CN109714206A - Electric power monitoring system Generating Network Topology Map, network bus topological diagram - Google Patents
Electric power monitoring system Generating Network Topology Map, network bus topological diagram Download PDFInfo
- Publication number
- CN109714206A CN109714206A CN201811618742.5A CN201811618742A CN109714206A CN 109714206 A CN109714206 A CN 109714206A CN 201811618742 A CN201811618742 A CN 201811618742A CN 109714206 A CN109714206 A CN 109714206A
- Authority
- CN
- China
- Prior art keywords
- network
- subregion
- equipment
- electric power
- monitoring system
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses electric power monitoring system Generating Network Topology Map and network bus topological diagrams, electric power monitoring system is subjected to security partitioning according to function and counts the equipment in each subregion, scanner is linked on all interchangers of each subregion, scan all devices in the subregion, the equipment of the Network Survivability detected in each subregion is classified, all topological subgraphs that the subregion is generated in the form of mapping, the topological subgraph of subregion each where same edge device is stitched together and generates electric power monitoring system network topological diagram.The network topological diagram of electric system can be automatically generated using the technical program.
Description
Technical field
The invention belongs to technical field of telecommunications more particularly to electric power monitoring system Generating Network Topology Maps, bus
Formula network topological diagram.
Background technique
Electric power monitoring system security protection has critical importance, in face of increasingly serious Situation on Information Security, in order to anti-
The power generation accident that model hacker and malicious code etc. cause the attack of electric power monitoring system, ensures the safety of electric system
Stable operation, construction smart grid are extremely urgent.In order to meet the construction needs of smart grid, net is widely used in power automation
Network information system is used for the monitoring and control of first and second system.However, in the Large scale construction of intelligent dispatching system, greatly
Amount uses interchanger, router, server, work station, network storage, Network Security Device etc. and carries out system Construction, system
It is in large scale, equipment is numerous, network connection is complicated, operation management is not in place, be very easy to the feelings that network illegally interconnects occur
Condition brings hidden danger to the safe operation of intelligent scheduling monitoring system, can not meet country to grid company protection based on security rank
Supervision requires.
Currently, the domestic software do not checked and automatically generated specifically for power system network topology or equipment, domestic
There is the producer of more exploitation network management systems, is all trade information systems of covering.Major part is using snmp protocol to network
Equipment is identified and is managed, and the hidden danger as present in snmp protocol, is not able to satisfy country and is pacified to grid company
The supervision requirement of full hierarchical protection.
Current drafting of the electric system for network topological diagram, the operation that transregional interconnection detection applies the strategy of throwing waves of people into action, uses
A large amount of manpower and progresss is devoted a tremendous amount of time, manually checks that be easy to appear omission, error and efficiency lower.
Therefore, automatic generating network topological diagram in electric system how is solved, to meet country to grid company safety etc.
The supervision of grade protection requires to become urgent problem to be solved.
Summary of the invention
The present invention is pacified for how to solve automatic generating network topological diagram in electric system with meeting country to grid company
The technical issues of supervision of full hierarchical protection requires is, and it is an object of the present invention to provide Generating Network Topology Map, network bus topology
Figure.
A kind of electric power monitoring system Generating Network Topology Map of the present invention, which comprises step S1 supervises electric power
Control system carries out security partitioning according to function and counts the equipment in each subregion；The principle of the security partitioning is with edge device
Boundary node as each subregion；Equipment in each subregion includes an at least interchanger, an at least host equipment and at least on one side
Boundary's equipment；The edge device includes: firewall, isolating device and longitudinal encryption device；Scanner is linked into respectively by step S2
On all interchangers of subregion, all devices in the subregion are scanned, specific scanning includes device IP/MAC Address, device category
And Network Survivability state；Step S3 classifies the device category of the Network Survivability detected in each subregion, and classification is set
Standby type includes: the network equipment, host equipment and other equipment, and all topology of the subregion are generated in the form of mapping
Figure；Step S4, according to known same several IP address informations of edge device, by the topology of subregion each where same edge device
Subgraph, which is stitched together, generates electric power monitoring system network topological diagram.
It is preferred that step S2, the scanning includes that shallow-layer scans, the shallow-layer scanning are as follows: scanner scans the exchange
Equipment all in IP address network segment, generates the topological subgraph of the subregion where machine.
It is preferred that in step sl, the equipment in the subregion further includes an at least router.
It is preferred that in step s 2, when the router includes the with two or more IP address network segments
One router, the scanning further includes depth scan, the depth scan are as follows: the shallow-layer scanning after the completion of, scanner across
The first router is crossed, all devices in the other IP address network segment of the first router is scanned, generates the topology of the subregion
Subgraph.
It is preferred that in step sl, the router includes another with two or more IP address network segments
The second router；In step s 2, when the first router is also connected with the second router, the scanning further includes
Further depth scan；The further depth scan are as follows: after the completion of the depth scan, scanner is across the secondary route
Device scans all devices in the other IP address network segment of the second router；With this iterative manner institute that all routings are reachable
There are all devices in IP address network segment to scan, generates the topological subgraph of the subregion.
It is preferred that scanner is linked on the interchanger of each subregion in step S2, when scanning to working as in the subregion
When preceding equipment, logs in the current device and check the other equipment whether current device is also connected in another network segment, if so,
Scanner is then accessed into the current device, and continues to scan on all devices in another network segment, generates topological subgraph；It will deserve
Several topological subgraphs where preceding equipment are stitched together using the current device as splicing node.
It is preferred that in step sl, the equipment in each subregion can also include router, interchanger, server, work
It stands, computer, show large-size screen monitors, disk array, load-balancing device, firewall, printer, remote dial gateway, and/or fort
Machine, and/or invasion detecting device, and/or intrusion prevention device；The edge device further comprise remote dial gateway,
Fort machine and/or invasion detecting device.
It is preferred that the network equipment includes: interchanger, router, firewall, load-balancing device, remote dial
Gateway, and/or fort machine and and/or invasion detecting device, and/or intrusion prevention device；Host equipment includes: server, work
It stands, computer, display large-size screen monitors, disk array；Other equipment include: printer.
A kind of network bus topological diagram of the present invention, for rendering the electric power monitoring system network topological diagram generation side
The electric power monitoring system network topological diagram that method generates, the network bus topological diagram includes several electric power monitoring system subregions
The topological subgraph of topological subgraph, multiple subregions with same edge device is connected with each other；The topological subgraph of the subregion includes
Bus, the starting point object of each bus are the interchanger in the network equipment；It, will be in the network equipment according to scanner scanning result
Other kinds of interchanger, host equipment and other equipment are affiliated in bus；Edge device in the network equipment is affiliated to
In bus, and between subregion and subregion.
It is preferred that the connection strategy object in the network bus topological diagram between equipment includes: bus connecting object,
According to the practical link information of interchanger and other non-switch equipment, bus connecting object is defined, realizes different exchanges
The Plot Work that machine is respectively attached with a bus and associated devices；Edge device connecting object, according to edge device and
Link information between interchanger defines edge device connecting object, realizes edge device and connects drawing for two interchangers
Figure work；Non- edge device connecting object defines and connects between non-edge device according to the link information between non-edge device
Object is connect, realizes the Plot Work connected between non-edge device in each subregion.
The positive effect of the present invention is that:
(1) present invention mainly to Network Survivability, scan have IP address equipment (network equipment, host equipment and
Other equipment), scanning result is analyzed, obtains the type and number for connecting equipment in real network, the position of security partitioning, definition
Connection relationship between distinct device out carries out line and label to it, and after creating to corresponding object, COMPREHENSIVE CALCULATING is each out
From location information, and carry out layout optimization, finally obtain network bus topological diagram.The connection that the present invention can solve equipment is closed
The problems such as system, transregional interconnection, the access of illegality equipment, the equipment connecting relation of whole network can be automatically generated, by automatic
The topological diagram of generation can be showed intuitively, greatly improve the presentation efficiency of topological relation, and change is previously required to artificial true
Fixed topological relation removes the inefficiency and error-prone problem for drawing topological diagram by hand from, and the topological diagram generated can carry out
Secondary editor, user can be finely adjusted according to the actual situation.
(2) present invention can generate the network topological diagram of complicated system to come automatically, to meet grid company safety etc.
The supervision requirement of grade protection, the network topological diagram automatically generated have the network boundary for the system that is perfectly clear, facilitate exclusion hidden danger.
And now mature technology is a large data center, and network topology generation is carried out in same network segment, is often based on routing
Topology g eneration is carried out up to mode, but this network topology generation technique method is limited to very much, can not see the overall situation is
System topology, although actually network is connection, and such case is most because routing is unreachable between a large amount of complex network
Hardly possible investigation.The present invention can generate routing it is unreachable, but real network be connection complex network topological diagram, can go out from the overall situation
Hair is convenient for operation management, checks hidden danger.
(3) Generating Network Topology Map proposed by the present invention is applied to electric power monitoring system protection based on security rank and tests and assesses,
It solves different security partitionings to be difficult to generate overall network topology figure in technological layer, it is difficult to find that " transregional interconnection " hidden danger is asked
Topic, the present invention propose that a kind of automatic configuration of combination topology investigation is verified, greatly improve the efficiency of verification.
(4) when the present invention generates network topological diagram, also the unknown device scanned is identified, user is facilitated to check letter
Breath, so that the network topological diagram generated is more accurate.
It is described further below with reference to technical effect of the attached drawing to design of the invention, specific structure and generation, with
It is fully understood from the purpose of the present invention, feature and effect.
Detailed description of the invention
Fig. 1 is inventive network topology drawing generating method flow diagram；
Fig. 2 is network bus topology figure structure schematic representation of the present invention；
Fig. 3 is that the system in inventive network topology drawing generating method embodiment realizes architecture diagram.
Specific embodiment
Drawing reference numeral explanation: presentation layer 10, Business Logic 20, data access layer 30, artwork file access driving 31, number
32, data storage layer 40, artwork file 41, database 42, method and step S1~S4 are driven according to access layer.
As shown in Figure 1, a kind of electric power monitoring system Generating Network Topology Map of the present invention, comprising: step S1, according to
The 16 word principles of " security partitioning, network-specific, lateral isolation, longitudinal certification ", are saved using edge device as the boundary of each subregion
Electric power monitoring system is carried out security partitioning according to function (such as production safety management function, power dispatch system operation and management function etc.) by point
It is divided into Area 1, Area 2 to Area N, i.e. security partitioning 1, security partitioning 2 to security partitioning N, and counts setting in each subregion
Standby, the equipment in each subregion includes an at least interchanger, at least a host equipment, at least a router and at least a boundary is set
It is standby；The edge device generally includes firewall, isolating device, longitudinal encryption device, can further include remote dial
Gateway, fort machine and/or invasion detecting device.Scanner is linked on all interchangers of each subregion by step S2, and scanning should
All devices in subregion, specific scanning include that (network is deposited for device IP/MAC Address, device category and Network Survivability state
Whether online (on line) survival (live) living for referring to equipment in network, internet area are often referred to equipment in network, answer partially
Whether also existed with layer.Step S3, according to the Network Survivability detected in Area 1, Area 2 to each security partitioning Area N, i.e.,
The device category detected in network, specifically includes: router, interchanger, server, work station, computer, display large-size screen monitors, magnetic
Disk array, load-balancing device, firewall, printer, remote dial gateway, fort machine, invasion detecting device (IDS), invasion
It is protective device (IPS), O&M interchanger, SCADA server, core switch, front server, preposition interchanger, forward and reverse
Isolating device, encryption device etc., due to needing the content of further detection network equipment and host equipment working principle different,
Therefore, it is necessary to classify.The device type of Network Survivability includes following three types: the network equipment (including it is interchanger, preposition
Interchanger, O&M interchanger, core switch, router, firewall, forward and reverse isolating device, encryption device, load balancing,
Remote dial gateway, fort machine, invasion detecting device (IDS), intrusion prevention device (IPS)), host equipment (including server,
Work station, computer, display large-size screen monitors, disk array, SCADA server, front server, load balancing) and other equipment (including
Printer).Then all topological subgraphs of the subregion are generated in the form of mapping, the mapping refers to centered on interchanger, with
Each IP address equipment scanned is the topological subgraph that node forms hub-and-spoke configuration, and the mapping is indicated with mathematical way are as follows: < hand over
It changes planes, set (IP device) collection >.Scanner is linked on all interchangers of each subregion, when current in scanning to the subregion
When equipment, logs in the current device and check the other equipment whether current device is also connected in another network segment, if so, then
Scanner is accessed into the current device, and continues to scan on all devices in another network segment, generates topology of another network segment
Figure.Step S4, according to known same several IP address informations of edge device, by the topology of subregion each where same edge device
Subgraph, which is stitched together, generates electric power monitoring system network topological diagram, specifically, the method for the splicing is exactly each topology
Figure the inside all at least one edge device, i.e. an edge device appear in multiple topological subgraphs, edge device as
The points of common connection of splicing；According to equipment connection in each subregion, a subregion generates 2 or 2 or more topologys
Subgraph, using the identical edge device is exactly to be used as the node of splicing or save the current device of aforementioned record as splicing
Point is stitched together.
Preferably, the scanning includes that shallow-layer scans, the shallow-layer scanning are as follows: IP where scanner scans the interchanger
All equipment in the network segment of location generates the topological subgraph of the subregion.When the router includes having two or more IP
When the first router of address network segment, the first router interface assignment is to an IP address, such as IP1, with the first router
The equipment (including interchanger, server or other IP devices) of interface connection is assigned to another IP address, such as IP2, then IP2
It must be same network segment with IP1, the scanning further includes depth scan, the depth scan are as follows: scan through in the shallow-layer
Cheng Hou, scanner scan all devices in the other IP address network segment of the first router across the first router, generate this point
The topological subgraph in area.Preferably, the router includes another secondary route with two or more IP address network segments
Device, the scanning further includes further depth scan；The further depth scan are as follows: after the completion of the depth scan, scanning
Device scans all devices in the other IP address network segment of the second router across the second router；With this iterative manner
All devices in the reachable all IP address network segments of all routings are scanned, generate the topological subgraph of the subregion.Specifically,
Depth scan, i.e., shallow-layer scan on the basis of further progress depth scanning；Shallow-layer scanning is exactly to be linked into scanner
On interchanger, equipment all in the interchanger network segment (such as 192.168.1.0/24) is then scanned, is typically only capable to scan to arrive and be somebody's turn to do
All devices on interchanger network segment generate the network topology subgraph (hub-and-spoke configuration figure) of the network segment, if the interchanger also connects
A router is connect, it is 192.168.2.0/24 network segment that router, which is also connected with an IP address, the two network segments are to be connected to one
Rise and routable only scans this network segment of 192.168.1.0/24 using shallow-layer scanning, then can not find
192.168.2.0/24 the equipment of this network segment；And depth scan is there are two types of way, a kind of way is first to scan current network segment
192.168.1.0/24, scanning 192.168.1.0/23 is then further expanded, or further scans 192.168.1.0/22
Or further extended network mask range；Another way is scanning network 192.168.1.0/24, then if it find that net
In addition to there are also the packet of some close address such as 192.168.10.110 for 192.168.1.0/24 sections of data packet in network, then just will
Scanning range further expands scanning 192.168.10.0/24；Generally, depth scan is exactly that not only only scanning is current
The all devices of network segment, also across routing, the equipment for scanning other network segments of connection, such iteration, so that it may by all routings
Reachable equipment is next to scanning, and forms a more complicated topological subgraph.
Wherein, network topological diagram refers to the network structure being made of apparatus for network node and communication media.Network topology
Figure provides the network configuration and mutual connection of network server, work station, its structure mainly has hub-and-spoke configuration, ring-like knot
Structure, bus-organization, distributed frame, tree, reticular structure, honeycomb structure etc..Structure, that is, net of network topological diagram
Network topological structure refers to the physical layout that various equipment are interconnected with transmission media, is exactly with what mode the calculating in network
The equipment such as machine connect, wherein the various backup medias that set for participating in LAN work are interconnected there are many method, but it is real
Only several ways can be suitble to the work of LAN on border.
As shown in Fig. 2, a kind of network bus topological diagram of the present invention, the electric power monitoring system network is opened up for rendering
The electric power monitoring system network topological diagram for flutterring drawing generating method generation uses object-oriented skill using the API interface of Visio
Art, generate can be compatible with Visio, can secondary editor bus type Global Topological figure, including several electric power monitoring system subregions
Topological subgraph, with same edge device multiple subregions topological subgraph be connected with each other；The topological subgraph of the subregion has
Have: bus, the starting point object of each bus are the interchanger in the network equipment, are arranged in the left side of district location；According to sweeping
Retouch device scanning result, by interchanger other kinds of in the network equipment (preposition interchanger, O&M interchanger and core switch),
Host equipment (display large-size screen monitors, maintenance work station, disk array, SCADA server, front server, server, load balancing)
It is affiliated in bus with other equipment (printer), the topological diagram deployment in power industry is arranged frequently with the structure of left, center, right；
By the edge device in the network equipment, (firewall, forward and reverse isolating device, encryption device, fort machine, intrusion detection/invasion are anti-
Shield) it is affiliated in bus, and between subregion and subregion.
Specifically, the zone object includes: as shown in figure 3, defining zone object according to depth scan actual result
1 object of security partitioning, 1 object of security partitioning include (display large-size screen monitors, maintenance work station, fort machine, the fortune of equipment in security partitioning 1
Tie up interchanger, printer, core switch, SCADA server, disk array, front server, preposition interchanger, encryption dress
Set, firewall) and 1 position of security partitioning, it is located at topological diagram left；2 object of security partitioning, 2 object packet of security partitioning
Including equipment in security partitioning 2, (server, load balancing, intrusion detection/intrusion prevention, forward and reverse isolating device, adds interchanger
Close device) and 2 position of security partitioning, it is located at side in topological diagram；3 object of security partitioning, 3 object of security partitioning include
Equipment (server, interchanger, load balancing, intrusion detection/intrusion prevention, firewall) and security partitioning 3 in security partitioning 3
Position is located at topological diagram right.Wherein, equipment in 3 object of 1 object of security partitioning, 2 object of security partitioning and security partitioning
The function of deployment is different.
Preferably, the connection strategy object in the network bus topological diagram between equipment includes: bus connecting object, root
According to the practical link information of interchanger and other non-switch equipment, bus connecting object is defined, realizes different interchangers
The Plot Work being respectively attached with a bus and associated devices；Edge device connecting object, according to edge device and friendship
Link information between changing planes defines edge device connecting object, realizes the drawing that edge device connects two interchangers
Work；Non- edge device connecting object is defined and is connected between non-edge device according to the link information between non-edge device
Object realizes the Plot Work connected between non-edge device in each subregion.
When the network bus topological diagram generates, the topological subgraph for generating each area is the scene knot based on electric system
Structure, according to Network Survivability, device name and type, the address equipment Mac, Vlan information etc. come total integrated data；Module is to set
Standby entitled mark, assists using information such as IP as auxiliary information；It is served as theme with interchanger, router, server, edge device etc.
Connection relationship is presented in other access devices, and the unknown device scanned is identified, and facilitates user's cross-check information.It finally needs certainly
Dynamic each area's subtopology figure of splicing, it is comprehensive after being created to corresponding object using node object, line object, label object etc.
Respective positions information is calculated, and carries out layout optimization, obtains the network topological diagram of compatible Visio format.Wherein, VLAN is
Virtual local area fidonetFido, for a physical switches to be fictionalized multiple virtual switches in logic, due between VLAN
The case where in the presence of not communicating mutually, it is therefore desirable to which physical switches are scanned as multiple switch.It will scan not
Know device identification, the following three aspects information of primary identity: device name and type, one or more device IP, correspondence are each set
The device mac address of standby IP.Theoretically, in network topological diagram generation, it is only necessary to be based on IP network section, device name and type
Can, without MAC Address, and in real work, network topological diagram generation is most important work, after generating network topological diagram,
Need to check and check account equipment and whether scan the equipment come consistent, specifically include check account equipment with scan it is next
Whether number of devices is consistent, and whether device IP and device mac address correspond to, to carry out risk analysis.
As shown in figure 3, the present invention is that the system described based on following UML mode realizes architecture diagram.The system realizes frame
Composition includes general layer and physical layer (not indicating on figure), and (the user UI of presentation layer 10 is sequentially arranged between general layer and physical layer
Show control), Business Logic 20, data access layer 30 and data storage layer 40.Wherein, general layer and physical layer are each for other
Layer shares, and presentation layer 10 is also boundary layer, is then indicated with presentation layer in software field.Data access layer 30 is visited including artwork file
Ask driving 31 and database access layer driving 32.Data storage layer includes that database 42 (is also possible to mysql database or DB2
Database) and artwork file 41.The presentation layer 10, the interaction of Business Logic 20, drive 31 sum numbers by artwork file access
It is packaged according to access layer driving 32, the access to the database 42 is by calling Database-access Middleware Based
(Enterprise Library component, JDBC or ODBC) is realized, to guarantee less code, higher code quality.
In conclusion inventive network topology drawing generating method, network bus topological diagram, the scene based on electric system
Electric power monitoring system is carried out security partitioning according to function and counted in each subregion by structure, the live structure based on electric system
Equipment, the equipment of the Network Survivability detected in each subregion is classified, scanner is linked into all friendships of each subregion
On changing planes, all devices in the subregion are scanned, all topological subgraphs of the subregion are generated in the form of mapping, by same boundary
The topological subgraph of each subregion, which is stitched together, where equipment generates electric power monitoring system network topological diagram.Using the technical program energy
Automatically generate the network topological diagram of electric system.
Claims (10)
1. a kind of electric power monitoring system Generating Network Topology Map, which is characterized in that the described method includes:
Electric power monitoring system is carried out security partitioning according to function and counts the equipment in each subregion by step S1；The safety point
The principle in area is the boundary node using edge device as each subregion；Equipment in each subregion includes an at least interchanger, at least
One host equipment and at least an edge device；The edge device includes: firewall, isolating device and longitudinal encryption device；
Scanner is linked on all interchangers of each subregion by step S2, scans all devices in the subregion, specific to scan
Including device IP/MAC Address, device category and Network Survivability state；
Step S3 classifies the device category of the Network Survivability detected in each subregion, and the device type of classification includes: net
Network equipment, host equipment and other equipment generate all topological subgraphs of the subregion in the form of mapping；
Step S4, according to known same several IP address informations of edge device, by opening up for each subregion where same edge device
It flutters subgraph and is stitched together and generate electric power monitoring system network topological diagram.
2. electric power monitoring system Generating Network Topology Map as described in claim 1, which is characterized in that in step s 2,
The scanning includes that shallow-layer scans, the shallow-layer scanning are as follows: all in IP address network segment where scanner scans the interchanger
Equipment generates the topological subgraph of the subregion.
3. electric power monitoring system Generating Network Topology Map as claimed in claim 2, which is characterized in that in step sl,
Equipment in the subregion further includes an at least router.
4. electric power monitoring system Generating Network Topology Map as claimed in claim 3, which is characterized in that in step s 2,
When the router includes the first router with two or more IP address network segments, the scanning further includes that depth is swept
It retouches, the depth scan are as follows: after the completion of shallow-layer scanning, scanner scans the first via across the first router
By all devices in the other IP address network segment of device, the topological subgraph of the subregion is generated.
5. electric power monitoring system Generating Network Topology Map as claimed in claim 4, which is characterized in that
In step sl, the router includes another the second router with two or more IP address network segments；
In step s 2, when the first router is also connected with the second router, the scanning further includes further
Depth scan；The further depth scan are as follows: after the completion of the depth scan, scanner is swept across the second router
Retouch all devices in the other IP address network segment of the second router；By the reachable all IP of all routings with this iterative manner
All devices, which scan, in the network segment of location comes, and generates the topological subgraph of the subregion.
6. electric power monitoring system Generating Network Topology Map as described in claim 1, which is characterized in that, will in step S2
Scanner is linked on the interchanger of each subregion, when the current device in the subregion is arrived in scanning, is logged in the current device and is looked into
See the other equipment whether current device is also connected in another network segment, if so, scanner is then accessed into the current device, and
The all devices in another network segment are continued to scan on, topological subgraph is generated；
Several topological subgraphs where the current device are stitched together using the current device as splicing node.
7. electric power monitoring system Generating Network Topology Map as described in claim 1, which is characterized in that in step sl,
Equipment in each subregion can also include router, interchanger, server, work station, computer, display large-size screen monitors, disk array, bear
Carry equalizing equipment, firewall, printer, remote dial gateway, fort machine, invasion detecting device and/or intrusion prevention device；Institute
It states edge device and further comprises remote dial gateway, fort machine and/or invasion detecting device.
8. electric power monitoring system Generating Network Topology Map as described in claim 1, which is characterized in that the network equipment
Include: interchanger, router, firewall, load-balancing device, remote dial gateway, fort machine, invasion detecting device and/or
Intrusion prevention device；Host equipment includes: server, work station, computer, display large-size screen monitors, disk array；Other equipment include:
Printer.
9. a kind of network bus topological diagram, electric power monitoring system network topological diagram described in claim 1 generates for rendering
The electric power monitoring system network topological diagram that method generates, it is characterised in that: the network bus topological diagram includes several electric power
The topological subgraph of the topological subgraph of monitoring system subregion, multiple subregions with same edge device is connected with each other；The subregion
Topological subgraph include bus,
The starting point object of each bus is the interchanger in the network equipment；It, will be in the network equipment according to scanner scanning result
Other kinds of interchanger, host equipment and other equipment are affiliated in bus；Edge device in the network equipment is affiliated to
In bus, and between subregion and subregion.
10. network bus topological diagram as claimed in claim 9, it is characterised in that: equipment in the network bus topological diagram
Between connection strategy object include:
Bus connecting object defines bus connection pair according to the practical link information of interchanger and other non-switch equipment
As realizing the Plot Work that different interchangers is respectively attached with a bus and associated devices；
Edge device connecting object defines edge device connection pair according to the link information between edge device and interchanger
As realizing the Plot Work that edge device connects two interchangers；
Non- edge device connecting object is defined and is connected between non-edge device according to the link information between non-edge device
Object realizes the Plot Work connected between non-edge device in each subregion.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811618742.5A CN109714206A (en) | 2018-12-28 | 2018-12-28 | Electric power monitoring system Generating Network Topology Map, network bus topological diagram |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811618742.5A CN109714206A (en) | 2018-12-28 | 2018-12-28 | Electric power monitoring system Generating Network Topology Map, network bus topological diagram |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN109714206A true CN109714206A (en) | 2019-05-03 |
Family
ID=66257896
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811618742.5A Pending CN109714206A (en) | 2018-12-28 | 2018-12-28 | Electric power monitoring system Generating Network Topology Map, network bus topological diagram |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109714206A (en) |
Cited By (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110290207A (en) * | 2019-06-27 | 2019-09-27 | 苏宁消费金融有限公司 | A kind of file management and Transmission system ensureing data safety |
| CN111049686A (en) * | 2019-12-20 | 2020-04-21 | 北京科东电力控制系统有限责任公司 | Safety protection virtual laboratory of power monitoring system and construction method thereof |
| CN111428094A (en) * | 2020-04-02 | 2020-07-17 | 深信服科技股份有限公司 | Asset-based network topology generation method, device, equipment and storage medium |
| CN111756756A (en) * | 2020-06-28 | 2020-10-09 | 深圳市信锐网科技术有限公司 | Terminal network control method and device, electronic equipment and storage medium |
| CN112019653A (en) * | 2020-09-09 | 2020-12-01 | 迈普通信技术股份有限公司 | Access switch, IP address deployment method, device and readable storage medium |
| CN113706735A (en) * | 2021-08-27 | 2021-11-26 | 中能电力科技开发有限公司 | Power plant room equipment equal-protection evaluation inspection system and method |
| CN113746852A (en) * | 2021-09-08 | 2021-12-03 | 滨州学院 | Network security risk monitoring system and method of power monitoring system |
| CN115314392A (en) * | 2022-08-19 | 2022-11-08 | 中电达通数据技术股份有限公司 | Automatic network topology generation system and method based on network equipment resource discovery algorithm |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20080144644A1 (en) * | 2006-12-14 | 2008-06-19 | Nortel Networks Limited | Method and apparatus for exchanging routing information and the establishment of connectivity across multiple network areas |
| CN102143007A (en) * | 2011-05-03 | 2011-08-03 | 中国南方电网有限责任公司 | Distribution-based hierarchical network topology discovery method |
| CN102404190A (en) * | 2010-09-16 | 2012-04-04 | 杭州华三通信技术有限公司 | Method and device for determining Att signs under multi-topology |
| CN103684942A (en) * | 2013-12-03 | 2014-03-26 | 天津市普迅电力信息技术有限公司 | Two-stage partitioning method of topological network |
| CN105450442A (en) * | 2015-11-06 | 2016-03-30 | 广东电网有限责任公司电力科学研究院 | Network topology checking method and system thereof |
| CN107276829A (en) * | 2017-07-26 | 2017-10-20 | 广东电网有限责任公司电力科学研究院 | The network topology acquisition methods and system of power system based on address resolution protocol |
| CN108055207A (en) * | 2017-10-26 | 2018-05-18 | 北京天元创新科技有限公司 | A kind of network topology cognitive method and device |
-
2018
- 2018-12-28 CN CN201811618742.5A patent/CN109714206A/en active Pending
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20080144644A1 (en) * | 2006-12-14 | 2008-06-19 | Nortel Networks Limited | Method and apparatus for exchanging routing information and the establishment of connectivity across multiple network areas |
| CN102404190A (en) * | 2010-09-16 | 2012-04-04 | 杭州华三通信技术有限公司 | Method and device for determining Att signs under multi-topology |
| CN102143007A (en) * | 2011-05-03 | 2011-08-03 | 中国南方电网有限责任公司 | Distribution-based hierarchical network topology discovery method |
| CN103684942A (en) * | 2013-12-03 | 2014-03-26 | 天津市普迅电力信息技术有限公司 | Two-stage partitioning method of topological network |
| CN105450442A (en) * | 2015-11-06 | 2016-03-30 | 广东电网有限责任公司电力科学研究院 | Network topology checking method and system thereof |
| CN107276829A (en) * | 2017-07-26 | 2017-10-20 | 广东电网有限责任公司电力科学研究院 | The network topology acquisition methods and system of power system based on address resolution protocol |
| CN108055207A (en) * | 2017-10-26 | 2018-05-18 | 北京天元创新科技有限公司 | A kind of network topology cognitive method and device |
Cited By (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110290207A (en) * | 2019-06-27 | 2019-09-27 | 苏宁消费金融有限公司 | A kind of file management and Transmission system ensureing data safety |
| CN110290207B (en) * | 2019-06-27 | 2022-03-15 | 苏宁消费金融有限公司 | File management and transmission system for guaranteeing data security |
| CN111049686A (en) * | 2019-12-20 | 2020-04-21 | 北京科东电力控制系统有限责任公司 | Safety protection virtual laboratory of power monitoring system and construction method thereof |
| CN111049686B (en) * | 2019-12-20 | 2022-07-22 | 北京科东电力控制系统有限责任公司 | Safety protection virtual laboratory of power monitoring system and construction method thereof |
| CN111428094A (en) * | 2020-04-02 | 2020-07-17 | 深信服科技股份有限公司 | Asset-based network topology generation method, device, equipment and storage medium |
| CN111756756A (en) * | 2020-06-28 | 2020-10-09 | 深圳市信锐网科技术有限公司 | Terminal network control method and device, electronic equipment and storage medium |
| CN112019653A (en) * | 2020-09-09 | 2020-12-01 | 迈普通信技术股份有限公司 | Access switch, IP address deployment method, device and readable storage medium |
| CN113706735A (en) * | 2021-08-27 | 2021-11-26 | 中能电力科技开发有限公司 | Power plant room equipment equal-protection evaluation inspection system and method |
| CN113746852A (en) * | 2021-09-08 | 2021-12-03 | 滨州学院 | Network security risk monitoring system and method of power monitoring system |
| CN115314392A (en) * | 2022-08-19 | 2022-11-08 | 中电达通数据技术股份有限公司 | Automatic network topology generation system and method based on network equipment resource discovery algorithm |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109714206A (en) | Electric power monitoring system Generating Network Topology Map, network bus topological diagram | |
| CN101778264B (en) | Video monitoring method and video monitoring system | |
| CN102843286B (en) | Implementation method, and system of virtual routers | |
| CN101282237B (en) | Synthetic network management system based on SNMP | |
| CN109544349A (en) | One kind being based on networked asset information collecting method, device, equipment and storage medium | |
| CN108055207A (en) | A kind of network topology cognitive method and device | |
| CN106452955B (en) | A kind of detection method and system of abnormal network connection | |
| CN103501249A (en) | Topology management system and method of network management client side | |
| CN105207853A (en) | Local area network monitoring management method | |
| CN102800033A (en) | Distribution production and marketing business integration system | |
| CN105847023A (en) | Service system network topology relationship obtaining method and device | |
| CN106452891B (en) | VLAN method of automatic configuration, device and interchanger based on SCD file | |
| CN107094091B (en) | A kind of intelligent substation station level network configuration method of calibration and system | |
| CN104637265A (en) | Dispatch-automated multilevel integration intelligent watching alarming system | |
| CN115225508A (en) | Internet target range scene construction method | |
| CN109412955A (en) | IPRAN LA Management Room linking relationship determines method and device | |
| CN103532746A (en) | Method and system for generating business topology of industrial system | |
| CN114021155A (en) | Enterprise network security domain visual management and policy audit system and method | |
| CN107124715B (en) | Safety protection performance evaluation method suitable for electric power wireless private network terminal | |
| CN103532747A (en) | Method and system for generating network topology of industrial system | |
| CN107896165A (en) | The method, apparatus and automated test device of locating network fault | |
| CN107360271A (en) | Network equipment information obtains and IP address automatic division method, system and equipment | |
| CN105376163A (en) | Discovery method and device of network topological structure | |
| CN110430265A (en) | A kind of method and device obtaining server and inter-exchange corresponding relationship | |
| CN106911498A (en) | The method of power distribution network distributed terminal intelligent modeling communication |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20190503 |
|
| RJ01 | Rejection of invention patent application after publication |