure 6 As shown, the electronic device includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the ROM 12 or the computer program loaded from the storage unit 18 to the RAM 13. Various programs and data required for the operation of the electronic device can also be stored in the RAM 13. The processor 11, ROM 12 and RAM 13 are connected to each other via a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0113] Multiple components in the electronic device are connected to the I / O interface 15, including an input unit 16, such as a keyboard, mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a magnetic disk, optical disk, etc.; and a communication unit 19, such as a network card, modem, wireless communication transceiver, etc. The communication unit 19 allows the electronic device to exchange information / data with other devices via a computer network such as the Internet and / or various telecommunication networks.

[0114] Processor 11 can be any general-purpose and / or specialized processing component with processing and computing capabilities. Some examples of processor 11 include, but are not limited to, a central processing unit, a graphics processing unit, various specialized artificial intelligence computing chips, various processors that run machine learning model algorithms, a digital signal processor, and any suitable processor, controller, microcontroller, etc. Processor 11 executes the various methods and processes described above, such as the operation and maintenance management method.

[0115] In some embodiments, the operation and maintenance management method can be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program can be loaded and / or installed on the electronic device via ROM 12 and / or communication unit 19. When the computer program is loaded into RAM 13 and executed by processor 11, one or more steps based on the operation and maintenance management method can be performed. Alternatively, in other embodiments, processor 11 can be configured to implement the operation and maintenance management method in any other appropriate manner (e.g., by means of firmware).

[0116] Various implementations of the systems and techniques described above in the embodiments of the present invention may be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays, application specific integrated circuits, application specific standard products, system-on-chip systems, load programmable logic devices, computer hardware, firmware, software, and / or combinations thereof. These various implementations may include: being implemented in one or more computer programs that are executable and / or interpreted on a programmable system including at least one programmable processor, which may be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0117] The computer programs for implementing the methods of the embodiments of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer programs are executed by the processor, the functions / operations specified in the flowcharts and / or block diagrams are implemented. The computer programs may be executed entirely on the machine, partially on the machine, as a stand-alone software package, partially on the machine and partially on a remote machine, or entirely on a remote machine or server.

[0118] In the context of an embodiment of the present invention, a computer-readable storage medium can be a tangible medium that can contain or store a computer program for use by an instruction execution system, device or equipment or used in combination with an instruction execution system, device or equipment. A computer-readable storage medium can include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium can be a machine-readable signal medium. A more specific example of a machine-readable storage medium can include an electrical connection based on one or more lines, a portable computer disk, a hard disk, RAM, ROM, an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0119] To provide interaction with a user, the systems and techniques described herein can be implemented on a device having: a display device (e.g., a cathode ray tube or liquid crystal display monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user can provide input to the device. Other types of devices can also be used to provide interaction with the user; for example, the feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic input, voice input, or tactile input).

[0120] The systems and techniques described herein can be implemented in a computing system that includes back-end components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes front-end components (e.g., a user computer with a graphical user interface or web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such back-end components, middleware components, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include local area networks, wide area networks, blockchain networks, and the Internet.

[0121] A computing system may include clients and servers. The clients and servers are generally remote from each other and typically interact via a communication network. This client-server relationship arises through computer programs running on the respective computers, creating a client-server relationship. The server may be a cloud server, also known as a cloud computing server or cloud host. This server is a host product within a cloud computing service ecosystem that addresses the management difficulties and limited scalability of traditional physical hosts and virtual private server services.

[0122] It should be understood that the various forms of the processes shown above can be used to reorder, add, or delete steps. For example, the steps described in the present invention can be performed in parallel, sequentially, or in a different order, as long as the desired results of the technical solution of the present invention can be achieved. This is not limited herein.

[0123] The above specific embodiments do not constitute a limitation on the scope of protection of the embodiments of the present invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions may be made based on design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. An operation and maintenance management method, characterized in that: The method comprises: Acquiring device information in the information system based on preset indicator items, wherein the preset indicator items include at least basic indicator items and configuration indicator items; Determining a first evaluation value corresponding to the device information according to the data similarity between the preset indicator item and the device information; Based on the first evaluation value, an operation and maintenance policy of the terminal device corresponding to the device information is determined in a security policy library.

2. The method according to claim 1, characterized in that The determining the first evaluation value corresponding to the device information according to the data similarity between the preset indicator item and the device information includes: Determining a first data similarity between the device information and the basic indicator item, and determining a second data similarity between the device information and the configuration indicator item; A result of adding the first data similarity and the second data similarity is normalized to obtain a binary determination value of the device information, and the binary determination value is used as the first evaluation value.

3. The method according to claim 2, characterized in that The determining the first data similarity between the device information and the basic indicator item includes: Determining a first term frequency inverse document frequency value for each data field in the device information and a second term frequency inverse document frequency value for each data field in the basic index item; constructing a first information vector of the device information based on the first term frequency inverse document frequency value, and constructing a second information vector of the device information based on the second term frequency inverse document frequency value; A dot product operation is performed on the first information vector and the second information vector, and a ratio of a result of the dot product operation to a first vector modulus of the first information vector and a second vector modulus of the second information vector is used as the first data similarity.

4. The method according to claim 2, characterized in that Determining the second data similarity between the device information and the configuration indicator item includes: Determine a Levenshtein distance between the device information and the configuration index item, and use the Levenshtein distance as the second data similarity.

5. The method according to claim 1, characterized in that: Before determining, in a security policy library, an operation and maintenance policy for the terminal device corresponding to the device information based on the first evaluation value, the method includes: Performing standardization processing on the device information to obtain standard information data; Determining an information entropy value of the standard information data, and determining a preset information weight according to the information entropy value; The first evaluation value is multiplied by the preset information weight to obtain the first evaluation value.

6. The method according to claim 1, characterized in that The method further comprises: Determine the association relationship between the device information using an association rule mining algorithm, wherein the association relationship includes at least: a causal association relationship; An operation and maintenance strategy for the information system is constructed using the association relationship, and the operation and maintenance strategy at least includes an adjustment strategy for device information in the information system.

7. The method according to claim 1, characterized in that: The method further comprises: The historical equipment information of the information system is acquired, and the expert system model is called to evaluate the historical equipment information to obtain the preset indicator items.

8. An operation and maintenance management device, characterized in that: The device comprises: An information acquisition module, configured to acquire device information within the information system based on preset indicator items, wherein the preset indicator items include at least basic indicator items and configuration indicator items; an information evaluation module, configured to determine a first evaluation value corresponding to the device information based on a data similarity between the preset indicator item and the device information; A policy acquisition module is used to determine the operation and maintenance policy of the terminal device corresponding to the device information in the security policy library based on the first evaluation value.

9. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the operation and maintenance management method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer instructions, which are used to enable a processor to implement the operation and maintenance management method according to any one of claims 1 to 7 when executed.

Images