Intelligent power grid IT asset safety monitoring system based on distributed scheduling

Abstract

The invention discloses an intelligent power grid IT asset safety monitoring system based on distributed scheduling. The system comprises multiple acquisition servers, multiple system servers and multiple database servers, wherein the acquisition servers are used for acquiring the IT asset data information and comparing the acquired IT asset data information to find vulnerability, the system servers are used for distributing received detection tasks to each acquisition server, and the database servers are used for realizing storage, update, query and statistics of a vulnerability database, a target database and a vulnerability detection result database. The system is advantaged in that through constructing a distributed database, establishing a detection cluster and realizing distributed degree scheduling, distributed operation and analysis in a real sense are realized, and high-efficiency safety monitoring on intelligent power grid IT assets is accomplished.

Description

technical field [0001] The invention relates to a method and system in the technical field of network information security, in particular to a smart grid IT asset security monitoring system based on distributed scheduling. Background technique [0002] At present, in the field of smart grid, intelligent electronic devices with protection, measurement, control, billing and other functions are widely used in the power grid. In order to improve the interoperability and real-time interoperability between intelligent electronic Communication service modules of standards (such as IEC61850) are also adopted. Compared with the traditional power grid, the network elements (industrial switches, routers, network management servers, etc.) used for interconnection and intercommunication have become an important part of the new power grid infrastructure, so the automation and intelligence of the power system have achieved unprecedented development. However, while the wide application of ...

AI Technical Summary

Problems solved by technology

[0003] Some systems and technologies that currently exist for network security monitoring of IT assets mostly implement security monitoring and management of the system through security risks or security events. Such systems often only take into account asset management information, business information, and current security status. , related security incidents, lack of ability to independently discover assets, and it is difficult to discover "information islands" existing in the network

From the perspective of scanning devices, scanning devices often only consider the devices covered by their vulnerability databases, and lack continuous discovery capabilities for some "device unrecognized" assets, so some information islands are difficult to capture; and for event management platforms In other words, if there is no security event that can be intercepted or captured, the asset will never be discovered by the platform

[0004] At the same time, the existing equipment lacks the ability to locate all-round information on assets

Images