基于关联规则的电力系统调用规则全链路生成方法  

Full link generation method of power system calling rules based on association rules

作　　者：樊涛 武亚光 江帆 FAN Tao;WU Ya-guang;JIANG Fan(Internet Department of State Grid Corporation of China,Beijing 100031,China;State Grid Customer Service Centre,Tianjin 300300,China)

机构地区：[1]国家电网有限公司互联网部,北京100031 [2]国家电网有限公司客户服务中心,天津300300

出　　处：《信息技术》2023年第9期132-137,142,共7页Information Technology

摘　　要：为解决电力系统网络入侵、攻击等现象频发的问题,安全生成电力系统调用规则,研究基于关联规则的电力系统调用规则全链路生成方法。采用基于关联规则的决策树构造方法,利用新属性生成与新属性评价,获得近似精确规则集,构建电力系统全链路决策树,运用基于AR-C4.5的电力系统调用规则全链路生成方法,通过电力系统调用序列预处理,生成规则以及匹配规则,全链路生成电力系统调用规则。算例分析结果表明:该方法构建的全链路决策树规模较小;错误率和漏报率仅分别为1.8%、0.4%;全链路正常攻击和变种攻击的误报数量均低于5。In order to solve the problem of frequent network intrusion and attack in power system,and safely generate the power system calling rules,the full link generation method of power system calling rules based on association rules is studied.The decision tree construction method is used based on association rules,and the approximate accurate rule set is obtained by using new attribute generation and new attribute evaluation,and the full link decision tree of power system is constructed.The full link generation method of power system calling rules based on AR-C4.5 is used,and through power system calling sequence preprocessing,the rules,matching rules and the full link generates power system call rules are generated.The example analysis results show that the scale of the full link decision tree constructed by this method is small,and the error rate and false alarm rate are only 1.8%and 0.4%respectively.The number of false positives of full link normal attack and variant attack is less than 5.

关 键 词：关联规则 电力系统调用 规则全链路 C4.5算法 决策树 

分 类 号：TP302.8[自动化与计算机技术—计算机系统结构]