CN108449212A - MAS message delivery methods based on event correlation - Google Patents
MAS message delivery methods based on event correlation Download PDFInfo
- Publication number
- CN108449212A CN108449212A CN201810246227.2A CN201810246227A CN108449212A CN 108449212 A CN108449212 A CN 108449212A CN 201810246227 A CN201810246227 A CN 201810246227A CN 108449212 A CN108449212 A CN 108449212A
- Authority
- CN
- China
- Prior art keywords
- message
- event
- agent
- mas
- event correlation
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/14—Network analysis or design
- H04L41/145—Network analysis or design involving simulating, designing, planning or modelling of a network
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/02—Standardisation; Integration
- H04L41/0213—Standardised network management protocols, e.g. simple network management protocol [SNMP]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/069—Management of faults, events, alarms or notifications using logs of notifications; Post-processing of notifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0805—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters by checking availability
- H04L43/0811—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters by checking availability by checking connectivity
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Environmental & Geological Engineering (AREA)
- Computer And Data Communications (AREA)
- Debugging And Monitoring (AREA)
Abstract
The invention discloses a kind of MAS message delivery methods based on event correlation, specifically：First, the message model based on MAS is established, message, event and event category in MAS is defined, provides Message Processing flow.Then, message is formatted and is classified, establish the event correlation between message.According to event correlation mechanism, message is transmitted.This method is applied in Large Information Systems, the MAS message delivery methods based on event correlation are demonstrated.The result shows that this method can ensure efficiently and accurately to carry out message transmission between Agent.In addition, it can extract dependent event from chaotic message, and the feedback to MAS operating statuses is provided, quickly position MAS failures, stablizing O＆M for information system security provides support.
Description
Technical field
The present invention relates to a kind of message delivery method, specifically a kind of MAS message delivery methods based on event correlation.
Background technology
MAS by multiple there is the logically independent agent for ability of making decisions on one's own to constitute.Each agent has certain lead to
Letter and sensing capability can adjust the operating status of oneself by information exchange, realize global optimization.Due to the distribution of problem
Property, complexity and correlation, the accuracy and efficiency of the message delivery method between Agent generates decision to the performance of MAS systems
The influence of property.MAS has a wide range of applications in engineering field, and communication mechanism is not only the basic support of MAS systems design,
It is one of the key element of decision systems overall performance.
Currently, in MAS communication delays, communication quality and acts on behalf of the related directions such as interactive communication and have been carried out and largely grind
Study carefully..Researcher proposes various faults event detection mechanism.For example, the Fault Locating Method of information system, calculates information system
Health degree computational methods of uniting etc..With the raising of the large-scale distributed information system complexity based on MAS, Agent is produced daily
Raw magnanimity message.These magnanimity message artificially screen by system O＆M engineer and bring huge workload, almost can not
It can complete.Therefore, there is an urgent need for a kind of intelligent event judgment mechanisms to carry out the analysis system operating status from magnanimity information, quickly positions
The system failure, to realize the safety and stability O＆M of system.
Invention content
The application provides a kind of MAS message delivery methods based on event correlation, reduces the large-scale information system based on MAS
The transinformation of system improves message efficiency of transmission and fault diagnosis speed.
To achieve the above object, the technical solution of the application is：A kind of MAS message delivery methods based on event correlation,
It comprises the concrete steps that：
First, the message model based on MAS is defined；
Then, message is formatted and is classified, establish the event correlation between message；
Finally, according to event correlation mechanism, message is transmitted.
Further, the message model based on MAS, specifically includes：
1) journal file：Journal file extraction module is from application program and syslog file (such as system log, network day
Will, application log etc.) in extract information, the operating status of MAS systems is fed back；
2) SNMP events：SNMP event interception modules capture the event of SNMP types, to monitor the net for being connected to Agent
Network connection state；
3) message that event analysis and management Agent are generated：Disappeared by what the API of event analysis and management Agent was generated
Breath；
4) threshold event：When the measured value of supervision object is more than the threshold value of configuration, event analysis and management Agent can be generated
Message, to transmit the information；
5) application program：The message that all application programs for message being written journal file generate.
Further, message is formatted and is classified, establish the event correlation between message, the specific steps are：
Step 1：Message generates：Message is created on controlled device Agent；Event occurs on Agent, to create one
Message.Such as：The events such as disk storage space deficiency.
Step2：Message is grouped：According to application program, object type or function, event analysis and management Agent will come from
The message in a variety of related news sources is integrated into the group of logic association, provides one group of managed object or the status information of service；Such as：
Message groups BACKUP is to the collection from source (backup application and magnetic tape station) and the relevant all message of system backup.
Step3：Message screening：To ensure that important information is clearly shown, use condition filter carried out message
Filter, the message for excluding repetition message or matching with exclusion condition；The message being excluded is classified as mismatch message, other message
It is classified as matching message；
Step4：Message stores：It will be in message storage to local daily record；
Setp5：It is message formatting：Matching message is formatted, with the property or severity level of response message；Example
Such as, emergency message is indicated with red.
Step6：Mismatch Message Processing：It is undefined message to mismatch message；It is brought with log file analysis message
Agent development trends, accordingly to message carry out check filtering or track managed object state model；
Step7：Message is shown：Message is shown on message viewer, and the serious of response message is marked using different colours
Rank, and external notification service can be started；
Step8：Message response：Message viewer is checked every message by O＆M engineer as starting point, and is made
Response；
Step9：Message archive：After message is confirmed or handled by O＆M engineer, it is just from movable message viewer
Middle removal, in storage to historical data base.
Further, message source, which is multiple managed object Agent or incident management Agent, each managed object, to give birth to
At N number of message, i.e., it is 1 between message source and message：The relationship of N；Message is grouped and is filtered according to messagemanaging process,
Message with identical function or management and control same object is classified as same group, and message groups incoming event is associated with Agent；Each
There are message groups one or more message, event periodically to call event correlation Agent；
Association Agent judges the event correlation between message；One or more message can reason out the same event,
Then message has event correlation.Meanwhile the event reasoned out is known as correlating event.
All message are copied in message viewer show first by event correlation Agent, and correlating event is sent
It is shown to event browser；Then, not associated message or may be turned with the message of multiple event correlations
It moves on in message flow, other have utilized and have judged that unworthy message is abandoned by event correlation Agent；
Further, it periodically calls event correlation Agent to carry out event correlation judgement to the message in message flow, and will close
Connection event is sent to event browser and is shown, by using and judge that unworthy message is abandoned.It assigns by pipe
Node calls the permission of incident management Agent, can further increase the efficiency of message transmission, reduce message management Agent and
The load of event correlation Agent and Internet traffic.The incident management Agent permission for calling event correlation Agent is assigned, it can be with
The similar or related news from different nodes are filtered, the accuracy that event judges is improved.
The application's has the beneficial effect that：The application reduces the network pressure of message transmission, improves message efficiency of transmission and biography
Defeated accuracy rate improves system fault diagnosis speed, reduces the workload of O＆M engineer.
Description of the drawings
Fig. 1 is message processing flow-chart；
Fig. 2 is event correlation methodology fundamental diagram.
Specific implementation mode
The present embodiment provides a kind of MAS message delivery methods based on event correlation, comprise the concrete steps that：
First, the message model based on MAS is defined；
Then, message is formatted and is classified, establish the event correlation between message；
Finally, according to event correlation mechanism, message is transmitted.
The definition of message：Definition event is specific failure or accident in MAS.In general, event represents Agent state changes
Or threshold variation.For example, when storage device dual-host backup is arranged, state can change.Similarly, when system is available interior
When depositing less than specified level, threshold value can also change.
Message is the block of information of structuring triggered by event.For each event, a piece of news can be created.In MAS
Event analysis and management Agent be responsible for interception event, create message, O＆M engineer judges whether need according to the property of event
Carry out manual intervention or correction.
Event analysis and management Agent can intercept the message in a variety of sources, be specifically divided into following five class：
1) journal file
Journal file extraction module is from application program and syslog file (such as system log, network log, application program
Daily record etc.) in extract information, the operating status of MAS systems is fed back.
2) SNMP events
SNMP event interception modules capture the event of SNMP types, to monitor the network connection status for being connected to Agent.
3) message that event analysis and management Agent are generated
The message generated by the API of event analysis and management Agent.
4) threshold event
When the measured value of supervision object is more than the threshold value of configuration, event analysis and management Agent can generate message, with transmission
The information.
5) application program
The message that all application programs for message being written journal file generate.
The Message management based on message category is established, Message Processing flow is as shown in Figure 1：
Step 1：Message generates.Message is created on controlled device Agent.Event occurs on Agent, to create one
Message.Such as：The events such as disk storage space deficiency.
Step2：Message is grouped.According to application program, object type or function, event analysis and management Agent will come from
The message in a variety of related news sources is integrated into the group of logic association, provides one group of managed object or the status information of service.Such as：
Message groups BACKUP is to the collection from source (backup application and magnetic tape station) and the relevant all message of system backup.
Step3：Message screening：To ensure that important information is clearly shown, use condition filter carried out message
Filter, the message for excluding repetition message or matching with exclusion condition.The message being excluded is classified as mismatch message, other message
It is classified as matching message.
Step4：Message stores.It will be in message storage to local daily record.
Setp5：It is message formatting.Matching message is formatted, with the property or severity level of response message.Example
Such as, emergency message is indicated with red.
Step6：Mismatch Message Processing.It is undefined message to mismatch message.It is brought with log file analysis message
Agent development trends, accordingly to message carry out check filtering or track managed object state model.
Step7：Message is shown.Message is shown on message viewer, and the serious of response message is marked using different colours
Rank, and external notification service can be started, as short message, mail or automatic calling system notify system O＆M engineer.
Step8：Message response.Message viewer is checked every message by O＆M engineer as starting point, and is made
Response.O＆M engineer obtains all relevant informations, including all applicabilities and state for being pre-configured corrective action, with
And work out the service of these actions.
Step9：Message archive.After message is confirmed or handled by O＆M engineer, it is just from movable message viewer
Middle removal, in storage to historical data base.
Event correlation message mechanism:The main body of event correlation is Managed node Agent or incident management Agent, and event is closed
For the message that connection server is generated the condition of exemplary message template definition as input, it is clear that generation correlating event is sent to event
Look at device.Its operation principle is as shown in Figure 2.
Message source, which is multiple managed object Agent or incident management Agent, each managed object, may generate N number of message,
It is 1 i.e. between message source and message：The relationship of N.Message is grouped and is filtered according to messagemanaging process, there is identical work(
The message of energy or management and control same object is classified as same group, and message groups incoming event is associated with Agent.Each message groups have
One or more message, event correlation Agent judge the event correlation between message.One or more message can be reasoned out
The same event, then message is with event correlation.Meanwhile the event reasoned out is known as correlating event.For example, passing through one
The network ping of server is obstructed, and application program is without response, it can be determined that server is in delay machine state.Then message " network
Ping is obstructed " and message " application program without response " be with event " server be in delay machine " there is relevance, event " to service
Device is in delay machine " it is correlating event.
All message are copied in message viewer show first by event correlation Agent, and correlating event is sent
It is shown to event browser.Then, not associated message or may be turned with the message of multiple event correlations
It moves on in message flow, other have utilized and have judged that unworthy message is abandoned by event correlation Agent.Message replicates display can
Postpone or lose in association process to avoid the high message of severity, improves the accuracy of message transmission, this design pair event
Barrier diagnosis is particularly important；The purpose of message transfers to message flow is to improve work to reduce the workload of event correlation Agent
Efficiency.
It periodically calls event correlation Agent to carry out event correlation judgement the Agent in message flow, and correlating event is sent out
Event browser is given to be shown, by using and judge that unworthy message is abandoned.
The permission that Managed node calls incident management Agent is assigned, the efficiency of message transmission can be further increased, is reduced
The load of message management Agent and event correlation Agent and Internet traffic.It assigns incident management Agent and calls event correlation
The permission of Agent can filter the similar or related news from different nodes, improve the accuracy that event judges.
The message delivery method that the application proposes is applied in Large Information Systems.Table 1 shows real-time messages
And its process.Table 2 shows event correlation result.
1 real-time messages of Table and its processing procedure
Tab2 event correlations
Message management Agent is formatted and blocking message, display message alert information, as shown in table 1.It can be with from table 2
Find out, incident management Agent is according to event related news mechanism by message relating to particular event.Message 3-8 is merged into one
Event, the then rank of event, grouping and alarm behavior change.Message 2 does not have after the condition coupling of message source module
Have into any message flow.After matching message source, other message are handled with event correlation module.From the above analysis
As can be seen that may have a power failure due to server S VR1, process A occupies CPU and causes to generate bulk information and alert thing for a long time thereon
Part.
In order to test information transmitting methods proposed by the invention, different number is deployed on certain Large Information Systems
Agent.Assuming that transmitting 1,000,000 message in systems, the response time is as shown in table 3.Response time refers to generating from message
To the time of display on a terminal screen.Experiment shows that more Agent can be obtained when handling the message of identical quantity
The faster response time.This is because message can be filtered and handled by multiple Agent, usually more than 90% message is filtered
Fall.From table 3 it can be seen that the MAS message delivery methods based on event correlation proposed have higher efficiency of transmission, it is suitble to
Message is transmitted in the Large Information Systems of multi-Agent.
3 response time of table
The application establishes the message model based on MAS, defines event, message and the message category in MAS, it is proposed that
Message Processing flow in MAS.On this basis, it is proposed that a kind of event correlation mechanism based on MAS, the mechanism is from by pipe pair
As Agent or incident management Agent generation message, and sends a message to incoming event and be associated with Agent to identify dependent event.
Event correlation Agent has the function of checking that correlating event, message are replicated and shifted.Judge that the ability of correlating event makes operator
MAS operating statuses can be rapidly and accurately determined from magnanimity message.The copy function ensure that the reliability of message, reduce
Delay and packet loss.Message transfers function is may to be turned not associated message or with the message of multiple event correlations
It moves on in message flow, to reduce the pressure of load and the network communication of event correlation Agent, improves information transfer efficiency.Most
Afterwards, the MAS message delivery methods proposed in this paper based on event correlation are verified in Large Information Systems.Experimental result
Show that proposed message delivery method can efficiently and accurately transmit information, timely diagnostic system failure.In addition, from a large amount of
Identify that correlating event can greatly improve MAS service quality in message.
The above, the only specific implementation mode in the present invention, but scope of protection of the present invention is not limited thereto, appoints
What is familiar with the people of the technology within the technical scope disclosed by the invention, it will be appreciated that expects transforms or replaces, and should all cover
Within the scope of the present invention, therefore, the scope of protection of the invention shall be subject to the scope of protection specified in the patent claim.
Claims (5)
1. a kind of MAS message delivery methods based on event correlation, which is characterized in that comprise the concrete steps that：
First, the message model based on MAS is established；
Then, message is formatted and is classified, establish the event correlation between message；
Finally, according to event correlation mechanism, message is transmitted.
2. the MAS message delivery methods based on event correlation according to claim 1, which is characterized in that the message based on MAS
Model specifically includes：
1) event is defined as the specific fault in MAS or accident；Event represents variation or the changes of threshold of Agent states；
2) message is the block of information of structuring triggered by event；
3) message category：
(1) journal file：Abstraction module extracts information from application program and syslog file, the operation to MAS systems
State is fed back；
(2) SNMP events：Blocking module captures the event of SNMP types, to monitor the network connection status for being connected to Agent；
(3) the message that event analysis and management Agent are generated：The message generated by the API of event analysis and management Agent；
(4) threshold event：When the measured value of supervision object is more than the threshold value of configuration, event analysis and management Agent can be generated and be disappeared
Breath, to transmit the information；
(5) application program：The message that all application programs for message being written journal file generate.
3. the MAS message delivery methods based on event correlation according to claim 1, which is characterized in that carry out lattice to message
The event correlation between message is established in formula and classification, the specific steps are：
Step 1：Message generates：Message is created on controlled device Agent；
Step2：Message is grouped：According to application program, object type or function, event analysis and management Agent will come from a variety of
The message in related news source is integrated into the group of logic association, provides one group of managed object or the status information of service；
Step3：Message screening：Use condition filter is filtered message, exclude repetition message or with exclusion condition phase
The message matched；The message being excluded is classified as mismatch message, other message are classified as matching message；
Step4：Message stores：It will be in message storage to local daily record；
Setp5：It is message formatting：Matching message is formatted, with the property or severity level of response message；
Step6：Mismatch Message Processing：It is undefined message to mismatch message；It is brought with log file analysis message
Agent development trends carry out check filtering to message accordingly or track the state model of managed object；
Step7：Message is shown：Message is shown on message viewer, and the severity level of response message is marked using different colours,
And external notification service can be started；
Step8：Message response：Message viewer is checked every message by O＆M engineer as starting point, and is responded；
Step9：Message archive：After message is confirmed or handled by O＆M engineer, it is just moved from movable message viewer
It removes, in storage to historical data base.
4. the MAS message delivery methods based on event correlation according to claim 1, which is characterized in that message source is multiple
Managed object Agent or incident management Agent, each managed object may generate N number of message, i.e. message source is directly with message
1：The relationship of N；Message is grouped and is filtered according to messagemanaging process, with identical function or management and control same object
Message is classified as same group, and message groups incoming event is associated with Agent；Each message groups have one or more message, event
Association Agent judges the event correlation between message；One or more message can reason out the same event, then message has
There is event correlation.Meanwhile the event reasoned out is known as correlating event；
All message are copied in message viewer show first by event correlation Agent, and correlating event is sent to thing
Part browser is shown；Then, it not associated message or may be transferred to the message of multiple event correlations
In message flow, other have utilized and have judged that unworthy message is abandoned by event correlation Agent.
5. the MAS message delivery methods based on event correlation according to claim 4, which is characterized in that periodically call event
It is associated with Agent and event correlation judgement is carried out to the message in message flow, and correlating event is sent to event browser and is shown
Show, by using and judge that unworthy message is abandoned.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810246227.2A CN108449212B (en) | 2018-03-23 | 2018-03-23 | MAS message transmission method based on event association |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810246227.2A CN108449212B (en) | 2018-03-23 | 2018-03-23 | MAS message transmission method based on event association |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN108449212A true CN108449212A (en) | 2018-08-24 |
| CN108449212B CN108449212B (en) | 2021-01-12 |
Family
ID=63196874
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201810246227.2A Active CN108449212B (en) | 2018-03-23 | 2018-03-23 | MAS message transmission method based on event association |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN108449212B (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109714387A (en) * | 2018-11-16 | 2019-05-03 | 国电南瑞南京控制系统有限公司 | A kind of operation management system alarm method for subscribing subscribes to terminal, issue terminal and system |
| CN113505127A (en) * | 2021-06-22 | 2021-10-15 | 侍意(厦门)网络信息技术有限公司 | Storage structure and method for data of related objects, retrieval and visual display method |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101398906A (en) * | 2008-10-10 | 2009-04-01 | 华南理工大学 | RFID middleware based on agent and equipment management method thereof |
| CN101477339A (en) * | 2009-01-22 | 2009-07-08 | 江苏省特种设备安全监督检验研究院 | Recreation facility intelligent monitoring apparatus based on multi-AGENT technology |
| US20110258044A1 (en) * | 2004-04-28 | 2011-10-20 | Agnik, Llc | Onboard vehicle data mining, social networking, and pattern-based advertisement |
| CN107045655A (en) * | 2016-12-07 | 2017-08-15 | 三峡大学 | Wolf pack clan strategy process based on the random consistent game of multiple agent and virtual generating clan |
| CN107678280A (en) * | 2017-10-11 | 2018-02-09 | 北京理工大学 | A kind of forecast Control Algorithm of the multi-agent system based on event trigger mechanism |
-
2018
- 2018-03-23 CN CN201810246227.2A patent/CN108449212B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20110258044A1 (en) * | 2004-04-28 | 2011-10-20 | Agnik, Llc | Onboard vehicle data mining, social networking, and pattern-based advertisement |
| CN101398906A (en) * | 2008-10-10 | 2009-04-01 | 华南理工大学 | RFID middleware based on agent and equipment management method thereof |
| CN101477339A (en) * | 2009-01-22 | 2009-07-08 | 江苏省特种设备安全监督检验研究院 | Recreation facility intelligent monitoring apparatus based on multi-AGENT technology |
| CN107045655A (en) * | 2016-12-07 | 2017-08-15 | 三峡大学 | Wolf pack clan strategy process based on the random consistent game of multiple agent and virtual generating clan |
| CN107678280A (en) * | 2017-10-11 | 2018-02-09 | 北京理工大学 | A kind of forecast Control Algorithm of the multi-agent system based on event trigger mechanism |
Non-Patent Citations (1)
| Title |
|---|
| 段立明: "面向智能监控的复杂多自主体系统设计与实现", 《小型微型计算机系统》 * |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109714387A (en) * | 2018-11-16 | 2019-05-03 | 国电南瑞南京控制系统有限公司 | A kind of operation management system alarm method for subscribing subscribes to terminal, issue terminal and system |
| CN113505127A (en) * | 2021-06-22 | 2021-10-15 | 侍意(厦门)网络信息技术有限公司 | Storage structure and method for data of related objects, retrieval and visual display method |
| CN113505127B (en) * | 2021-06-22 | 2024-06-18 | 侍意(厦门)网络信息技术有限公司 | Storage structure and method for data with associated objects, retrieval and visual display method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN108449212B (en) | 2021-01-12 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103001811B (en) | Fault locating method and device | |
| Yusheng et al. | Intrusion detection of industrial control system based on Modbus TCP protocol | |
| JP2016163352A (en) | Anomaly detection in industrial communications networks, anomaly detection system, and methods for performing anomaly detection | |
| CN105159964A (en) | Log monitoring method and system | |
| CN103810076B (en) | The monitoring method and device of data duplication | |
| Ren et al. | Edmand: Edge-based multi-level anomaly detection for scada networks | |
| WO2017080161A1 (en) | Alarm information processing method and device in cloud computing | |
| CN114125083B (en) | Industrial network distributed data acquisition method and device, electronic equipment and medium | |
| CN107947998A (en) | A kind of real-time monitoring system based on application system | |
| CN112468592A (en) | Terminal online state detection method and system based on electric power information acquisition | |
| CN107547228A (en) | A kind of safe operation management platform based on big data realizes framework | |
| CN109164720A (en) | Injection molding machine group of planes remote monitoring system and method based on IIoT | |
| CN106936780B (en) | A kind of method for monitoring network and system | |
| CN108449212A (en) | MAS message delivery methods based on event correlation | |
| CN107943670A (en) | A kind of ups power equipment monitoring system | |
| CN116257021A (en) | Intelligent network security situation monitoring and early warning platform for industrial control system | |
| CN109309577A (en) | Alert processing method, apparatus and system for SDN network | |
| CN107733941A (en) | A kind of realization method and system of the data acquisition platform based on big data | |
| CN114006940A (en) | Building integrated management information pushing method, system, computer and storage medium | |
| CN117614738A (en) | Industrial intrusion monitoring system | |
| CN108248641A (en) | A kind of urban track traffic data processing method and device | |
| CN110278100B (en) | Early warning processing method and device, electronic equipment and storage medium | |
| Kolosok et al. | Cyber resilience of SCADA at the level of energy facilities | |
| Cisco | Polling---The Event Generation Process | |
| Cisco | Polling-The Event Generation Process |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |