基于大数据的电力信息网络流量异常检测机制

doi:10.11959/j.issn.1000-0801.2017031

Abstract

Abstract:

With the construction of smart grid, the electric power information network and its business system get rapid development. The early flow anomaly detection and warning are significant to the safety of network. Due to the lack of efficient measuring means to handle the flow abnormal problems, a flow anomaly detection mechanism based on big data for the electric power information network was proposed. Through the comparative analysis of two common anomaly detection algorithms, the improved local outlier factor algorithm (M-LOF) and the support vector data description (SVDD) algorithm, the suitable flow anomaly detection method for electric power information network was summarized.

Key words: electric power information network, flow anomaly detection, local outlier factor, support vector data description

CLC Number:

TM744

Honghong JIANG,Tao ZHANG,Xinjian ZHAO,Xin QIAN,Tiancheng ZHAO,Lisha GAO. A big data based flow anomaly detection mechanism of electric power information network[J]. Telecommunications Science, 2017, 33(3): 134-141.

Figures/Tables 10

References 14

[1]	孟小峰，慈祥 . 大数据管理概念、技术与挑战[J]. 计算机研究与发展， 2013,50(1): 146-169.
	MENG X F , CI X . Big data management: concepts, techniques, challenges[J]. Journal of Computer Research and Development, 2013,50(1): 146-169.
[2]	张东霞，苗新，刘丽平，等. 智能电网大数据技术发展研究[J]. 中国电机工程学报, 2015,35(1): 2-12.
	ZHANG D X , MIAO X , LIU L P , et al. Research on development strategy for smart grid big data[J]. Proceedings of the CSEE, 2015,35(1): 2-12.
[3]	宋亚奇，周国亮，朱永利 . 智能电网大数据处理技术现状与挑战[J]. 电网技术, 2013,37(4): 927-935.
	SONG Y Q , ZHOU G L , ZHU Y L . Present status and challenges of big data processing in smart grid[J]. PowerSystem Technology, 2013,37(4): 927-935.
[4]	孙宏斌，胡江溢，刘映尚，等. 调度控制中心功能的发展——电网实时安全预警系统[J]. 电力系统自动化, 2004,28(15): 1-6.
	SUN H B , HU J Y , LIU Y S , et al. Development of the power dispatching control center-real time power security early warning system[J]. Automation of Electric Power Systems, 2004,28(15): 1-6.
[5]	严剑峰，于之虹，田芳，等. 电力系统在线动态安全评估和预警系统[J]. 中国电机工程学报, 2008,28(34): 87-93.
	YAN J F , YU Z H , TIAN F , et al. Dynamic security assessment and early warning system of power system[J]. Proceedings of the CSEE, 2008,28(34): 87-93.
[6]	汤涌，王英涛，田芳，等. 大电网安全分析，预警及控制系统的研发[J]. 电网技术, 2012,36(7): 1-11.
	TANG Y , WANG Y T , TIAN F , et al. Research and development of stability analysis, early-warning andcontrol system for huge power grids[J]. Power System Technology, 2012,36(7): 1-11.
[7]	蔡斌，吴素农，王诗明，等. 电网在线安全稳定分析和预警系统[J]. 电网技术, 2007,31(2): 36-41.
	CAI B , WU S N , WANG S M , et al. Power grid on-line security and stability analysis and forewarning system[J]. Power System Technology, 2007,31(2): 36-41.
[8]	荆铭，邱夕兆，延峰，等. 电力调度数据网安全技术及其应用[J]. 电网技术, 2008,32(26): 173-176.
	JIN M , QIU X Z , YAN F , et al. Security technology of electric power dispatching data network and its application[J]. Power System Technology, 2008,32(26): 173-176.
[9]	许涛，贺仁睦，王鹏，等. 基于统计学习理论的电力系统暂态稳定评估[J]. 中国电机工程学报, 2003,23(11): 51-55.
	XU T , HE R M , WANG P , et al. Power systemtransient stability assessment based on statistical learning theory[J]. Proceedings of the CSEE, 2003,23(11): 51-55.
[10]	黄天恩，孙宏斌，郭庆来，等. 基于电网运行大数据的在线分布式安全特征选择[J]. 电力系统自动化, 2016,40(4): 32-40.
	HUANG T E , SUN H B , GUO Q L , et al. Online distributed security feature selection based on big data in power system operation[J]. Automation of Electric Power Systems, 2016,40(4): 32-40.
[11]	穆瑞辉，付欢 . 浅析数据挖掘概念与技术[M]. 北京: 机械工业出版社, 2008.
	MU R H , FU H . Analyze the concept of data mining and technology[M]. Beijing: China Machine Press, 2008.
[12]	郑黎明，邹鹏，贾焰 . 网络流量异常检测中分类器的提取与训练方法研究[J]. 计算机学报, 2012,35(4): 719-729.
	ZHENG L M , ZOU P , JIA Y . How to extract and train the classifier in traffic anomaly detection system[J]. Chinese Journal of Computers, 2012,35(4): 719-729.
[13]	曲朝阳，陈帅，杨帆，等. 基于云计算技术的电力大数据预处理属性约简方法[J]. 电力系统自动化, 2014,38(8): 67-71.
	QU Z Y , CHEN S , YANG F , et al. An attribute reducing method for electric power big data preprocessing based on cloud computing technology[J]. Automation of Electric Power Systems, 2014,38(8): 67-71.
[14]	奉国和 . SVM分类核函数及参数选择比较[J]. 计算机工程与应用, 2011,47(3): 123-124.
	FENG G H . Parameter optimizing for support vector machines classification[J]. Computer Engineering and Applications, 2011,47(3): 123-124.

Metrics

Recommended 0

No Suggested Reading articles found!

字段名	说明
RecordTime	记录时间
LinkID	链路ID
SourceIP	源IP地址
DestinationIP	目的IP地址
SourcePort	源端口号
DestinationPort	目的端口号
ProtocolID	传输层的协议类型
PacketsIn	输入报文数
PacketsOut	输出报文数
BytesIn	输入字节数
BytesOut	输出字节数
TocIn	流中输入数据的一个字段
TocOut	流中输出数据的一个字段
AppType	流的协议号
FlowDirection	服务器相关
StartTime	流创建时间
EndTime	流结束时间
FlowID	流标识
DeveiceID	设备标识
ProtocolGroupID	协议分组ID
UserGroupID	用户组ID
UserID	用户ID
RegionID	地域ID
CarrierID	运营商ID
Custom	备用预留字段

维度字段名	说明
业务种类	业务种类由端口号来区分
源IP地址的分布空间	单位时间内访问的不同源 IP地址的数目
目的IP地址的分布空间	单位时间内进行数据传输的不同目的IP地址的数目
目的地址的最大访问次数	单位时间内单个目的地址被重复发送的最大次数
数据分组发送个数	单位时间内该业务端口数据分组发送的总个数
数据分组接收个数	单位时间内该业务端口数据分组接收的总个数
数据分组发送字节数	单位时间内该业务端口数据分组发送的总字节数
数据分组接收字节数	单位时间内该业务端口数据分组接收的总字节数

	sigmoid-SVDD	RBF-SVDD	linear-SVDD
准确率	67.4%	96.1%	82.5%
召回率	62.1%	88.3%	76.3%

	M-LOF	RBF-SVDD
准确率	97.0%	86.1%
召回率	87.4%	82.1%

	M-LOF	RBF-SVDD
准确率	90.0%	93.1%
召回率	82.1%	88.3%

A big data based flow anomaly detection mechanism of electric power information network

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 10

References 14

Related Articles 0

Metrics

Recommended 0