This invention discloses an
adaptive monitoring load baseline calibration method for dealing with the
impact of large passenger flows in subways. The method includes real-time acquisition of multi-dimensional data from subway stations, construction of a correlation prediction model between passenger flow,
image complexity, and
bitstream, calculation of the theoretical expected
bitstream baseline of the monitored video at the current moment, calculation of the relative residual rate between the real-time monitored
bitstream and the theoretical expected bitstream baseline, and setting a dynamic anomaly judgment threshold. When the relative residual rate is greater than the threshold, it is judged as mixed
attack abnormal traffic, triggering a level-two alarm; when the relative residual rate is less than or equal to the threshold, but the real-time monitored bitstream exceeds a preset proportion of the physical link limit, it is judged as pure business congestion, triggering a level-one warning. This invention can effectively distinguish between malicious
attack traffic deviating from the baseline and large passenger flow business traffic conforming to the baseline pattern, enabling the monitoring network to understand and adapt to the normal business
scenario of "passenger flow
impact," ensuring the continuity of critical monitoring services under extreme passenger flow conditions.