A dual-network interweaving anomaly detection method and system

Abstract

The present invention provides a dual-network interweaving abnormality detection method and system, the method comprising: obtaining the network topology baseline data of the dual-network, and saving the network element information of each sub-network of the dual-network, and the dual-network is a mutually redundant ring network ; Monitor network element information changes, production change information, and determine whether dual-network interweaving abnormality occurs according to the change information and the network topology baseline data. Dynamically monitor network changes based on network topology baseline data, and realize dynamic abnormal interweaving detection for existing signal security data network networking schemes.

Description

technical field [0001] The invention belongs to the field of rail transit communication, and in particular relates to a double-network interweaving abnormality detection method and system. Background technique [0002] In the high-speed train control network, the current network design is physically isolated and redundant. The purpose is to avoid communication abnormalities or communication interruptions when the network fails. And ground equipment cannot obtain real-time information, resulting in operational accidents or train control safety accidents. At present, a dual-network structure is adopted to ensure the normal communication of the entire rail transit network. Each train control system is connected to the dual-network respectively, and the dual-networks belong to different IP network segments. Such as figure 1 As shown, the dual network in the signal safety data network topology is the left network and the right network. In the dual-network redundant network arc...

AI Technical Summary

Problems solved by technology

[0003] Since the current high-speed rail train control safety data network does not have traffic collection equipment, it is impossible to collect the traffic of the left (right) network, analyze the source network address, and judge whether the datagram sent by the host of the left (right) network is in the right (left) network. middle transmission

[0004] The existing network management server only has the ability to collect and manage network element information. If a device crosses the network, it cannot make an alarm action, locate the cross-network device, and fail to quickly recover from the fault.

Images