A method and system for network risk perception of power monitoring system

Abstract

The invention discloses a method and system for network risk perception of a power monitoring system, relating to the technical field of network security, which collects network threat information perceived by multi-type or multi-vendor network security equipment at the network boundary of the power monitoring system, and performs network threat information on the network threat information. Analyze and calculate the accuracy of network threat identification, and display the current network threat information to users when the accuracy of network threat identification exceeds the threshold. The ability to perceive network risks does not depend on a single device or manufacturer, but on the composition of multiple devices The system has higher overall stability and stronger anti-risk ability, which solves the problem that the current power monitoring system's identification of network threats depends on the network security protection equipment at the network border to perceive network threats independently, and it is easy to miss network threats Or a wrong judgment, resulting in a technical problem that the power monitoring system's network risk identification ability is not high.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method and system for network risk perception of a power monitoring system. Background technique [0002] The existing power monitoring system deploys a large number of various types of network security protection equipment at the network border. These network security protection equipment detect and analyze the behavior in the network based on different network threat signature databases of their respective manufacturers, and obtain corresponding threat alarms. . However, due to the technical barriers and commercial protection factors of different manufacturers, there is currently no solution to integrate all network security device features. Therefore, network threats can only be detected by relying on the maturity of the network security protection equipment itself. This may be due to the technical level of the manufacturer or the technical characteristics of the n...

AI Technical Summary

Problems solved by technology

[0003] The present invention provides a network risk perception method and system for a power monitoring system, which is used to solve the problem that the current power monitoring system's identification of network threats depends on the network security protection equipment at the network boundary to perceive network threats independently, and network threats are prone to exist The omission or misjudgment of the power monitoring system leads to the technical problem that the network risk identification ability of the power monitoring system is not high

Images