CN104394038B - Suspension bypass automatic detection early warning system and method - Google Patents
Suspension bypass automatic detection early warning system and method Download PDFInfo
- Publication number
- CN104394038B CN104394038B CN201410742667.9A CN201410742667A CN104394038B CN 104394038 B CN104394038 B CN 104394038B CN 201410742667 A CN201410742667 A CN 201410742667A CN 104394038 B CN104394038 B CN 104394038B
- Authority
- CN
- China
- Prior art keywords
- communication line
- article
- unit
- suspension
- communication
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The present invention relates to a kind of suspension bypasses automatic detection early warning system, including special audit device, audit device administrative center, several servers and several clients；Described special audit device includes functional module and communication module；Described several clients are communicated with described communication module by second switch group, described audit device administrative center is communicated with described communication module by 3rd switch group, described communication module is connected with described functional module, and described the first group of switches, second switch group and 3rd switch group include several switches respectively；The invention further relates to a kind of realize the method that suspension bypasses automatic detection early warning.Using the suspension bypass automatic detection early warning system and method for the present invention, can self-inspection network environment, according to the real-time controlling network expanded range of network environment, solve the information security hidden danger of special audit device, simple structure, have wide range of applications.
Description
Technical field
The present invention relates to communication technical field, more particularly to network state, specifically refer to a kind of suspension bypass automatic detection
Early warning system and method.
Background technology
Network Security Audit System provides effective behavior auditing, content auditing, behavior for internet behavior and reports to the police, OK
For control and related audit function.Effective supervision of internet, prevention, prevention leakage of data are provided from management layer.Meet and use
Family internet behavior auditing is put on record and safety precautions requirement, complete internet records are provided, are easy to tracking of information, are
System safety management and risk prevention.
Existing operating system has all supported the command functions such as ping traceroute, the ground relied in proprietary network environment
Location is different, and reasonable combination can achieve the local detection of network state using order；Network bypass refers to that not changing existing network opens up
On the basis of flutterring structure, existing circuit is avoided by mirror image, the mode of communication is realized using new line.
Content of the invention
The purpose of the present invention is the shortcoming for overcoming above-mentioned prior art, there is provided one kind being capable of self-inspection network environment, root
Suspension bypass according to the real-time controlling network expanded range of network environment, the information security hidden danger for solving special audit device is automatic
Detection early warning system and method.
To achieve these goals, the suspension bypass automatic detection early warning system of the present invention and method have following composition：
The suspension bypass automatic detection early warning system, which is mainly characterized by, and described system includes special audit device, examines
Meter equipment management center, several servers and several clients；Described special audit device includes functional module and leads to
Letter module；Described several servers are communicated with described communication module by the first group of switches, described the first switch
Group is connected with described communication module by Article 6 communication line, described several clients by second switch group with
Described communication module communication, described client is by Article 2 communication line and Article 3 communication line and described the
Two group of switches are connected, and described audit device administrative center is communicated with described communication module by 3rd switch group,
Described audit device administrative center is connected with described 3rd switch group by Article 5 communication line, described communication
Module is connected with described 3rd switch group by Article 4 communication line, described communication module and described function mould
Block is connected, and described communication module is connected with described functional module by first communication line, described first friendship
Group, second switch group and the 3rd switch group of changing planes includes several switches respectively.
Further, described functional module includes packet capturing service unit, reports interface unit and Data Comparison unit,
Described packet capturing service unit and interface unit is reported to be connected with described communication module respectively, described Data Comparison list
Unit respectively with described packet capturing service unit and report interface unit to be connected, described Data Comparison unit and alarm phase
Connection.
Further, described communication module includes mirror image unit.
Further, described system also includes smart card, and described functional module also includes that suspension repairs unit automatically,
Described smart card is repaired automatically unit with described suspension and is connected, and described suspension repairs unit automatically with described communication
Module is connected.
The invention further relates to a kind of realize the method that suspension bypasses automatic detection early warning, which is mainly characterized by, described work(
Energy module includes packet capturing service unit, reports interface unit and Data Comparison unit, and described communication module includes mirror image list
Unit, described method comprise the following steps：
(1) client described in accesses described service by described Article 3 communication line and Article 6 communication line
Device；
(2) audit log that described client accesses described server is passed through the described the 6th by the server described in
Bar communication line, Article 3 communication line and Article 2 communication line are sent to the described interface unit that reports, and statistically
After tape mesh, this is reported entry to send to described Data Comparison unit；
(3) mirror image unit described in is upper by Article 3 communication line, Article 4 communication line and Article 5 communication line
Row data image is to first described communication line；
(4) packet capturing service unit described in obtains the communication data on first described communication line, and analyzes and obtain
After request entry, the request entry is sent to described Data Comparison unit；
(5) magnitude relationship for reporting entry and described request entry described in the Data Comparison unit judges described in, and
Alarm is turned on or off according to the magnitude relationship.
Further, further comprising the steps of between described step (2) and step (3)：
(2.1) the server timing described in is by described Article 6 communication line, Article 3 communication line and second
Bar communication line sends timing heartbeat to the described interface unit that reports；
(2.2) the special audit device described in judge last time timing heartbeat on call time and the audit device time
Whether difference is more than the first Preset Time；
(2.3) if described timing heartbeat on call time more than the first Preset Time, alarm sends server
The alarm signal of suspension, otherwise continues step (3).
Further, described step (5) is comprised the following steps：
(5.1) Data Comparison module described in judges described to report whether entry exceedes described request entry；
(5.2) if the described entry that reports exceedes described request entry, alarm sends the warning of bypass condition
Signal；
(5.3) if described reports entry less than described request entry, alarm sends the abnormal warning of daily record
Signal；
(5.4) if the described entry that reports is equal to described request entry, alarm sends the alarm signal nothing flow
Number；
(5.5) if described report entry to be equal to described request entry and be all not zero if described alarm do not send out
Go out alarm signal.
Further, described system also includes smart card, and described functional module also includes that suspension repairs unit automatically,
Described smart card is repaired automatically unit with described suspension and is connected, and described method also included following before step (1)
Step：
(0.1) functional module described in judges whether described functional module is working properly；
(0.2) if described functional module is working properly, continue step (0.3)；Step (0.6) is otherwise carried out；
(0.3) functional module described in judges whether first described communication line connects；
(0.4) if first described communication line connection, described functional module judges that described Article 4 is led to
Whether letter circuit, Article 5 communication line connect；
(0.5) if described Article 4 communication line, the connection of Article 5 communication line, continue step (1)；Otherwise continue
Continuous step (0.6)；
(0.6) communication module described in cuts off other telecommunication circuits in addition to first communication line；
(0.7) after the network configuration that unit is read in described smart card is repaired in the suspension described in automatically, described in recovery
The network configuration of communication module.
Suspension bypass automatic detection early warning system and the method in the invention is employed, effectively can be detected in specific life
The network state of each autonomous device in environment is produced, and effective state-detection, early warning and Initiative Defense, range of application are provided
Extensively.
Description of the drawings
Fig. 1 is the structural representation of the suspension bypass automatic detection early warning system of the present invention.
Specific embodiment
In order to more clearly describe the technology contents of the present invention, carry out with reference to specific embodiment further
Description.
The suspension bypass automatic detection early warning system of the present invention and method planned network Condition Monitoring Technology, network intrusions inspection
Survey technology and smart card reader encryption technology etc..
Refer to shown in Fig. 1, be the structural representation of the suspension bypass automatic detection early warning system of the present invention.Wherein ID1
For first communication line, ID2 is Article 2 communication line, and ID3 is Article 3 communication line, and ID4 is Article 4 communication line,
ID5 is Article 5 communication line, and ID6 is Article 6 communication line, and in addition V1 is expressed as the indispensable topology of the special audit device
Structure, V2 are the communication line in business demand from client to server, can include a plurality of communication line in wherein V2, with
Realize several clients to communicate with several servers.
The suspension bypass automatic detection early warning system of the present invention includes special audit device, audit device administrative center, number
Individual server and several clients；Described special audit device includes functional module and communication module；Described is several
Server is communicated with described communication module by the first group of switches, and the first described group of switches passes through Article 6 order wire
Road is connected with described communication module, and described several clients are logical with described communication module by second switch group
Letter, described client are connected with described second switch group by Article 2 communication line and Article 3 communication line
Connect, described audit device administrative center is communicated with described communication module by 3rd switch group, described audit device
Administrative center is connected with described 3rd switch group by Article 5 communication line, and described communication module passes through Article 4
Communication line is connected with described 3rd switch group, and described communication module is connected with described functional module, described
Communication module be connected with described functional module by first communication line, described the first group of switches, second are handed over
Group of changing planes and 3rd switch group include several switches respectively.
Described functional module includes packet capturing service unit, reports interface unit and Data Comparison unit, and described grabs
Bag service unit and report interface unit to be connected with described communication module respectively, described Data Comparison unit respectively with
Described packet capturing service unit and interface unit is reported to be connected, described Data Comparison unit is connected with alarm.
Described communication module includes mirror image unit.
Described system also includes smart card, and described functional module also includes that unit is repaired in suspension automatically, described intelligence
Energy card is repaired automatically unit with described suspension and is connected, and described suspension is repaired automatically unit and is connected with described communication module
Connect.
The present invention realizes the method that suspension bypasses automatic detection early warning, specifically includes following steps：
(1) client described in accesses described service by described Article 3 communication line and Article 6 communication line
Device；
(2) audit log that described client accesses described server is passed through the described the 6th by the server described in
Bar communication line, Article 3 communication line and Article 2 communication line send to described and report interface unit；
(3) mirror image unit described in is upper by Article 3 communication line, Article 4 communication line and Article 5 communication line
Row data image is to first described communication line；
(4) packet capturing service unit described in obtains the communication data on first described communication line, and analyzes and obtain
After reporting entry and request entry, this is reported entry and request entry to send to described Data Comparison module；
(5) the Data Comparison module described in judges the described magnitude relationship for reporting entry and described request entry, and
Alarm is turned on or off according to the magnitude relationship.
VLAN (VLAN) the state crawl of communication module：Telnet power board address vlan show.
Wherein mirror image unilateral network packet capturing data are compared with reported data, specially：
During client operation server, server is by one Operation Log of active reporting and content；Client passes through ID3,
The packet of ID6 access server will be trapped and compare.
Further comprising the steps of between described step (2) and step (3)：
(2.1) the server timing described in is by described Article 6 communication line, Article 3 communication line and second
Bar communication line sends timing heartbeat to the described interface unit that reports；
(2.2) the special audit device described in judge last time timing heartbeat on call time and the audit device time
Whether difference is more than the first Preset Time；The audit device time is current time；
(2.3) if described timing heartbeat on call time more than the first Preset Time, alarm sends server
The alarm signal of suspension, otherwise continues step (3).
Wherein server reports interface by what each audit log beamed back special audit device by ID6, ID3, ID2；With
When server be also required to timing send heartbeat report, if it is little with audit device time phase difference 24 to call time in last time heartbeat
When, then explanation server is broken string state.
When there are multiple abnormal needs using (functional module) is alerted, priority 1>Priority 2>…>Priority N, for example
When appearance server broken string situation and audit device are bypassed state, two states are all put in storage, and functional module will send server
The alarm (being that the priority of state is bypassed due to the priority for arranging server broken string higher than audit device herein) of broken string.Relate to
And network alarm is arrived, and alarm of unpacking, during remaining alarm conditions such as process exception alarm, the use priority carries out judging concrete alarm
Content.The priority can not be configured by user, and the priority of each abnormal conditions is in this application：Functional module fault
0, inner exchanging tests 1 (ID1), and system outages (ID6) 2, bypass condition 3, administrative center's connection (ID4, ID5) test 4, nothing stream
Amount 5, daily record abnormal 3.0 represents high priority, and peer uses lining up mode, and last exception will be alerted.Based on above-mentioned preferential
Level, the high exception of priority first can be alerted.
By deciphering, parse mirror image data, obtain IP message have cannonical format content (form be with specification XML,
The specification is formulated with the server side of undertaking the construction of jointly by special audit device), mirror image data is split according to specification, obtain
After segmentation, request entry A, statistical report entry B, judge：For nothing flow status during A=B=0；B>A × 120% is other
Line state；B<A × 120% is daily record abnormality.
Database, and informing function module are stored in extremely by Data Comparison unit, are sent server system and corresponds to warning.
Functional module shows that normally without exception warning is put in storage if no.
Described step (5) is comprised the following steps：
(5.1) Data Comparison module described in judges described to report whether entry exceedes described request entry；
(5.2) if the described entry that reports exceedes described request entry, alarm sends the warning of bypass condition
Signal；
(5.3) if described reports entry less than described request entry, alarm sends the abnormal warning of daily record
Signal；
(5.4) if the described entry that reports is equal to described request entry and is equal to 0, alarm is sent nothing flow
Alarm signal；
(5.5) if described report entry to be equal to described request entry and be all not zero if described alarm do not send out
Go out alarm signal.
The main judgement comprising the following aspects of bypass detection：
If Audit data reports the business operating instructions that entry is parsed less than special audit device crawl (to ask bar
Mesh), illustrate that system reporting service data transformation detectd by net, system records the auditing result, sends early warning, can be from auditor to phase
Whether the related reported data of system verification detectd by pass net complete.
When special audit device parses business operating instructions (asking entry) and detects system reporting service daily record less than net,
Illustrate that the original signaling of system grabs is imperfect, it is understood that there may be the possibility that special audit device is disconnected or bypasses, record the audit
As a result, early warning is sent, network connection confirmation is carried out by auditor.
If reported data and protocol analysis instruction have inconsistent situation, possible net is detectd the daily record of system reporting service and is forbidden
Really, the auditing result is recorded, early warning is sent, verified by auditor.
Described method is further comprising the steps of before step (1)：
(0.1) functional module described in judges whether described functional module is working properly；
Mainly ring test is carried out to described functional module in the step, i.e.,：Ping 127.0.0.1 (interface IP address)；
Whether ping127.0.0.1 is normal to test the machine TCP/IP, and energy ping leads to network interface card and the IP agreement that 127.0.0.1 illustrates the machine
Installing all has no problem.
(0.2) if described functional module is working properly, continue step (0.3)；Step (0.6) is otherwise carried out；
(0.3) functional module described in judges whether first described communication line connects；
In the step be in order to detect the connectivity of functional module and communication module, i.e. ping inner exchanging plate address.
(0.4) if first described communication line connection, described functional module judges that described Article 4 is led to
Whether letter circuit, Article 5 communication line connect；
The step is in order to detect the connectivity of communication module and described audit device administrative center, i.e. in ping management
Heart location；
Wherein, audit device administrative center is as follows to special audit device transmission http request form：
{
“systemid”:“3100000000000115”,
“company”:" ",
“addresslist”:”[“192.168.0.1:8080 " ...] " // administrative center address
}
Returning result example：
{
"status":"fail"
}
So audit device administrative center is obtained with the offline or presence of special audit device, and the wherein the 3rd
Switch is used for connecting design equipment management center and special audit device, is so easy to audit device administrative center to examine to special
Meter equipment is managed.
(0.5) if described Article 4 communication line, the connection of Article 5 communication line, continue step (1)；Otherwise continue
Continuous step (0.6)；
(0.6) communication module described in cuts off other telecommunication circuits in addition to first communication line；
The external connection of communication module cut-out communication plate, i.e.,：Telnet power board address port set LPx enable
=false, herein it should be noted that when packet capturing service unit, report any one in interface unit or Data Comparison unit
When breaking down, then prohibit the use of remaining all of network interface at communication module outside ID1.
(0.7) after the network configuration that unit is read in described smart card is repaired in the suspension described in automatically, described in recovery
The network configuration of communication module.
The network configuration that unit is read in described smart card is repaired in suspension automatically, and the network configuration is given tacit consent to for smart card
Network configuration, and user can change the network configuration.
Comprising remaining service profile information in addition to network configuration in smart card
Configure comprising all default networks for being applied to V1 in smart card, the encryption of the smart card and form only can be by auditing
Equipment management center is configured and is write, and basic encrypted form is MD5 and CRC check, and form citation form is field length+field
Value.
Suspension bypass automatic detection early warning system and the method in the invention is employed, effectively can be detected in specific life
The network state of each autonomous device in environment is produced, and effective state-detection, early warning and Initiative Defense, range of application are provided
Extensively.
In this description, the present invention is described with reference to its specific embodiment.But it is clear that can still make
Various modifications and alterations are without departing from the spirit and scope of the present invention.Therefore, specification and drawings are considered as illustrative
And it is nonrestrictive.
Claims (6)
1. a kind of suspension bypasses automatic detection early warning system, it is characterised in that described system includes special audit device, audit
Equipment management center, several servers and several clients；Described special audit device includes functional module and communication
Module；Described several servers are communicated with described communication module by the first group of switches, described the first group of switches
It is connected with described communication module by Article 6 communication line, described several clients are by second switch group and institute
The communication module communication that states, described client is by Article 2 communication line and Article 3 communication line and described second
Group of switches is connected, and described audit device administrative center is communicated with described communication module by 3rd switch group, institute
The audit device administrative center for stating is connected with described 3rd switch group by Article 5 communication line, described communication mould
Block is connected with described 3rd switch group by Article 4 communication line, described communication module and described functional module
It is connected, described communication module is connected with described functional module by first communication line, described first exchange
Unit, second switch group and 3rd switch group include several switches respectively；
Described functional module includes packet capturing service unit, reports interface unit and Data Comparison unit, and described packet capturing takes
Business and reports interface unit to be connected with described communication module respectively at unit, described Data Comparison unit respectively with described
Packet capturing service unit and report interface unit to be connected, described Data Comparison unit is connected with alarm；
Described communication module includes mirror image unit.
2. suspension according to claim 1 bypasses automatic detection early warning system, it is characterised in that described system also includes
Smart card, described functional module also include that unit is repaired in suspension automatically, and described smart card is repaired automatically with described suspension
Unit is connected, and described suspension is repaired automatically unit and is connected with described communication module.
3. a kind of system based on described in any one in claim 1 to 2 realizes the method that suspension bypasses automatic detection early warning,
Characterized in that, described functional module includes packet capturing service unit, reports interface unit and Data Comparison unit, described
Communication module includes mirror image unit, and described method is comprised the following steps：
(1) client described in accesses described server by described Article 3 communication line and Article 6 communication line；
(2) audit log that described client accesses described server is led to by the server described in by described Article 6
Letter circuit, Article 3 communication line and Article 2 communication line are sent to the described interface unit that reports, and statistically tape
After mesh, this is reported entry to send to described Data Comparison unit；
(3) mirror image unit described in is by the upper line number of Article 3 communication line, Article 4 communication line and Article 5 communication line
According to mirror image to first described communication line；
(4) packet capturing service unit described in obtains the communication data on first described communication line, and analyzes and asked
After entry, the request entry is sent to described Data Comparison unit；
(5) magnitude relationship for reporting entry and described request entry described in the Data Comparison unit judges described in, and according to
The magnitude relationship is turned on or off alarm.
4. according to claim 3 realize suspension bypass automatic detection early warning method, it is characterised in that described step
(2) further comprising the steps of and step (3) between：
(2.1) the server timing described in is logical by described Article 6 communication line, Article 3 communication line and Article 2
Letter circuit sends timing heartbeat to the described interface unit that reports；
(2.2) the special audit device described in judge last time timing heartbeat on call time and the difference of audit device time is
No more than the first Preset Time；
(2.3) if described timing heartbeat on call time more than the first Preset Time, alarm sends server suspension
Alarm signal, otherwise continue step (3).
5. according to claim 3 realize suspension bypass automatic detection early warning method, it is characterised in that described step
(5) comprise the following steps：
(5.1) Data Comparison module described in judges described to report whether entry exceedes described request entry；
(5.2) if the described entry that reports exceedes described request entry, alarm sends the alarm signal of bypass condition；
(5.3) if described reports entry less than described request entry, alarm sends the abnormal alarm signal of daily record；
(5.4) if described report entry to be equal to described request entry and be all zero, alarm sends the report nothing flow
Alert signal；
(5.5) if described report entry to be equal to described request entry and be all not zero if described alarm do not send report
Alert signal.
6. according to claim 3 realize suspension bypass automatic detection early warning method, it is characterised in that described system
Also include smart card, described functional module also includes that unit is repaired in suspension automatically, and described smart card is with described suspension certainly
Dynamic unit of repairing is connected, and described method is further comprising the steps of before step (1)：
(0.1) functional module described in judges whether described functional module is working properly；
(0.2) if described functional module is working properly, continue step (0.3)；Step (0.6) is otherwise carried out；
(0.3) functional module described in judges whether first described communication line connects；
(0.4) if first described communication line connection, described functional module judges described Article 4 order wire
Whether road, Article 5 communication line connect；
(0.5) if described Article 4 communication line, the connection of Article 5 communication line, continue step (1)；Otherwise continue step
Suddenly (0.6)；
(0.6) communication module described in cuts off other communication lines in addition to first communication line；
(0.7), after the network configuration that unit is read in described smart card is repaired in the suspension described in automatically, recover described communication
The network configuration of module.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410742667.9A CN104394038B (en) | 2014-12-08 | 2014-12-08 | Suspension bypass automatic detection early warning system and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410742667.9A CN104394038B (en) | 2014-12-08 | 2014-12-08 | Suspension bypass automatic detection early warning system and method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104394038A CN104394038A (en) | 2015-03-04 |
| CN104394038B true CN104394038B (en) | 2017-03-08 |
Family
ID=52611874
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410742667.9A Active CN104394038B (en) | 2014-12-08 | 2014-12-08 | Suspension bypass automatic detection early warning system and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104394038B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109615297A (en) * | 2018-12-13 | 2019-04-12 | 深圳中天乾坤信息技术有限公司 | A kind of storehouse Data Audit method, apparatus, system and readable storage medium storing program for executing |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101150429A (en) * | 2007-10-10 | 2008-03-26 | 上海可鲁***软件有限公司 | A remote monitoring or maintenance method and device |
| CN101763478A (en) * | 2009-12-31 | 2010-06-30 | 公安部第三研究所 | Enhanced audit method for operation of digital certificate |
| CN104219091A (en) * | 2014-08-27 | 2014-12-17 | 中国科学院计算技术研究所 | System and method for network operation fault detection |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20060048224A1 (en) * | 2004-08-30 | 2006-03-02 | Encryptx Corporation | Method and apparatus for automatically detecting sensitive information, applying policies based on a structured taxonomy and dynamically enforcing and reporting on the protection of sensitive data through a software permission wrapper |
-
2014
- 2014-12-08 CN CN201410742667.9A patent/CN104394038B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101150429A (en) * | 2007-10-10 | 2008-03-26 | 上海可鲁***软件有限公司 | A remote monitoring or maintenance method and device |
| CN101763478A (en) * | 2009-12-31 | 2010-06-30 | 公安部第三研究所 | Enhanced audit method for operation of digital certificate |
| CN104219091A (en) * | 2014-08-27 | 2014-12-17 | 中国科学院计算技术研究所 | System and method for network operation fault detection |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104394038A (en) | 2015-03-04 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10015176B2 (en) | Network protection | |
| US9813448B2 (en) | Secured network arrangement and methods thereof | |
| CN101197715B (en) | Method for centrally capturing mobile data service condition | |
| CN107888455A (en) | A kind of data detection method, device and system | |
| CN112291075B (en) | Network fault positioning method and device, computer equipment and storage medium | |
| CN104700024B (en) | A kind of method and system of Unix classes host subscriber operational order audit | |
| CN107547228B (en) | Implementation architecture of safe operation and maintenance management platform based on big data | |
| CN111147286B (en) | IPRAN network loop monitoring method and device | |
| CN105634848B (en) | A kind of virtual router monitoring method and device | |
| CN106209902A (en) | A kind of network safety system being applied to intellectual property operation platform and detection method | |
| CN103905219A (en) | System and method for monitoring and storing communication information in service platform | |
| CN105049441A (en) | Implementation method and system for preventing link type DDoS (Distributed Denial of Service) attacks | |
| KR20030056652A (en) | Blacklist management apparatus in a policy-based network security management system and its proceeding method | |
| CN112468592A (en) | Terminal online state detection method and system based on electric power information acquisition | |
| CN110798348A (en) | Fault warning method, server and system for power distribution communication network | |
| US20100161769A1 (en) | Method and System for Virtual LAN Media Access Control Trouble Diagnostics | |
| CN105306303B (en) | The real-time monitoring system of failure and terminal network appliance based on terminal network appliance | |
| CN104394038B (en) | Suspension bypass automatic detection early warning system and method | |
| CN110620693A (en) | Railway station route remote restart control system and method based on Internet of things | |
| CN107733941A (en) | A kind of realization method and system of the data acquisition platform based on big data | |
| CN117221133A (en) | Data center machine room running state monitoring and analyzing system based on out-of-band technology | |
| CN110971467A (en) | Network centralized management system | |
| CN103248505B (en) | Based on method for monitoring network and the device of view | |
| CN115883216A (en) | Communication system safety protection method and device and electronic equipment | |
| CN113285937B (en) | Safety audit method and system based on traditional substation configuration file and IEC103 protocol flow |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |