CN106228623A - A kind of charging device for expressway that can reduce labor workload - Google Patents
A kind of charging device for expressway that can reduce labor workload Download PDFInfo
- Publication number
- CN106228623A CN106228623A CN201610561862.0A CN201610561862A CN106228623A CN 106228623 A CN106228623 A CN 106228623A CN 201610561862 A CN201610561862 A CN 201610561862A CN 106228623 A CN106228623 A CN 106228623A
- Authority
- CN
- China
- Prior art keywords
- data
- displacement sensor
- railing
- information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
- G07B15/00—Arrangements or apparatus for collecting fares, tolls or entrance fees at one or more control points
- G07B15/06—Arrangements for road pricing or congestion charging of vehicles or vehicle users, e.g. automatic toll systems
- G07B15/063—Arrangements for road pricing or congestion charging of vehicles or vehicle users, e.g. automatic toll systems using wireless information transmission between the vehicle and a fixed station
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Business, Economics & Management (AREA)
- Finance (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
A kind of charging device for expressway that can reduce labor workload, including the first displacement sensor, the second displacement sensor, cloud network, by motor-driven railing, master controller, wireless transceiver, fee-collector PC and display screen;Described first displacement sensor is arranged in charge station, is used for sensing the into or out charge station of vehicle;Described second displacement sensor is arranged on railing, for detecting the position of railing;Described master controller is connected with motor, wireless transceiver respectively, and described wireless transceiver is connected with cloud network;When vehicle enters charge station, first displacement sensor has sensed that vehicle enters, main controller controls motor puts down railing automatically, when the second displacement sensor sense railing transfer put in place time, master controller automatically by wireless transceiver from cloud network transfer relevant charging information and show be supplied to car owner on a display screen, after charge, fee-collector is confirmed by fee-collector PC, and railing lifts automatically.
Description
Technical field
The present invention relates to highway toll field, in particular to a kind of highway toll dress that can reduce labor workload
Put.
Background technology
Traditional highway toll uses home server to carry out storage and the process of data often, and this makes local clothes
The data of business device store and treating capacity is very big, the most do not adapt to the demand in epoch in today that data increase day by day.
Summary of the invention
It is an object of the invention to provide a kind of charging device for expressway that can reduce labor workload, to solve above-mentioned asking
Topic.
For solving above-mentioned technical problem, the technical solution used in the present invention is:
A kind of charging device for expressway that can reduce labor workload, including the first displacement sensor, the second displacement sensor,
Cloud network, by motor-driven railing, master controller, wireless transceiver, fee-collector PC and display screen;Described first displacement sensing
Device is arranged in charge station, is used for sensing the into or out charge station of vehicle;Described second displacement sensor is arranged on railing
On, for detecting the position of railing;Described master controller is connected with motor, wireless transceiver respectively, described wireless transceiver with
Cloud network is connected;When vehicle enters charge station, the first displacement sensor has sensed that vehicle enters, main controller controls motor
Automatically put down railing, when the second displacement sensor sense railing transfer put in place time, master controller is automatically by wireless transceiver
Transferring relevant charging information from cloud network and display is supplied to car owner on a display screen, after charge, fee-collector passes through fee-collector
PC confirms, railing lifts automatically.
Beneficial effect: by arranging the parts such as the first induction apparatus, the second induction apparatus, it is achieved that the automatization of vehicle enter and
Leave, and maloperation is less, and the task of fee-collector is only to be responsible for charge and confirm on PC, greatly reduces manual working
Amount.
It should be appreciated that it is only exemplary that above general description and details hereinafter describe, can not be limited this
Open.
Accompanying drawing explanation
Fig. 1 is the connection diagram of each module of the present invention;
Fig. 2 is the structured flowchart of secure visual system.
Reference:
Information data excavates module-1;Information pre-processing module-2;Information storage module-3;Information analysis and displaying mould
Block-4;Data Dimensionality Reduction unit-21;Data identification unit-22;Data sorting unit-23;Contact relation analysis displaying submodule-
41;Submodule-42 is shown in daily record number of times distributional analysis;Between IP, information sends relation analysis displaying submodule-43;Sensitive mail turns
Send out path analysis and show submodule-44;Distributed denial of service attack data analysis and displaying submodule-45;First displacement
Induction apparatus-100;Second displacement sensor-200;Cloud network-300;Motor-400;The railing-500 driven;Master controller-
600;Wireless transceiver-700;Fee-collector PC-800;Display screen-900.
Accompanying drawing herein is merged in description and constitutes the part of this specification, it is shown that meet the enforcement of the present invention
Example, and for explaining the principle of the present invention together with description.
Detailed description of the invention
Below by specific embodiment and combine accompanying drawing the present invention is described in further detail.
Application scenarios 1:
A kind of charging device for expressway that can reduce labor workload as shown in Figure 1, including the first displacement sensor 100,
Second displacement sensor 200, cloud network 300, the railing 500 driven by motor 400, master controller 600, wireless transceiver 700,
Fee-collector PC800 and display screen 900;Described first displacement sensor 100 is arranged in charge station, be used for sensing vehicle enter or
Person leaves charge station;Described second displacement sensor 200 is arranged on railing 500, for detecting the position of railing 500;Described
Master controller 600 is connected with motor 400, wireless transceiver 700 respectively, and described wireless transceiver 700 is connected with cloud network 300;
When vehicle enters charge station, the first displacement sensor 100 has sensed that vehicle enters, and master controller 600 controls motor 400 certainly
Dynamic put down railing 500, when the second displacement sensor 200 sense railing 500 transfer put in place time, master controller 600 automatically by
Wireless transceiver 700 transfers relevant charging information from cloud network 300 and display is supplied to car owner on display screen 900, has charged
After finishing, fee-collector is confirmed by fee-collector PC800, and railing 500 lifts automatically.
The present invention is by arranging the parts such as the first induction apparatus, the second induction apparatus, it is achieved that the automatization of vehicle enter and from
Open, and maloperation is less, and the task of fee-collector is only to be responsible for charge and confirm on PC, greatly reduces manual working
Amount.
Preferably, described first displacement sensor 100 and the second displacement sensor 200 are infrared displacement induction apparatus.
Preferably, described master controller 600 is single-chip microcomputer.
Preferably, as in figure 2 it is shown, also include secure visual system, for described cloud network is carried out visual peace
Full monitoring, it includes that the information data being sequentially connected with excavates module 1, information pre-processing module 2, information storage module 3 and information
Analyze and display module 4;
Described information data excavates module 1, former for obtaining by the way of capturing network packet in LAN
Beginning information data, described original information data includes that between IP, sensitive information sends detection data, mail-detection daily record data and divides
Three kinds of data types of cloth Denial of Service attack data;
Described information pre-processing module 2, for original information data carries out Data Dimensionality Reduction, identify and classify pretreatment;
Described information storage module 3, is used for pretreated information data storing to the corresponding position of cloud storage resource pool
In putting;
Described information analysis and display module 4, for realizing the extraction of information, analyzing and show, it includes that mail comes and goes
Relation analysis shows that submodule 41, daily record number of times distributional analysis show that between submodule 42, IP, information sends relation analysis displaying
Module 43, sensitivity email relaying path analysis and displaying submodule 44 and distributed denial of service attack data analysis are sub with displaying
Module 45, particularly as follows:
(1) submodule 41 is shown in mail contact relation analysis, for the mail-detection day of storage in cloud storage resource pool
Will data carry out extracting, analyze, process, and show a certain specify the time period in the sensitive mail contact relation that detects;Described
Mail contact relation analysis shows that submodule 41 enables users to interact with interface by the calendar on design optional date, uses
Family can arbitrarily select the time period to be checked, the following operation of concrete execution:
The time period selected according to user, the data in cloud storage resource pool are chosen by system, after choosing data
With the form of dictionary, data are stored, through data being analyzed process, according to the transmitting-receiving corresponding relation of sensitive mail
Generate corresponding matrix data model;Subsequently, by the form of chord figure, the transmitting-receiving of mail sensitive in the selected time period is closed
System carries out visual presentation, and each different mailboxes are distributed in circle around, show email address at circular outside profile, if
Having the transmission relation of sensitive information between different mailboxes, just do ribbon lines between two mailboxes, lines are thick
One side represents the sender of mail, and the thin side of lines represents the recipient of mail;
(2) submodule 42 is shown in the distributional analysis of daily record number of times, for entering according to time period and the daily record quantity that detects
Row classification and statistics, and show by the form of dendrogram, particularly as follows:
(2-1) log data set W of reception is divided into n time subset, i.e. W={W1, W2 according to the time period ...,
Wj ..., Wn};
(2-2) be manually set m daily record quantitative levels, by each time subset Wj divide m level subset, i.e. W1j,
W2j ..., Wij ..., Wmj, wherein the span of m is [4,8];
(2-3) with log data set W as root, Wj is ground floor node, and Wij is second layer joint structure tree TW;
(2-5) calculating the value of each node in tree TW, wherein the value of leaf node is the value of this data element, non-
The value of leaf node is equal to the value sum of all child nodes of its lower floor, and so far log data set W has been configured to a tree-shaped
Data structure;
(2-6) dendrogram that the tree data structure of generation is mapped as on two dimensional surface;
(3) between IP, information sends relation analysis displaying submodule 43, for being pointed to cloud storage resource pool relevant position
Between IP sensitive information send detection data carry out extracting, analyze, statistical disposition, by visual presentation form and interface alternation exhibition
Sensitive information between IP different in showing certain period of time sends incidence relation;Between described IP, information sends relation analysis displaying
Submodule 43 uses the time period to select mechanism and scatterplot layout exhibition method, uses joint form presentation-entity, and lines represent real
With size of node, contact between body, represents that between IP, information sends the degree of strength of incidence relation, according to click thing
Part selectively carries out level displaying;Mouse-over there will be the details of correspondent entity, described detailed letter on node
Breath includes that ID, discovery time, click entity will select all IP related with selected node, and only display should
Sub-network figure, the most also shows its corresponding relation sending information with the form of word;It is provided with search mechanisms, user simultaneously
The IP related information that a certain IP selects to want to check can be inputted;
(4) sensitive email relaying path analysis and displaying submodule 44, for by analyzing and processing statistics mail-detection day
Detection data in will data and email relaying relation, show the road that a certain specific mail is forwarded between different mailboxes
Footpath, particularly as follows:
First, user inputs the key word contained by mail header to be searched for or mail header, system in search box
According to key word, mail header all of in mail record data is carried out fuzzy matching retrieval, if not retrieving defeated with user
Enter the mail matched, then send information reminding user and re-enter;If being successfully retrieved relative recording, result just will be retrieved
Showing user with the form of Table content, be that the title of each mail adds Click event simultaneously, user clicks on target postal
The title of part, backstage again carries out retrieval coupling, finds the forwarding record of this mail according to mail selected by user to mail record,
And the article receiving and sending people every time forwarded is carried out statistic record with the form of dictionary, the data required for structure visual presentation;?
After, show that the forward-path of mail is presented to user and provides interactive function with the form of a stacking dendrogram, if certain postal
Case is afterbody recipient, then the summit of tree diagram is hollow display, if this email relaying is also given additionally by this mailbox
One or several mailboxes, then the tree diagram node representing this mailbox is set to solid;
(5) distributed denial of service attack data analysis with show submodule 45, be used for extracting, analyze and show distributed
Denial of Service attack data, particularly as follows:
1) distributed denial of service attack data analysis and displaying submodule 45 are from the relevant position of cloud storage resource pool
Extracting distributed denial of service attack data, use Hash table to store, in Hash table, keyword uses character string forms, word
Symbol string forms by source IP, port numbers and according to the time label three selected by the time interval of user's setting, appoints in these three
Anticipating when a newly-built element occurs different and newly-built element will be inserted in Hash table, each element is in the future graphical
Being all a node in expression, the relation representing and being connected between main frame, the value that in Hash table, keyword is corresponding represents this time
Connect the data total amount in communication activity;
2) calculate the coordinate figure of all nodes, and then the point with coordinate information is drawn, and according to different demands
Carry out time interval, the adjustment of unit radius parameter that figure shows, the principle followed when wherein drawing is: host node and in
Line between heart node represents the size of amount of communication data in time interval, maps according to certain coefficient, and communicate number
Representing according to amount different colours, the expression amount of communication data that color is red is bigger;Host node is made up of some concentric circulars, face
The contrast intensity of color represents the port number related in this connection.
In the present embodiment, utilize visual technology, be directed in network security detecting system in the network captured quick
Sense information type and transmission situation etc. carry out visual displaying, enter network security detection data from five different angles
Row is analyzed and shows, accurate, comprehensive and facilitate management personnel to make corresponding to judge and decision-making;The distributed refusal clothes arranged
Business is attacked data analysis and shows that submodule 45 can carry out various dimensions to distributed denial of service attack pattern and show, and according to
The adjustment of the different unit radius parameters that demand carries out time interval, figure shows, improves the performance that user is mutual.
Preferably, described information pre-processing module 2 includes Data Dimensionality Reduction unit 21, data identification unit 22 and data classification
Unit 23, particularly as follows:
(1) Data Dimensionality Reduction unit 21, for use the PCA of improvement eliminate between original information data superfluous
Remaining, reduce the dimension of original information data, the PCA of described improvement is:
1) N bar original information data to be analyzed is mentioned, as matrix X=[x1,x2,…,xN], wherein xiBe i-th former
Beginning information data;
2) meansigma methods of N bar original information data is solved:
3) the covariance matrix A of N bar original information data is solved:
4) according to the eigenvalue problem calculating main component element of covariance matrix A:
Aδi=μiδi
Wherein μi, δiIt is respectively eigenvalue and the characteristic of correspondence vector of A;
5) according to given precision ρ, by numerical computation method, front M eigenvalue of maximum is solved:
Wherein, the span of M is
6) front M eigenvalue of maximum and characteristic of correspondence vector, order are taken
Φ=[δ1,δ2,…,δM], Γ=diag (μ1,μ2,…,μM)
Then there is A Φ=Φ Γ;
7) the new matrix Y=Φ of low-dimensional vector composition is calculatedTX;
(2) data identification unit 22, for the original information data after reducing dimension is identified detection, remove not phase
The information data closed, obtains relevant information data;
(3) data sorting unit 23, for classifying according to data type to relevant information data.
Wherein, described data identification unit 22 includes being identified distributed denial of service attack data, particularly as follows:
1) the K bar original information data matrix after dimensionality reduction is set as Y '=ΦTX ', wherein X '=[x1,x2,…,xK], xj∈
X ', selection Db3 small echo is as analysis wavelet, and selects maximum decomposition scale, uses decomposition algorithm to carry out wavelet decomposition Y ' and obtains
To matrix of wavelet coefficients, when j≤out to out, from matrix of wavelet coefficients, extract high frequency coefficient, calculate the variance of little coefficient
After Ψ, and according to [j, log2Ψ] fitting a straight line tries to achieve slope k, thus solves the self similar parameter Hurst value of network traffics
H:
H=(k-1)/2
2) the Hurst changing value Δ H=H the most in the same time tried to achieve by analysist-Ht-1, set threshold T, if Δ H >
T, it is determined that distributed denial of service attack occurs, preserves corresponding original information data;If Δ H≤T, it is determined that distributed refusal takes
Business is attacked and is not sent, and removes corresponding original information data.Take m=4,
Wherein, the transmitting-receiving corresponding relation of described mail is obtained by the TCP closure obtaining mail, first passes through parsing
The network packet obtained, obtains including source IP address, purpose IP address, source port, destination interface, the information of serial number, and
With four-tuple 1: source IP address, source port, purpose IP address, destination interface and four-tuple 2: purpose IP address, destination interface, source
IP address, source port, indicate the both direction that TCP connects respectively, then by the application layer data of network packet according to sequence
In the journal file that number sequentially write is corresponding with TCP closure.
Wherein, described Table content includes mail ID, mail header, mail time, mail originator and Email attachment
Number.
In the present embodiment, information pre-processing module 2 arranges Data Dimensionality Reduction unit 21, data identification unit 22 and data
Taxon 23, carries out dimensionality reduction, identifies and classification process, thus realize storing different types of data original information data
In the diverse location of cloud storage resource pool, beneficially information analysis and the display module 4 extraction to corresponding data, improve further
The speed of service of system;The present embodiment value m=4,The speed of service of system improves 2%.
Application scenarios 2:
A kind of charging device for expressway that can reduce labor workload as shown in Figure 1, including the first displacement sensor 100,
Second displacement sensor 200, cloud network 300, the railing 500 driven by motor 400, master controller 600, wireless transceiver 700,
Fee-collector PC800 and display screen 900;Described first displacement sensor 100 is arranged in charge station, be used for sensing vehicle enter or
Person leaves charge station;Described second displacement sensor 200 is arranged on railing 500, for detecting the position of railing 500;Described
Master controller 600 is connected with motor 400, wireless transceiver 700 respectively, and described wireless transceiver 700 is connected with cloud network 300;
When vehicle enters charge station, the first displacement sensor 100 has sensed that vehicle enters, and master controller 600 controls motor 400 certainly
Dynamic put down railing 500, when the second displacement sensor 200 sense railing 500 transfer put in place time, master controller 600 automatically by
Wireless transceiver 700 transfers relevant charging information from cloud network 300 and display is supplied to car owner on display screen 900, has charged
After finishing, fee-collector is confirmed by fee-collector PC800, and railing 500 lifts automatically.
The present invention is by arranging the parts such as the first induction apparatus, the second induction apparatus, it is achieved that the automatization of vehicle enter and from
Open, and maloperation is less, and the task of fee-collector is only to be responsible for charge and confirm on PC, greatly reduces manual working
Amount.
Preferably, described first displacement sensor 100 and the second displacement sensor 200 are infrared displacement induction apparatus.
Preferably, described master controller 600 is single-chip microcomputer.
Preferably, as in figure 2 it is shown, also include secure visual system, for described cloud network is carried out visual peace
Full monitoring, it includes that the information data being sequentially connected with excavates module 1, information pre-processing module 2, information storage module 3 and information
Analyze and display module 4;
Described information data excavates module 1, former for obtaining by the way of capturing network packet in LAN
Beginning information data, described original information data includes that between IP, sensitive information sends detection data, mail-detection daily record data and divides
Three kinds of data types of cloth Denial of Service attack data;
Described information pre-processing module 2, for original information data carries out Data Dimensionality Reduction, identify and classify pretreatment;
Described information storage module 3, is used for pretreated information data storing to the corresponding position of cloud storage resource pool
In putting;
Described information analysis and display module 4, for realizing the extraction of information, analyzing and show, it includes that mail comes and goes
Relation analysis shows that submodule 41, daily record number of times distributional analysis show that between submodule 42, IP, information sends relation analysis displaying
Module 43, sensitivity email relaying path analysis and displaying submodule 44 and distributed denial of service attack data analysis are sub with displaying
Module 45, particularly as follows:
(1) submodule 41 is shown in mail contact relation analysis, for the mail-detection day of storage in cloud storage resource pool
Will data carry out extracting, analyze, process, and show a certain specify the time period in the sensitive mail contact relation that detects;Described
Mail contact relation analysis shows that submodule 41 enables users to interact with interface by the calendar on design optional date, uses
Family can arbitrarily select the time period to be checked, the following operation of concrete execution:
The time period selected according to user, the data in cloud storage resource pool are chosen by system, after choosing data
With the form of dictionary, data are stored, through data being analyzed process, according to the transmitting-receiving corresponding relation of sensitive mail
Generate corresponding matrix data model;Subsequently, by the form of chord figure, the transmitting-receiving of mail sensitive in the selected time period is closed
System carries out visual presentation, and each different mailboxes are distributed in circle around, show email address at circular outside profile, if
Having the transmission relation of sensitive information between different mailboxes, just do ribbon lines between two mailboxes, lines are thick
One side represents the sender of mail, and the thin side of lines represents the recipient of mail;
(2) submodule 42 is shown in the distributional analysis of daily record number of times, for entering according to time period and the daily record quantity that detects
Row classification and statistics, and show by the form of dendrogram, particularly as follows:
(2-1) log data set W of reception is divided into n time subset, i.e. W={W1, W2 according to the time period ...,
Wj ..., Wn};
(2-2) be manually set m daily record quantitative levels, by each time subset Wj divide m level subset, i.e. W1j,
W2j ..., Wij ..., Wmj, wherein the span of m is [4,8];
(2-3) with log data set W as root, Wj is ground floor node, and Wij is second layer joint structure tree TW;
(2-5) calculating the value of each node in tree TW, wherein the value of leaf node is the value of this data element, non-
The value of leaf node is equal to the value sum of all child nodes of its lower floor, and so far log data set W has been configured to a tree-shaped
Data structure;
(2-6) dendrogram that the tree data structure of generation is mapped as on two dimensional surface;
(3) between IP, information sends relation analysis displaying submodule 43, for being pointed to cloud storage resource pool relevant position
Between IP sensitive information send detection data carry out extracting, analyze, statistical disposition, by visual presentation form and interface alternation exhibition
Sensitive information between IP different in showing certain period of time sends incidence relation;Between described IP, information sends relation analysis displaying
Submodule 43 uses the time period to select mechanism and scatterplot layout exhibition method, uses joint form presentation-entity, and lines represent real
With size of node, contact between body, represents that between IP, information sends the degree of strength of incidence relation, according to click thing
Part selectively carries out level displaying;Mouse-over there will be the details of correspondent entity, described detailed letter on node
Breath includes that ID, discovery time, click entity will select all IP related with selected node, and only display should
Sub-network figure, the most also shows its corresponding relation sending information with the form of word;It is provided with search mechanisms, user simultaneously
The IP related information that a certain IP selects to want to check can be inputted;
(4) sensitive email relaying path analysis and displaying submodule 44, for by analyzing and processing statistics mail-detection day
Detection data in will data and email relaying relation, show the road that a certain specific mail is forwarded between different mailboxes
Footpath, particularly as follows:
First, user inputs the key word contained by mail header to be searched for or mail header, system in search box
According to key word, mail header all of in mail record data is carried out fuzzy matching retrieval, if not retrieving defeated with user
Enter the mail matched, then send information reminding user and re-enter;If being successfully retrieved relative recording, result just will be retrieved
Showing user with the form of Table content, be that the title of each mail adds Cl ick event simultaneously, user clicks on target postal
The title of part, backstage again carries out retrieval coupling, finds the forwarding record of this mail according to mail selected by user to mail record,
And the article receiving and sending people every time forwarded is carried out statistic record with the form of dictionary, the data required for structure visual presentation;?
After, show that the forward-path of mail is presented to user and provides interactive function with the form of a stacking dendrogram, if certain postal
Case is afterbody recipient, then the summit of tree diagram is hollow display, if this email relaying is also given additionally by this mailbox
One or several mailboxes, then the tree diagram node representing this mailbox is set to solid;
(5) distributed denial of service attack data analysis with show submodule 45, be used for extracting, analyze and show distributed
Denial of Service attack data, particularly as follows:
1) distributed denial of service attack data analysis and displaying submodule 45 are from the relevant position of cloud storage resource pool
Extracting distributed denial of service attack data, use Hash table to store, in Hash table, keyword uses character string forms, word
Symbol string forms by source IP, port numbers and according to the time label three selected by the time interval of user's setting, appoints in these three
Anticipating when a newly-built element occurs different and newly-built element will be inserted in Hash table, each element is in the future graphical
Being all a node in expression, the relation representing and being connected between main frame, the value that in Hash table, keyword is corresponding represents this time
Connect the data total amount in communication activity;
2) calculate the coordinate figure of all nodes, and then the point with coordinate information is drawn, and according to different demands
Carry out time interval, the adjustment of unit radius parameter that figure shows, the principle followed when wherein drawing is: host node and in
Line between heart node represents the size of amount of communication data in time interval, maps according to certain coefficient, and communicate number
Representing according to amount different colours, the expression amount of communication data that color is red is bigger;Host node is made up of some concentric circulars, face
The contrast intensity of color represents the port number related in this connection.
In the present embodiment, utilize visual technology, be directed in network security detecting system in the network captured quick
Sense information type and transmission situation etc. carry out visual displaying, enter network security detection data from five different angles
Row is analyzed and shows, accurate, comprehensive and facilitate management personnel to make corresponding to judge and decision-making;The distributed refusal clothes arranged
Business is attacked data analysis and shows that submodule 45 can carry out various dimensions to distributed denial of service attack pattern and show, and according to
The adjustment of the different unit radius parameters that demand carries out time interval, figure shows, improves the performance that user is mutual.
Preferably, described information pre-processing module 2 includes Data Dimensionality Reduction unit 21, data identification unit 22 and data classification
Unit 23, particularly as follows:
(1) Data Dimensionality Reduction unit 21, for use the PCA of improvement eliminate between original information data superfluous
Remaining, reduce the dimension of original information data, the PCA of described improvement is:
1) N bar original information data to be analyzed is mentioned, as matrix X=[x1,x2,…,xN], wherein xiBe i-th former
Beginning information data;
2) meansigma methods of N bar original information data is solved:
3) the covariance matrix A of N bar original information data is solved:
4) according to the eigenvalue problem calculating main component element of covariance matrix A:
Aδi=μiδi
Wherein μi, δiIt is respectively eigenvalue and the characteristic of correspondence vector of A;
5) according to given precision ρ, by numerical computation method, front M eigenvalue of maximum is solved:
Wherein, the span of M is
6) front M eigenvalue of maximum and characteristic of correspondence vector, order are taken
Φ=[δ1,δ2,…,δM], Γ=diag (μ1,μ2,…,μM)
Then there is A Φ=Φ Γ;
7) the new matrix Y=Φ of low-dimensional vector composition is calculatedTX;
(2) data identification unit 22, for the original information data after reducing dimension is identified detection, remove not phase
The information data closed, obtains relevant information data;
(3) data sorting unit 23, for classifying according to data type to relevant information data.Take m=5,
Wherein, described data identification unit 22 includes being identified distributed denial of service attack data, particularly as follows:
1) the K bar original information data matrix after dimensionality reduction is set as Y '=ΦTX ', wherein X '=[x1,x2,…,xK], xj∈
X ', selection Db3 small echo is as analysis wavelet, and selects maximum decomposition scale, uses decomposition algorithm to carry out wavelet decomposition Y ' and obtains
To matrix of wavelet coefficients, when j≤out to out, from matrix of wavelet coefficients, extract high frequency coefficient, calculate the variance of little coefficient
After Ψ, and according to [j, log2Ψ] fitting a straight line tries to achieve slope k, thus solves the self similar parameter Hurst value of network traffics
H:
H=(k-1)/2
2) the Hurst changing value Δ H=H the most in the same time tried to achieve by analysist-Ht-1, set threshold T, if Δ H >
T, it is determined that distributed denial of service attack occurs, preserves corresponding original information data;If Δ H≤T, it is determined that distributed refusal takes
Business is attacked and is not sent, and removes corresponding original information data.
Wherein, the transmitting-receiving corresponding relation of described mail is obtained by the TCP closure obtaining mail, first passes through parsing
The network packet obtained, obtains including source IP address, purpose IP address, source port, destination interface, the information of serial number, and
With four-tuple 1: source IP address, source port, purpose IP address, destination interface and four-tuple 2: purpose IP address, destination interface, source
IP address, source port, indicate the both direction that TCP connects respectively, then by the application layer data of network packet according to sequence
In the journal file that number sequentially write is corresponding with TCP closure.
Wherein, described Table content includes mail ID, mail header, mail time, mail originator and Email attachment
Number.
In the present embodiment, information pre-processing module 2 arranges Data Dimensionality Reduction unit 21, data identification unit 22 and data
Taxon 23, carries out dimensionality reduction, identifies and classification process, thus realize storing different types of data original information data
In the diverse location of cloud storage resource pool, beneficially information analysis and the display module 4 extraction to corresponding data, improve further
The speed of service of system;The present embodiment value m=5,The speed of service of system improves 1.8%.
Application scenarios 3:
A kind of charging device for expressway that can reduce labor workload as shown in Figure 1, including the first displacement sensor 100,
Second displacement sensor 200, cloud network 300, the railing 500 driven by motor 400, master controller 600, wireless transceiver 700,
Fee-collector PC800 and display screen 900;Described first displacement sensor 100 is arranged in charge station, be used for sensing vehicle enter or
Person leaves charge station;Described second displacement sensor 200 is arranged on railing 500, for detecting the position of railing 500;Described
Master controller 600 is connected with motor 400, wireless transceiver 700 respectively, and described wireless transceiver 700 is connected with cloud network 300;
When vehicle enters charge station, the first displacement sensor 100 has sensed that vehicle enters, and master controller 600 controls motor 400 certainly
Dynamic put down railing 500, when the second displacement sensor 200 sense railing 500 transfer put in place time, master controller 600 automatically by
Wireless transceiver 700 transfers relevant charging information from cloud network 300 and display is supplied to car owner on display screen 900, has charged
After finishing, fee-collector is confirmed by fee-collector PC800, and railing 500 lifts automatically.
The present invention is by arranging the parts such as the first induction apparatus, the second induction apparatus, it is achieved that the automatization of vehicle enter and from
Open, and maloperation is less, and the task of fee-collector is only to be responsible for charge and confirm on PC, greatly reduces manual working
Amount.
Preferably, described first displacement sensor 100 and the second displacement sensor 200 are infrared displacement induction apparatus.
Preferably, described master controller 600 is single-chip microcomputer.
Preferably, as in figure 2 it is shown, also include secure visual system, for described cloud network is carried out visual peace
Full monitoring, it includes that the information data being sequentially connected with excavates module 1, information pre-processing module 2, information storage module 3 and information
Analyze and display module 4;
Described information data excavates module 1, former for obtaining by the way of capturing network packet in LAN
Beginning information data, described original information data includes that between IP, sensitive information sends detection data, mail-detection daily record data and divides
Three kinds of data types of cloth Denial of Service attack data;
Described information pre-processing module 2, for original information data carries out Data Dimensionality Reduction, identify and classify pretreatment;
Described information storage module 3, is used for pretreated information data storing to the corresponding position of cloud storage resource pool
In putting;
Described information analysis and display module 4, for realizing the extraction of information, analyzing and show, it includes that mail comes and goes
Relation analysis shows that submodule 41, daily record number of times distributional analysis show that between submodule 42, IP, information sends relation analysis displaying
Module 43, sensitivity email relaying path analysis and displaying submodule 44 and distributed denial of service attack data analysis are sub with displaying
Module 45, particularly as follows:
(1) submodule 41 is shown in mail contact relation analysis, for the mail-detection day of storage in cloud storage resource pool
Will data carry out extracting, analyze, process, and show a certain specify the time period in the sensitive mail contact relation that detects;Described
Mail contact relation analysis shows that submodule 41 enables users to interact with interface by the calendar on design optional date, uses
Family can arbitrarily select the time period to be checked, the following operation of concrete execution:
The time period selected according to user, the data in cloud storage resource pool are chosen by system, after choosing data
With the form of dictionary, data are stored, through data being analyzed process, according to the transmitting-receiving corresponding relation of sensitive mail
Generate corresponding matrix data model;Subsequently, by the form of chord figure, the transmitting-receiving of mail sensitive in the selected time period is closed
System carries out visual presentation, and each different mailboxes are distributed in circle around, show email address at circular outside profile, if
Having the transmission relation of sensitive information between different mailboxes, just do ribbon lines between two mailboxes, lines are thick
One side represents the sender of mail, and the thin side of lines represents the recipient of mail;
(2) submodule 42 is shown in the distributional analysis of daily record number of times, for entering according to time period and the daily record quantity that detects
Row classification and statistics, and show by the form of dendrogram, particularly as follows:
(2-1) log data set W of reception is divided into n time subset, i.e. W={W1, W2 according to the time period ...,
Wj ..., Wn};
(2-2) be manually set m daily record quantitative levels, by each time subset Wj divide m level subset, i.e. W1j,
W2j ..., Wij ..., Wmj, wherein the span of m is [4,8];
(2-3) with log data set W as root, Wj is ground floor node, and Wij is second layer joint structure tree TW;
(2-5) calculating the value of each node in tree TW, wherein the value of leaf node is the value of this data element, non-
The value of leaf node is equal to the value sum of all child nodes of its lower floor, and so far log data set W has been configured to a tree-shaped
Data structure;
(2-6) dendrogram that the tree data structure of generation is mapped as on two dimensional surface;
(3) between IP, information sends relation analysis displaying submodule 43, for being pointed to cloud storage resource pool relevant position
Between IP sensitive information send detection data carry out extracting, analyze, statistical disposition, by visual presentation form and interface alternation exhibition
Sensitive information between IP different in showing certain period of time sends incidence relation;Between described IP, information sends relation analysis displaying
Submodule 43 uses the time period to select mechanism and scatterplot layout exhibition method, uses joint form presentation-entity, and lines represent real
With size of node, contact between body, represents that between IP, information sends the degree of strength of incidence relation, according to click thing
Part selectively carries out level displaying;Mouse-over there will be the details of correspondent entity, described detailed letter on node
Breath includes that ID, discovery time, click entity will select all IP related with selected node, and only display should
Sub-network figure, the most also shows its corresponding relation sending information with the form of word;It is provided with search mechanisms, user simultaneously
The IP related information that a certain IP selects to want to check can be inputted;
(4) sensitive email relaying path analysis and displaying submodule 44, for by analyzing and processing statistics mail-detection day
Detection data in will data and email relaying relation, show the road that a certain specific mail is forwarded between different mailboxes
Footpath, particularly as follows:
First, user inputs the key word contained by mail header to be searched for or mail header, system in search box
According to key word, mail header all of in mail record data is carried out fuzzy matching retrieval, if not retrieving defeated with user
Enter the mail matched, then send information reminding user and re-enter;If being successfully retrieved relative recording, result just will be retrieved
Showing user with the form of Table content, be that the title of each mail adds Cl ick event simultaneously, user clicks on target postal
The title of part, backstage again carries out retrieval coupling, finds the forwarding record of this mail according to mail selected by user to mail record,
And the article receiving and sending people every time forwarded is carried out statistic record with the form of dictionary, the data required for structure visual presentation;?
After, show that the forward-path of mail is presented to user and provides interactive function with the form of a stacking dendrogram, if certain postal
Case is afterbody recipient, then the summit of tree diagram is hollow display, if this email relaying is also given additionally by this mailbox
One or several mailboxes, then the tree diagram node representing this mailbox is set to solid;
(5) distributed denial of service attack data analysis with show submodule 45, be used for extracting, analyze and show distributed
Denial of Service attack data, particularly as follows:
1) distributed denial of service attack data analysis and displaying submodule 45 are from the relevant position of cloud storage resource pool
Extracting distributed denial of service attack data, use Hash table to store, in Hash table, keyword uses character string forms, word
Symbol string forms by source IP, port numbers and according to the time label three selected by the time interval of user's setting, appoints in these three
Anticipating when a newly-built element occurs different and newly-built element will be inserted in Hash table, each element is in the future graphical
Being all a node in expression, the relation representing and being connected between main frame, the value that in Hash table, keyword is corresponding represents this time
Connect the data total amount in communication activity;
2) calculate the coordinate figure of all nodes, and then the point with coordinate information is drawn, and according to different demands
Carry out time interval, the adjustment of unit radius parameter that figure shows, the principle followed when wherein drawing is: host node and in
Line between heart node represents the size of amount of communication data in time interval, maps according to certain coefficient, and communicate number
Representing according to amount different colours, the expression amount of communication data that color is red is bigger;Host node is made up of some concentric circulars, face
The contrast intensity of color represents the port number related in this connection.
In the present embodiment, utilize visual technology, be directed in network security detecting system in the network captured quick
Sense information type and transmission situation etc. carry out visual displaying, enter network security detection data from five different angles
Row is analyzed and shows, accurate, comprehensive and facilitate management personnel to make corresponding to judge and decision-making;The distributed refusal clothes arranged
Business is attacked data analysis and shows that submodule 45 can carry out various dimensions to distributed denial of service attack pattern and show, and according to
The adjustment of the different unit radius parameters that demand carries out time interval, figure shows, improves the performance that user is mutual.
Preferably, described information pre-processing module 2 includes Data Dimensionality Reduction unit 21, data identification unit 22 and data classification
Unit 23, particularly as follows:
(1) Data Dimensionality Reduction unit 21, for use the PCA of improvement eliminate between original information data superfluous
Remaining, reduce the dimension of original information data, the PCA of described improvement is:
1) N bar original information data to be analyzed is mentioned, as matrix X=[x1,x2,…,xN], wherein xiBe i-th former
Beginning information data;
2) meansigma methods of N bar original information data is solved:
3) the covariance matrix A of N bar original information data is solved:
4) according to the eigenvalue problem calculating main component element of covariance matrix A:
Aδi=μiδi
Wherein μi, δiIt is respectively eigenvalue and the characteristic of correspondence vector of A;
5) according to given precision ρ, by numerical computation method, front M eigenvalue of maximum is solved:
Wherein, the span of M is
6) front M eigenvalue of maximum and characteristic of correspondence vector, order are taken
Φ=[δ1,δ2,…,δM], Γ=diag (μ1,μ2,…,μM)
Then there is A Φ=Φ Γ;
7) the new matrix Y=Φ of low-dimensional vector composition is calculatedTX;
(2) data identification unit 22, for the original information data after reducing dimension is identified detection, remove not phase
The information data closed, obtains relevant information data;
(3) data sorting unit 23, for classifying according to data type to relevant information data.Take m=6,
Wherein, described data identification unit 22 includes being identified distributed denial of service attack data, particularly as follows:
1) the K bar original information data matrix after dimensionality reduction is set as Y '=ΦTX ', wherein X '=[x1,x2,…,xK], xi∈
X ', selection Db3 small echo is as analysis wavelet, and selects maximum decomposition scale, uses decomposition algorithm to carry out wavelet decomposition Y ' and obtains
To matrix of wavelet coefficients, when j≤out to out, from matrix of wavelet coefficients, extract high frequency coefficient, calculate the variance of little coefficient
After Ψ, and according to [j, log2Ψ] fitting a straight line tries to achieve slope k, thus solves the self similar parameter Hurst value of network traffics
H:
H=(k-1)/2
2) the Hurst changing value Δ H=H the most in the same time tried to achieve by analysist-Ht-1, set threshold T, if Δ H >
T, it is determined that distributed denial of service attack occurs, preserves corresponding original information data;If Δ H≤T, it is determined that distributed refusal takes
Business is attacked and is not sent, and removes corresponding original information data.
Wherein, the transmitting-receiving corresponding relation of described mail is obtained by the TCP closure obtaining mail, first passes through parsing
The network packet obtained, obtains including source IP address, purpose IP address, source port, destination interface, the information of serial number, and
With four-tuple 1: source IP address, source port, purpose IP address, destination interface and four-tuple 2: purpose IP address, destination interface, source
IP address, source port, indicate the both direction that TCP connects respectively, then by the application layer data of network packet according to sequence
In the journal file that number sequentially write is corresponding with TCP closure.
Wherein, described Table content includes mail ID, mail header, mail time, mail originator and Email attachment
Number.
In the present embodiment, information pre-processing module 2 arranges Data Dimensionality Reduction unit 21, data identification unit 22 and data
Taxon 23, carries out dimensionality reduction, identifies and classification process, thus realize storing different types of data original information data
In the diverse location of cloud storage resource pool, beneficially information analysis and the display module 4 extraction to corresponding data, improve further
The speed of service of system;The present embodiment value m=6,The speed of service of system improves 1.6%.
Application scenarios 4:
A kind of charging device for expressway that can reduce labor workload as shown in Figure 1, including the first displacement sensor 100,
Second displacement sensor 200, cloud network 300, the railing 500 driven by motor 400, master controller 600, wireless transceiver 700,
Fee-collector PC800 and display screen 900;Described first displacement sensor 100 is arranged in charge station, be used for sensing vehicle enter or
Person leaves charge station;Described second displacement sensor 200 is arranged on railing 500, for detecting the position of railing 500;Described
Master controller 600 is connected with motor 400, wireless transceiver 700 respectively, and described wireless transceiver 700 is connected with cloud network 300;
When vehicle enters charge station, the first displacement sensor 100 has sensed that vehicle enters, and master controller 600 controls motor 400 certainly
Dynamic put down railing 500, when the second displacement sensor 200 sense railing 500 transfer put in place time, master controller 600 automatically by
Wireless transceiver 700 transfers relevant charging information from cloud network 300 and display is supplied to car owner on display screen 900, has charged
After finishing, fee-collector is confirmed by fee-collector PC800, and railing 500 lifts automatically.
The present invention is by arranging the parts such as the first induction apparatus, the second induction apparatus, it is achieved that the automatization of vehicle enter and from
Open, and maloperation is less, and the task of fee-collector is only to be responsible for charge and confirm on PC, greatly reduces manual working
Amount.
Preferably, described first displacement sensor 100 and the second displacement sensor 200 are infrared displacement induction apparatus.
Preferably, described master controller 600 is single-chip microcomputer.
Preferably, as in figure 2 it is shown, also include secure visual system, for described cloud network is carried out visual peace
Full monitoring, it includes that the information data being sequentially connected with excavates module 1, information pre-processing module 2, information storage module 3 and information
Analyze and display module 4;
Described information data excavates module 1, former for obtaining by the way of capturing network packet in LAN
Beginning information data, described original information data includes that between IP, sensitive information sends detection data, mail-detection daily record data and divides
Three kinds of data types of cloth Denial of Service attack data;
Described information pre-processing module 2, for original information data carries out Data Dimensionality Reduction, identify and classify pretreatment;
Described information storage module 3, is used for pretreated information data storing to the corresponding position of cloud storage resource pool
In putting;
Described information analysis and display module 4, for realizing the extraction of information, analyzing and show, it includes that mail comes and goes
Relation analysis shows that submodule 41, daily record number of times distributional analysis show that between submodule 42, IP, information sends relation analysis displaying
Module 43, sensitivity email relaying path analysis and displaying submodule 44 and distributed denial of service attack data analysis are sub with displaying
Module 45, particularly as follows:
(1) submodule 41 is shown in mail contact relation analysis, for the mail-detection day of storage in cloud storage resource pool
Will data carry out extracting, analyze, process, and show a certain specify the time period in the sensitive mail contact relation that detects;Described
Mail contact relation analysis shows that submodule 41 enables users to interact with interface by the calendar on design optional date, uses
Family can arbitrarily select the time period to be checked, the following operation of concrete execution:
The time period selected according to user, the data in cloud storage resource pool are chosen by system, after choosing data
With the form of dictionary, data are stored, through data being analyzed process, according to the transmitting-receiving corresponding relation of sensitive mail
Generate corresponding matrix data model;Subsequently, by the form of chord figure, the transmitting-receiving of mail sensitive in the selected time period is closed
System carries out visual presentation, and each different mailboxes are distributed in circle around, show email address at circular outside profile, if
Having the transmission relation of sensitive information between different mailboxes, just do ribbon lines between two mailboxes, lines are thick
One side represents the sender of mail, and the thin side of lines represents the recipient of mail;
(2) submodule 42 is shown in the distributional analysis of daily record number of times, for entering according to time period and the daily record quantity that detects
Row classification and statistics, and show by the form of dendrogram, particularly as follows:
(2-1) log data set W of reception is divided into n time subset, i.e. W={W1, W2 according to the time period ...,
Wj ..., Wn};
(2-2) be manually set m daily record quantitative levels, by each time subset Wj divide m level subset, i.e. W1j,
W2j ..., Wij ..., Wmj, wherein the span of m is [4,8];
(2-3) with log data set W as root, Wj is ground floor node, and Wij is second layer joint structure tree TW;
(2-5) calculating the value of each node in tree TW, wherein the value of leaf node is the value of this data element, non-
The value of leaf node is equal to the value sum of all child nodes of its lower floor, and so far log data set W has been configured to a tree-shaped
Data structure;
(2-6) dendrogram that the tree data structure of generation is mapped as on two dimensional surface;
(3) between IP, information sends relation analysis displaying submodule 43, for being pointed to cloud storage resource pool relevant position
Between IP sensitive information send detection data carry out extracting, analyze, statistical disposition, by visual presentation form and interface alternation exhibition
Sensitive information between IP different in showing certain period of time sends incidence relation;Between described IP, information sends relation analysis displaying
Submodule 43 uses the time period to select mechanism and scatterplot layout exhibition method, uses joint form presentation-entity, and lines represent real
With size of node, contact between body, represents that between IP, information sends the degree of strength of incidence relation, according to click thing
Part selectively carries out level displaying;Mouse-over there will be the details of correspondent entity, described detailed letter on node
Breath includes that ID, discovery time, click entity will select all IP related with selected node, and only display should
Sub-network figure, the most also shows its corresponding relation sending information with the form of word;It is provided with search mechanisms, user simultaneously
The IP related information that a certain IP selects to want to check can be inputted;
(4) sensitive email relaying path analysis and displaying submodule 44, for by analyzing and processing statistics mail-detection day
Detection data in will data and email relaying relation, show the road that a certain specific mail is forwarded between different mailboxes
Footpath, particularly as follows:
First, user inputs the key word contained by mail header to be searched for or mail header, system in search box
According to key word, mail header all of in mail record data is carried out fuzzy matching retrieval, if not retrieving defeated with user
Enter the mail matched, then send information reminding user and re-enter;If being successfully retrieved relative recording, result just will be retrieved
Showing user with the form of Table content, be that the title of each mail adds Cl ick event simultaneously, user clicks on target postal
The title of part, backstage again carries out retrieval coupling, finds the forwarding record of this mail according to mail selected by user to mail record,
And the article receiving and sending people every time forwarded is carried out statistic record with the form of dictionary, the data required for structure visual presentation;?
After, show that the forward-path of mail is presented to user and provides interactive function with the form of a stacking dendrogram, if certain postal
Case is afterbody recipient, then the summit of tree diagram is hollow display, if this email relaying is also given additionally by this mailbox
One or several mailboxes, then the tree diagram node representing this mailbox is set to solid;
(5) distributed denial of service attack data analysis with show submodule 45, be used for extracting, analyze and show distributed
Denial of Service attack data, particularly as follows:
1) distributed denial of service attack data analysis and displaying submodule 45 are from the relevant position of cloud storage resource pool
Extracting distributed denial of service attack data, use Hash table to store, in Hash table, keyword uses character string forms, word
Symbol string forms by source IP, port numbers and according to the time label three selected by the time interval of user's setting, appoints in these three
Anticipating when a newly-built element occurs different and newly-built element will be inserted in Hash table, each element is in the future graphical
Being all a node in expression, the relation representing and being connected between main frame, the value that in Hash table, keyword is corresponding represents this time
Connect the data total amount in communication activity;
2) calculate the coordinate figure of all nodes, and then the point with coordinate information is drawn, and according to different demands
Carry out time interval, the adjustment of unit radius parameter that figure shows, the principle followed when wherein drawing is: host node and in
Line between heart node represents the size of amount of communication data in time interval, maps according to certain coefficient, and communicate number
Representing according to amount different colours, the expression amount of communication data that color is red is bigger;Host node is made up of some concentric circulars, face
The contrast intensity of color represents the port number related in this connection.
In the present embodiment, utilize visual technology, be directed in network security detecting system in the network captured quick
Sense information type and transmission situation etc. carry out visual displaying, enter network security detection data from five different angles
Row is analyzed and shows, accurate, comprehensive and facilitate management personnel to make corresponding to judge and decision-making;The distributed refusal clothes arranged
Business is attacked data analysis and shows that submodule 45 can carry out various dimensions to distributed denial of service attack pattern and show, and according to
The adjustment of the different unit radius parameters that demand carries out time interval, figure shows, improves the performance that user is mutual.
Preferably, described information pre-processing module 2 includes Data Dimensionality Reduction unit 21, data identification unit 22 and data classification
Unit 23, particularly as follows:
(1) Data Dimensionality Reduction unit 21, for use the PCA of improvement eliminate between original information data superfluous
Remaining, reduce the dimension of original information data, the PCA of described improvement is:
1) N bar original information data to be analyzed is mentioned, as matrix X=[x1,x2,…,xN], wherein xiBe i-th former
Beginning information data;
2) meansigma methods of N bar original information data is solved:
3) the covariance matrix A of N bar original information data is solved:
4) according to the eigenvalue problem calculating main component element of covariance matrix A:
Aδi=μiδi
Wherein μi, δiIt is respectively eigenvalue and the characteristic of correspondence vector of A;
5) according to given precision ρ, by numerical computation method, front M eigenvalue of maximum is solved:
Wherein, the span of M is
6) front M eigenvalue of maximum and characteristic of correspondence vector, order are taken
Φ=[δ1,δ2,…,δM], Γ=diag (μ1,μ2,…,μM)
Then there is A Φ=Φ Γ;
7) the new matrix Y=Φ of low-dimensional vector composition is calculatedTX;
(2) data identification unit 22, for the original information data after reducing dimension is identified detection, remove not phase
The information data closed, obtains relevant information data;
(3) data sorting unit 23, for classifying according to data type to relevant information data.Take m=7,
Wherein, described data identification unit 22 includes being identified distributed denial of service attack data, particularly as follows:
1) the K bar original information data matrix after dimensionality reduction is set as Y '=ΦTX ', wherein X '=[x1,x2,…,xK], xj∈
X ', selection Db3 small echo is as analysis wavelet, and selects maximum decomposition scale, uses decomposition algorithm to carry out wavelet decomposition Y ' and obtains
To matrix of wavelet coefficients, when j≤out to out, from matrix of wavelet coefficients, extract high frequency coefficient, calculate the variance of little coefficient
After Ψ, and according to [j, log2Ψ] fitting a straight line tries to achieve slope k, thus solves the self similar parameter Hurst value of network traffics
H:
H=(k-1)/2
2) the Hurst changing value Δ H=H the most in the same time tried to achieve by analysist-Ht-1, set threshold T, if Δ H >
T, it is determined that distributed denial of service attack occurs, preserves corresponding original information data;If Δ H≤T, it is determined that distributed refusal takes
Business is attacked and is not sent, and removes corresponding original information data.
Wherein, the transmitting-receiving corresponding relation of described mail is obtained by the TCP closure obtaining mail, first passes through parsing
The network packet obtained, obtains including source IP address, purpose IP address, source port, destination interface, the information of serial number, and
With four-tuple 1: source IP address, source port, purpose IP address, destination interface and four-tuple 2: purpose IP address, destination interface, source
IP address, source port, indicate the both direction that TCP connects respectively, then by the application layer data of network packet according to sequence
In the journal file that number sequentially write is corresponding with TCP closure.
Wherein, described Table content includes mail ID, mail header, mail time, mail originator and Email attachment
Number.
In the present embodiment, information pre-processing module 2 arranges Data Dimensionality Reduction unit 21, data identification unit 22 and data
Taxon 23, carries out dimensionality reduction, identifies and classification process, thus realize storing different types of data original information data
In the diverse location of cloud storage resource pool, beneficially information analysis and the display module 4 extraction to corresponding data, improve further
The speed of service of system;The present embodiment value m=7,The speed of service of system improves 1.5%.
Application scenarios 5:
A kind of charging device for expressway that can reduce labor workload as shown in Figure 1, including the first displacement sensor 100,
Second displacement sensor 200, cloud network 300, the railing 500 driven by motor 400, master controller 600, wireless transceiver 700,
Fee-collector PC800 and display screen 900;Described first displacement sensor 100 is arranged in charge station, be used for sensing vehicle enter or
Person leaves charge station;Described second displacement sensor 200 is arranged on railing 500, for detecting the position of railing 500;Described
Master controller 600 is connected with motor 400, wireless transceiver 700 respectively, and described wireless transceiver 700 is connected with cloud network 300;
When vehicle enters charge station, the first displacement sensor 100 has sensed that vehicle enters, and master controller 600 controls motor 400 certainly
Dynamic put down railing 500, when the second displacement sensor 200 sense railing 500 transfer put in place time, master controller 600 automatically by
Wireless transceiver 700 transfers relevant charging information from cloud network 300 and display is supplied to car owner on display screen 900, has charged
After finishing, fee-collector is confirmed by fee-collector PC800, and railing 500 lifts automatically.
The present invention is by arranging the parts such as the first induction apparatus, the second induction apparatus, it is achieved that the automatization of vehicle enter and from
Open, and maloperation is less, and the task of fee-collector is only to be responsible for charge and confirm on PC, greatly reduces manual working
Amount.
Preferably, described first displacement sensor 100 and the second displacement sensor 200 are infrared displacement induction apparatus.
Preferably, described master controller 600 is single-chip microcomputer.
Preferably, as in figure 2 it is shown, also include secure visual system, for described cloud network is carried out visual peace
Full monitoring, it includes that the information data being sequentially connected with excavates module 1, information pre-processing module 2, information storage module 3 and information
Analyze and display module 4;
Described information data excavates module 1, former for obtaining by the way of capturing network packet in LAN
Beginning information data, described original information data includes that between IP, sensitive information sends detection data, mail-detection daily record data and divides
Three kinds of data types of cloth Denial of Service attack data;
Described information pre-processing module 2, for original information data carries out Data Dimensionality Reduction, identify and classify pretreatment;
Described information storage module 3, is used for pretreated information data storing to the corresponding position of cloud storage resource pool
In putting;
Described information analysis and display module 4, for realizing the extraction of information, analyzing and show, it includes that mail comes and goes
Relation analysis shows that submodule 41, daily record number of times distributional analysis show that between submodule 42, IP, information sends relation analysis displaying
Module 43, sensitivity email relaying path analysis and displaying submodule 44 and distributed denial of service attack data analysis are sub with displaying
Module 45, particularly as follows:
(1) submodule 41 is shown in mail contact relation analysis, for the mail-detection day of storage in cloud storage resource pool
Will data carry out extracting, analyze, process, and show a certain specify the time period in the sensitive mail contact relation that detects;Described
Mail contact relation analysis shows that submodule 41 enables users to interact with interface by the calendar on design optional date, uses
Family can arbitrarily select the time period to be checked, the following operation of concrete execution:
The time period selected according to user, the data in cloud storage resource pool are chosen by system, after choosing data
With the form of dictionary, data are stored, through data being analyzed process, according to the transmitting-receiving corresponding relation of sensitive mail
Generate corresponding matrix data model;Subsequently, by the form of chord figure, the transmitting-receiving of mail sensitive in the selected time period is closed
System carries out visual presentation, and each different mailboxes are distributed in circle around, show email address at circular outside profile, if
Having the transmission relation of sensitive information between different mailboxes, just do ribbon lines between two mailboxes, lines are thick
One side represents the sender of mail, and the thin side of lines represents the recipient of mail;
(2) submodule 42 is shown in the distributional analysis of daily record number of times, for entering according to time period and the daily record quantity that detects
Row classification and statistics, and show by the form of dendrogram, particularly as follows:
(2-1) log data set W of reception is divided into n time subset, i.e. W={W1, W2 according to the time period ...,
Wj ..., Wn};
(2-2) be manually set m daily record quantitative levels, by each time subset Wj divide m level subset, i.e. W1j,
W2j ..., Wij ..., Wmj, wherein the span of m is [4,8];
(2-3) with log data set W as root, Wj is ground floor node, and Wij is second layer joint structure tree TW;
(2-5) calculating the value of each node in tree TW, wherein the value of leaf node is the value of this data element, non-
The value of leaf node is equal to the value sum of all child nodes of its lower floor, and so far log data set W has been configured to a tree-shaped
Data structure;
(2-6) dendrogram that the tree data structure of generation is mapped as on two dimensional surface;
(3) between IP, information sends relation analysis displaying submodule 43, for being pointed to cloud storage resource pool relevant position
Between IP sensitive information send detection data carry out extracting, analyze, statistical disposition, by visual presentation form and interface alternation exhibition
Sensitive information between IP different in showing certain period of time sends incidence relation;Between described IP, information sends relation analysis displaying
Submodule 43 uses the time period to select mechanism and scatterplot layout exhibition method, uses joint form presentation-entity, and lines represent real
With size of node, contact between body, represents that between IP, information sends the degree of strength of incidence relation, according to click thing
Part selectively carries out level displaying;Mouse-over there will be the details of correspondent entity, described detailed letter on node
Breath includes that ID, discovery time, click entity will select all IP related with selected node, and only display should
Sub-network figure, the most also shows its corresponding relation sending information with the form of word;It is provided with search mechanisms, user simultaneously
The IP related information that a certain IP selects to want to check can be inputted;
(4) sensitive email relaying path analysis and displaying submodule 44, for by analyzing and processing statistics mail-detection day
Detection data in will data and email relaying relation, show the road that a certain specific mail is forwarded between different mailboxes
Footpath, particularly as follows:
First, user inputs the key word contained by mail header to be searched for or mail header, system in search box
According to key word, mail header all of in mail record data is carried out fuzzy matching retrieval, if not retrieving defeated with user
Enter the mail matched, then send information reminding user and re-enter;If being successfully retrieved relative recording, result just will be retrieved
Showing user with the form of Table content, be that the title of each mail adds Cl ick event simultaneously, user clicks on target postal
The title of part, backstage again carries out retrieval coupling, finds the forwarding record of this mail according to mail selected by user to mail record,
And the article receiving and sending people every time forwarded is carried out statistic record with the form of dictionary, the data required for structure visual presentation;?
After, show that the forward-path of mail is presented to user and provides interactive function with the form of a stacking dendrogram, if certain postal
Case is afterbody recipient, then the summit of tree diagram is hollow display, if this email relaying is also given additionally by this mailbox
One or several mailboxes, then the tree diagram node representing this mailbox is set to solid;
(5) distributed denial of service attack data analysis with show submodule 45, be used for extracting, analyze and show distributed
Denial of Service attack data, particularly as follows:
1) distributed denial of service attack data analysis and displaying submodule 45 are from the relevant position of cloud storage resource pool
Extracting distributed denial of service attack data, use Hash table to store, in Hash table, keyword uses character string forms, word
Symbol string forms by source IP, port numbers and according to the time label three selected by the time interval of user's setting, appoints in these three
Anticipating when a newly-built element occurs different and newly-built element will be inserted in Hash table, each element is in the future graphical
Being all a node in expression, the relation representing and being connected between main frame, the value that in Hash table, keyword is corresponding represents this time
Connect the data total amount in communication activity;
2) calculate the coordinate figure of all nodes, and then the point with coordinate information is drawn, and according to different demands
Carry out time interval, the adjustment of unit radius parameter that figure shows, the principle followed when wherein drawing is: host node and in
Line between heart node represents the size of amount of communication data in time interval, maps according to certain coefficient, and communicate number
Representing according to amount different colours, the expression amount of communication data that color is red is bigger;Host node is made up of some concentric circulars, face
The contrast intensity of color represents the port number related in this connection.
In the present embodiment, utilize visual technology, be directed in network security detecting system in the network captured quick
Sense information type and transmission situation etc. carry out visual displaying, enter network security detection data from five different angles
Row is analyzed and shows, accurate, comprehensive and facilitate management personnel to make corresponding to judge and decision-making;The distributed refusal clothes arranged
Business is attacked data analysis and shows that submodule 45 can carry out various dimensions to distributed denial of service attack pattern and show, and according to
The adjustment of the different unit radius parameters that demand carries out time interval, figure shows, improves the performance that user is mutual.
Preferably, described information pre-processing module 2 includes Data Dimensionality Reduction unit 21, data identification unit 22 and data classification
Unit 23, particularly as follows:
(1) Data Dimensionality Reduction unit 21, for use the PCA of improvement eliminate between original information data superfluous
Remaining, reduce the dimension of original information data, the PCA of described improvement is:
1) N bar original information data to be analyzed is mentioned, as matrix X=[x1,x2,…,xN], wherein xiBe i-th former
Beginning information data;
2) meansigma methods of N bar original information data is solved:
3) the covariance matrix A of N bar original information data is solved:
4) according to the eigenvalue problem calculating main component element of covariance matrix A:
Aδi=μiδi
Wherein μi, δiIt is respectively eigenvalue and the characteristic of correspondence vector of A;
5) according to given precision ρ, by numerical computation method, front M eigenvalue of maximum is solved:
Wherein, the span of M is
6) front M eigenvalue of maximum and characteristic of correspondence vector, order are taken
Φ=[δ1,δ2,…,δM], Γ=diag (μ1,μ2,…,μM)
Then there is A Φ=Φ Γ;
7) the new matrix Y=Φ of low-dimensional vector composition is calculatedTX;
(2) data identification unit 22, for the original information data after reducing dimension is identified detection, remove not phase
The information data closed, obtains relevant information data;
(3) data sorting unit 23, for classifying according to data type to relevant information data.Take m=8,
Wherein, described data identification unit 22 includes being identified distributed denial of service attack data, particularly as follows:
1) the K bar original information data matrix after dimensionality reduction is set as Y '=ΦTX ', wherein X '=[x1,x2,…,xK], xj∈
X ', selection Db3 small echo is as analysis wavelet, and selects maximum decomposition scale, uses decomposition algorithm to carry out wavelet decomposition Y ' and obtains
To matrix of wavelet coefficients, when j≤out to out, from matrix of wavelet coefficients, extract high frequency coefficient, calculate the variance of little coefficient
After Ψ, and according to [j, log2Ψ] fitting a straight line tries to achieve slope k, thus solves the self similar parameter Hurst value of network traffics
H:
H=(k-1)/2
2) the Hurst changing value Δ H=H the most in the same time tried to achieve by analysist-Ht-1, set threshold T, if Δ H >
T, it is determined that distributed denial of service attack occurs, preserves corresponding original information data;If Δ H≤T, it is determined that distributed refusal takes
Business is attacked and is not sent, and removes corresponding original information data.
Wherein, the transmitting-receiving corresponding relation of described mail is obtained by the TCP closure obtaining mail, first passes through parsing
The network packet obtained, obtains including source IP address, purpose IP address, source port, destination interface, the information of serial number, and
With four-tuple 1: source IP address, source port, purpose IP address, destination interface and four-tuple 2: purpose IP address, destination interface, source
IP address, source port, indicate the both direction that TCP connects respectively, then by the application layer data of network packet according to sequence
In the journal file that number sequentially write is corresponding with TCP closure.
Wherein, described Table content includes mail ID, mail header, mail time, mail originator and Email attachment
Number.
In the present embodiment, information pre-processing module 2 arranges Data Dimensionality Reduction unit 21, data identification unit 22 and data
Taxon 23, carries out dimensionality reduction, identifies and classification process, thus realize storing different types of data original information data
In the diverse location of cloud storage resource pool, beneficially information analysis and the display module 4 extraction to corresponding data, improve further
The speed of service of system;The present embodiment value m=8,The speed of service of system improves 1.4%.
The foregoing is only the preferred embodiments of the present invention, be not limited to the present invention, for the skill of this area
For art personnel, the present invention can have various modifications and variations.All within the spirit and principles in the present invention, that is made any repaiies
Change, equivalent, improvement etc., should be included within the scope of the present invention.
Claims (3)
1. can reduce a charging device for expressway for labor workload, it is characterized in that, including the first displacement sensor, the second displacement
Induction apparatus, cloud network, by motor-driven railing, master controller, wireless transceiver, fee-collector PC and display screen;Described first
Displacement sensor is arranged in charge station, is used for sensing the into or out charge station of vehicle;Described second displacement sensor peace
It is contained on railing, for detecting the position of railing;Described master controller is connected with motor, wireless transceiver respectively, described wireless
Transceiver is connected with cloud network;When vehicle enters charge station, the first displacement sensor has sensed that vehicle enters, master controller
Control motor automatically put down railing, when the second displacement sensor sense railing transfer put in place time, master controller is automatically by nothing
Line transceiver transfers relevant charging information from cloud network and display is supplied to car owner on a display screen, and after charge, fee-collector is led to
Crossing fee-collector PC to confirm, railing lifts automatically.
A kind of charging device for expressway that can reduce labor workload the most according to claim 1, is characterized in that, described first
Displacement sensor and the second displacement sensor are infrared displacement induction apparatus.
A kind of charging device for expressway that can reduce labor workload the most according to claim 2, described master controller is single
Sheet machine.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201610561862.0A CN106228623A (en) | 2016-07-14 | 2016-07-14 | A kind of charging device for expressway that can reduce labor workload |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201610561862.0A CN106228623A (en) | 2016-07-14 | 2016-07-14 | A kind of charging device for expressway that can reduce labor workload |
Publications (1)
Publication Number | Publication Date |
---|---|
CN106228623A true CN106228623A (en) | 2016-12-14 |
Family
ID=57520509
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201610561862.0A Withdrawn CN106228623A (en) | 2016-07-14 | 2016-07-14 | A kind of charging device for expressway that can reduce labor workload |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN106228623A (en) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN113345146A (en) * | 2021-05-28 | 2021-09-03 | 宁波智想科技有限公司 | Intelligent gate and use method thereof |
-
2016
- 2016-07-14 CN CN201610561862.0A patent/CN106228623A/en not_active Withdrawn
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN113345146A (en) * | 2021-05-28 | 2021-09-03 | 宁波智想科技有限公司 | Intelligent gate and use method thereof |
CN113345146B (en) * | 2021-05-28 | 2023-05-23 | 宁波智想科技有限公司 | Intelligent gate and application method thereof |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN106131017B (en) | Cloud computing information security visualization system based on trust computing | |
CN106570477B (en) | Vehicle cab recognition model building method and model recognizing method based on deep learning | |
CN110413707A (en) | The excavation of clique's relationship is cheated in internet and checks method and its system | |
CN110163236A (en) | The training method and device of model, storage medium, electronic device | |
CN108009690B (en) | Ground bus stealing group automatic detection method based on modularity optimization | |
CN112801431B (en) | Enterprise operation risk assessment method and system based on artificial intelligence analysis | |
CN104992142A (en) | Pedestrian recognition method based on combination of depth learning and property learning | |
CN109003318A (en) | A kind of method for processing video frequency, device and storage medium | |
CN106909902A (en) | A kind of remote sensing target detection method based on the notable model of improved stratification | |
CN110532970A (en) | Age-sex's property analysis method, system, equipment and the medium of face 2D image | |
CN109918674B (en) | Case element similarity modeling based case serial-parallel method | |
CN107016042B (en) | Address information verification system based on user position log | |
CN106652621A (en) | Automotive soldier driving subject checking and judging system | |
CN107292302A (en) | Detect the method and system of point of interest in picture | |
CN107292933A (en) | A kind of vehicle color identification method based on BP neural network | |
CN110019703A (en) | Data markers method and device, intelligent answer method and system | |
CN109712324A (en) | A kind of automatic vending machine image-recognizing method, good selling method and vending equipment | |
CN106210066A (en) | A kind of indoor irrigation system of long-range monitoring | |
CN109951499A (en) | A kind of method for detecting abnormality based on network structure feature | |
CN106080510A (en) | A kind of automotive theft proof system based on cloud network | |
CN114626900A (en) | Intelligent management system based on feature recognition and big data analysis | |
CN106228623A (en) | A kind of charging device for expressway that can reduce labor workload | |
CN106840161A (en) | Air navigation aid and device | |
CN106131197A (en) | A kind of multifunctional intellectual cell management system | |
CN106204846A (en) | A kind of high security intelligent door lock system |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
C04 | Withdrawal of patent application after publication (patent law 2001) | ||
WW01 | Invention patent application withdrawn after publication |
Application publication date: 20161214 |