基于动态网络的电网入侵证据获取系统设计与实现  

Design and implementation of intrusion evidence acquisition system based on dynamic network

作　　者：杨浩 林楠 谢昕[2] YANG Hao;LIN Nan;XIE Xin(Electric Power Research Institute, State Grid Jiangxi Power Co. Ltd. , Nanchang 330096, China;School of Information Engineering, East China Jiaotong University, Nanchang 330013, China)

机构地区：[1]国网江西省电力有限公司电力科学研究院,南昌330096 [2]华东交通大学信息工程学院,南昌330013

出　　处：《沈阳工业大学学报》2021年第4期373-377,共5页Journal of Shenyang University of Technology

基　　金：国家自然科学基金项目(61762037).

摘　　要：针对电力监控系统的入侵证据获取耗时长、查全率低、错误率高的问题,提出基于动态网络的入侵证据获取系统.系统框架包括采集层、处理分析层以及显示层,根据每层需要设计系统模块,包括监控采集模块、预处理模块、数据传输模块、中心分析模块以及显示模块.根据拉格朗日方程及非局部均值滤波算法完成冗余数据滤除,得出缺失数据,完成数据清洗过程.结果表明,所设计系统具有查全率高、错误率低的特点,能有效保证电力监控系统网络信息安全.Aiming at the problems of long-time-consuming,low recall rate and high error rate of intrusion evidence acquisition in power monitoring system,an intrusion evidence acquisition system based on dynamic network was proposed.The system framework consisted of an acquisition layer,a processing analysis layer and a display layer.The system modules were designed according to the needs of each layer,including a monitoring acquisition module,a preprocessing module,a data transmission module,a central analysis module and a display module.According to Lagrange’s equation and non-local mean filtering algorithm,the redundant data were filtered out,the missing data were obtained,and the data cleaning process was completed.The results show that the as-proposed system has the characteristics of high recall rate and low error rate,and can effectively guarantee the network information security of power monitoring system.

关 键 词：动态网络 入侵证据 获取系统 分层网络 查全率 最大包处理 系统耗时 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]