Abnormal traffic detection device and method for energy Internet information support network

Abstract

The invention discloses an abnormal traffic detection device of an energy internet information support network, which realizes identification of abnormal traffic by performing traffic sampling, feature extraction and classification on the information support network. According to the method, frequency-domain features of uplink traffic and downlink traffic data between a server and a core switch are extracted based on a wavelet packet analysis theory, an energy Internet information support network traffic time-frequency domain mixed feature set is constructed, and an artificial bee colony optimized support vector machine is used as a classification model. According to the device, support is provided for accurate and rapid verification of traffic anomaly and security situation awareness of the communication network of the intelligent substation and guarantee of stable operation of an information physical tight coupling power system.

Description

Technical field[0001]The present invention relates to an abnormal flow detection device for an energy internet information support network. The present invention relates to energy internet information support network communication flow detection, and in particular to an energy internet information support network communication flow detection based on mixed characteristics of time domain and frequency domain Module, the device device includes: a flow collection module, a flow feature extraction module, and an abnormal flow identification module.Background technique[0002]The construction of an information support network injects new impetus into the operation of the energy Internet more efficiently and conveniently. The real-time collection and transmission of measurement data is of great significance to operation and maintenance personnel. Energy companies use modern, informatized, and digital means to integrate energy Internet and information support networks to achieve the converge...

AI Technical Summary

Problems solved by technology

Existing industrial network analyzers and traffic anomaly detection algorithms are usually based on thresholds to determine anomalies, which do not utilize the inherent characteristics of energy Internet network traffic and have low detection accuracy

Images