电力企业网络态势感知技术研究

Research on network situational awareness technology of electric power enterprises

网络态势感知采用先进的大数据架构,采集系统的网络安全数据信息并统一处理分析,实现对网络攻击行为、安全威胁事件、日志以及流量等网络安全问题的发现和告警,打造安全可监控、威胁可感知、事件可控制的安全体系。电力企业网络态势感知技术借助机器学习、人工智能、大数据等技术,从长期、海量网络安全态势数据处理过程中学习,洞察数据隐含的内在逻辑关系,对电力业务网络中各种活动实现异常行为辨识、攻击意图理解和行为影响评估,以达到对安全态势的推理性判断和知识性把控。

Network situational awareness adopts an advanced big data architecture.By collecting the network security data information of the system,all security data is processed and analyzed in a unified manner,so as to realize the discovery and analysis of network security issues such as network attack behavior,security threat events,logs,traffic,etc.Alarms to create security capabilities that can be monitored,threats can be sensed,and events can be controlled.The advancements of mobile technology and its widespread availability have redefined many computing paradigms including Human-centric sensing.Human-centric sensing has already been successfully implemented as integrated network architecture component in many operational intelligent systems in various industry areas such as electric power,defense,energy and disaster management.