CN114444096A - Network data storage encryption detection system based on data analysis - Google Patents
Network data storage encryption detection system based on data analysis Download PDFInfo
- Publication number
- CN114444096A CN114444096A CN202210024609.7A CN202210024609A CN114444096A CN 114444096 A CN114444096 A CN 114444096A CN 202210024609 A CN202210024609 A CN 202210024609A CN 114444096 A CN114444096 A CN 114444096A
- Authority
- CN
- China
- Prior art keywords
- node
- analysis
- real
- network
- time
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/602—Providing cryptographic facilities or services
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Bioethics (AREA)
- General Health & Medical Sciences (AREA)
- Computer Hardware Design (AREA)
- Health & Medical Sciences (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Databases & Information Systems (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a network data storage encryption detection system based on data analysis, which relates to the technical field of network data detection and solves the technical problem that the environment and the storage space of data storage cannot be accurately analyzed in the prior art; analyzing the storage environment corresponding to the high-performance node for data storage, and judging the real-time state of the storage environment, so that the accuracy of data storage encryption detection is improved, and the influence of the external environment is reduced; the real-time operation analysis is carried out on the high-performance nodes for data storage, and the data storage operation state of the real-time high-performance nodes is judged, so that the detection efficiency of data storage is improved, and the safety factor of the real-time high-performance nodes can be judged.
Description
Technical Field
The invention relates to the technical field of network data detection, in particular to a network data storage encryption detection system based on data analysis.
Background
The data encryption technology is that information or plaintext is converted into meaningless ciphertext through an encryption key and an encryption function, a receiver restores the ciphertext into the plaintext through a decryption function and a decryption key, and the encryption technology is a basic stone of network security technology, so that the encryption condition of network data needs to be detected in real time in the storage process;
however, in the prior art, the environment and the storage space of data storage cannot be accurately analyzed, so that the detection accuracy of real-time storage cannot be controlled, meanwhile, storage nodes which are unqualified in real-time operation cannot analyze data transmission, so that the efficiency of data transmission is reduced due to unqualified operation, and the safety performance of data storage is reduced;
in view of the above technical drawbacks, a solution is proposed.
Disclosure of Invention
The invention aims to provide a network data storage encryption detection system based on data analysis, which is used for analyzing each sub-node in a network, analyzing the data of each sub-node when the sub-node does not transmit the data, judging the real-time state of each sub-node and improving the high efficiency and the rationality of network data storage; analyzing the storage environment corresponding to the high-performance node for data storage, and judging the real-time state of the storage environment, thereby improving the accuracy of data storage encryption detection, reducing the influence of external environment and improving the authenticity of data; the real-time operation analysis is carried out on the high-performance nodes for data storage, and the data storage operation state of the real-time high-performance nodes is judged, so that the detection efficiency of data storage is improved, and the safety factor of the real-time high-performance nodes can be judged.
The purpose of the invention can be realized by the following technical scheme:
a network data storage encryption detection system based on data analysis comprises a data storage encryption detection platform, wherein a server is arranged in the data storage encryption detection platform and is in communication connection with a network node analysis unit, a storage environment analysis unit, a real-time operation analysis unit and a transmission influence analysis unit;
the data storage encryption detection platform is used for detecting network data storage encryption, analyzing a network and setting i sub-nodes in the network, wherein i is a natural number larger than 1, each sub-node is provided with a data storage space for corresponding data storage in the network, the data transmission of each sub-node needs to correspond to a network key, and the network key is generated after encryption verification when the data transmission access point is connected with the sub-node; the server generates a network node analysis signal and sends the network node analysis signal to the network node analysis unit, and each sub-node in the network is analyzed through the network node analysis unit; the server generates a storage environment analysis signal and sends the storage environment analysis signal to the storage environment analysis unit, and the storage environment analysis unit analyzes the storage environment corresponding to the high-performance node for data storage; the server generates a real-time operation analysis signal and sends the real-time operation analysis signal to the real-time operation analysis unit, and the real-time operation analysis unit carries out real-time operation analysis on the high-performance nodes for data storage; and generating a real-time operation unqualified signal or a real-time operation qualified signal through real-time operation analysis, sending the real-time operation unqualified signal to a transmission influence analysis unit, and performing transmission analysis on the high-performance node corresponding to the real-time operation unqualified signal through the transmission influence analysis unit.
As a preferred embodiment of the present invention, a network node analysis process of the network node analysis unit is as follows:
analyzing sub-nodes in the network in real time, acquiring the maximum storage amount of data corresponding to each sub-node in the network and the times of data loss of each sub-node pair, and respectively marking the maximum storage amount of data corresponding to each sub-node in the network and the times of data loss of each sub-node pair as CCLi and QSCi; acquiring the average data transmission speed of each child node in the network, and marking the average data transmission speed of each child node in the network as PSDi;
analyzing and acquiring each sub-node analysis coefficient Xi in the network, and comparing each sub-node analysis coefficient Xi in the network with a sub-node analysis coefficient threshold value:
if the analysis coefficient Xi of each sub-node in the network exceeds the analysis coefficient threshold of the sub-node, judging that the corresponding sub-node is qualified in analysis, marking the corresponding sub-node as a high-performance node, generating a node analysis qualified signal and sending the node analysis qualified signal and the number of the corresponding high-performance node to a server; and if the analysis coefficient Xi of each sub node in the network does not exceed the analysis coefficient threshold of the sub node, judging that the corresponding sub node is unqualified in analysis, marking the corresponding sub node as a low-performance node, generating a signal of unqualified node analysis, and sending the signal of unqualified node analysis and the number of the corresponding low-performance node to the server.
As a preferred embodiment of the present invention, the storage environment analysis process of the storage environment analysis unit is as follows:
the method comprises the following steps of marking a high-performance node for real-time data storage as an analysis node, collecting the number of data transmission access points corresponding to non-network key connection of the analysis node and the shortest interval duration of connection between the data transmission access points corresponding to the non-network key connection and the analysis node, and comparing the number of the data transmission access points corresponding to the non-network key connection of the analysis node and the shortest interval duration of connection between the data transmission access points corresponding to the non-network key connection and the analysis node with a data transmission access point number threshold and a shortest interval duration threshold respectively:
if the number of the data transmission access points corresponding to the analysis node and connected without the network key exceeds the threshold of the number of the data transmission access points, or the shortest interval time for establishing connection between the data transmission access points corresponding to the data transmission access points and the analysis node does not exceed the threshold of the shortest interval time, determining that the storage environment of the corresponding analysis node is unqualified for analysis, generating an environment high-risk signal and sending the environment high-risk signal and the number of the corresponding analysis node to a server; if the number of the data transmission access points corresponding to the analysis node and connected without the network key does not exceed the data transmission access point number threshold value, and the shortest interval duration of the connection between the data transmission access points corresponding to the data transmission access points connected without the network key and the analysis node exceeds the shortest interval duration threshold value, judging that the storage environment corresponding to the analysis node is qualified for analysis, generating an environment low-risk signal and sending the environment low-risk signal and the number corresponding to the analysis node to the server.
As a preferred embodiment of the present invention, the real-time operation analysis process of the real-time operation analysis unit is as follows:
collecting a high-performance node which is subjected to data storage and is not generated by data transmission to obtain a data transmission access point which is connected with the high-performance node in real time, marking the data transmission access point which is provided with a network key and completes connection as a qualified access point, and marking the data transmission access point which is not provided with the network key and completes connection as an unqualified access point; the method comprises the following steps of collecting the ratio of the number of qualified access points connected with the high-performance node in real time to the number of unqualified access points, simultaneously collecting the time consumption difference value of the repeated connection of the qualified access points of the high-performance node, and comparing the time consumption difference value of the repeated connection of the qualified access points of the high-performance node and the ratio of the number of the qualified access points connected with the high-performance node in real time to the number of the unqualified access points with a repeated connection time consumption threshold value and a number ratio threshold value respectively:
if the time consumption difference value of the repeated connection of the qualified access points of the high-performance nodes exceeds the repeated connection time consumption threshold value, or the ratio of the number of the qualified access points of the real-time connection of the high-performance nodes to the number of the unqualified access points does not exceed the number ratio threshold value, judging that the corresponding high-performance nodes are unqualified in real-time operation analysis, generating an unqualified real-time operation signal and sending the unqualified real-time operation signal and the numbers of the corresponding high-performance nodes to a server;
if the time consumption difference value of the repeated connection of the qualified access points of the high-performance nodes does not exceed the repeated connection time consumption threshold value, and the ratio of the number of the qualified access points of the real-time connection of the high-performance nodes to the number of the unqualified access points exceeds the number ratio threshold value, the corresponding high-performance nodes are judged to be qualified in real-time operation and analysis, a real-time operation qualified signal is generated, and the real-time operation qualified signal and the numbers of the corresponding high-performance nodes are sent to the server.
As a preferred embodiment of the present invention, the transmission influence analyzing process of the transmission influence analyzing unit is as follows:
the method comprises the following steps of carrying out transmission analysis on a high-performance node corresponding to an unqualified signal which runs in real time, acquiring the real-time transmission speed and the transmission data bandwidth per minute of the high-performance node, and comparing the real-time transmission speed and the transmission data bandwidth per minute of the high-performance node with a real-time transmission speed threshold value and a transmission data bandwidth threshold value respectively:
if the real-time transmission speed of the high-performance node exceeds a real-time transmission speed threshold value and the transmission data bandwidth within every minute exceeds a transmission data bandwidth threshold value, judging that the real-time transmission is qualified, generating a current non-influence signal and sending the current non-influence signal and the number of the corresponding high-performance node to a server; if the real-time transmission speed of the high-performance node does not exceed the real-time transmission speed threshold value, or the transmission data bandwidth within every minute does not exceed the transmission data bandwidth threshold value, judging that the real-time transmission is unqualified, generating a current influence signal and sending the current influence signal and the number of the corresponding high-performance node to a server; and after receiving the current influence signal, the server suspends the data transmission corresponding to the high-performance node and sets the data transmission time according to the real-time running state.
Compared with the prior art, the invention has the beneficial effects that:
1. in the invention, each sub-node in the network is analyzed, and when the sub-node does not transmit data, the data analysis is carried out on each sub-node, the real-time state of each sub-node is judged, and the high efficiency and the rationality of network data storage are improved; analyzing the storage environment corresponding to the high-performance node for data storage, and judging the real-time state of the storage environment, thereby improving the accuracy of data storage encryption detection, reducing the influence of external environment and improving the authenticity of data; the real-time operation analysis is carried out on the high-performance nodes for data storage, and the data storage operation state of the real-time high-performance nodes is judged, so that the detection efficiency of data storage is improved, and meanwhile, the safety coefficient of the real-time high-performance nodes can be judged;
2. according to the invention, the transmission analysis is carried out on the high-performance nodes corresponding to the real-time operation unqualified signals, and the real-time transmission state of the high-performance nodes which are unqualified in real-time operation is judged, so that the influence of unqualified real-time operation on the high-performance nodes is analyzed, the risk of data loss is reduced, the data transmission is timely detected, and the influence of unqualified operation on the data transmission efficiency is reduced.
Drawings
In order to facilitate understanding for those skilled in the art, the present invention will be further described with reference to the accompanying drawings.
Fig. 1 is a schematic block diagram of a network data storage encryption detection system based on data analysis according to the present invention.
Detailed Description
The technical solutions of the present invention will be described clearly and completely with reference to the following embodiments, and it should be understood that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Referring to fig. 1, a network data storage encryption detection system based on data analysis includes a data storage encryption detection platform, a server is disposed in the data storage encryption detection platform, and the server is in communication connection with a network node analysis unit, a storage environment analysis unit, a real-time operation analysis unit and a transmission influence analysis unit, wherein the server is in bidirectional communication connection with the network node analysis unit, the storage environment analysis unit, the real-time operation analysis unit and the transmission influence analysis unit;
the data storage encryption detection platform is used for detecting network data storage encryption, analyzing a network and arranging i sub-nodes in the network, wherein i is a natural number larger than 1, each sub-node is provided with a data storage space for corresponding data storage in the network, data transmission of each sub-node needs to correspond to a network key, the network key is generated after encryption verification when a data transmission access point is connected with the sub-node, the data transmission access point is represented as a data transmission terminal, such as intelligent equipment like a mobile phone, a computer and the like, a server generates a network node analysis signal and sends the network node analysis signal to a network node analysis unit, the network node analysis unit is used for analyzing each sub-node in the network, and when the sub-node does not perform data transmission, data analysis is performed on each sub-node, the real-time state of each sub-node is judged, and the high efficiency and rationality of network data storage are improved, the specific network node analysis process is as follows:
analyzing sub-nodes in the network in real time, acquiring the maximum storage amount of data corresponding to each sub-node in the network and the times of data loss of each sub-node pair, and respectively marking the maximum storage amount of data corresponding to each sub-node in the network and the times of data loss of each sub-node pair as CCLi and QSCi; acquiring the average data transmission speed of each child node in the network, and marking the average data transmission speed of each child node in the network as PSDi;
by the formula
Obtaining analysis coefficients Xi of each child node in the network, wherein a1, a2 and a3 are all preset proportionality coefficients, and a1 is more than a2 is more than a3 is more than 0; beta is an error correction factor, and the value of beta is 0.98;
comparing each sub-node analysis coefficient Xi in the network with a sub-node analysis coefficient threshold value:
if the analysis coefficient Xi of each sub-node in the network exceeds the analysis coefficient threshold of the sub-node, judging that the corresponding sub-node is qualified in analysis, marking the corresponding sub-node as a high-performance node, generating a node analysis qualified signal and sending the node analysis qualified signal and the number of the corresponding high-performance node to a server; if the analysis coefficient Xi of each sub node in the network does not exceed the analysis coefficient threshold of the sub node, judging that the corresponding sub node is unqualified in analysis, marking the corresponding sub node as a low-performance node, generating a signal with unqualified node analysis, and sending the signal with unqualified node analysis and the number of the corresponding low-performance node to a server; after receiving the low-performance nodes, the server stores the corresponding low-performance nodes in pause data and repairs the nodes;
the server receives the high performance node after as first-selected storage node with the high performance node, generate storage environment analysis signal simultaneously and with storage environment analysis signal transmission to storage environment analysis unit, storage environment analysis unit is used for carrying out the high performance node of data storage and corresponds storage environment and carry out the analysis, judge the real-time status of storage environment, thereby the accuracy of encrypting the detection to data storage has been improved, external environment's influence has been reduced, the authenticity of data has been improved, concrete storage environment analysis process is as follows:
the method comprises the following steps of marking a high-performance node for real-time data storage as an analysis node, collecting the number of data transmission access points corresponding to non-network key connection of the analysis node and the shortest interval duration of connection between the data transmission access points corresponding to the non-network key connection and the analysis node, and comparing the number of the data transmission access points corresponding to the non-network key connection of the analysis node and the shortest interval duration of connection between the data transmission access points corresponding to the non-network key connection and the analysis node with a data transmission access point number threshold and a shortest interval duration threshold respectively:
if the number of the data transmission access points corresponding to the analysis node and connected without the network key exceeds the threshold of the number of the data transmission access points, or the shortest interval time for establishing connection between the data transmission access points corresponding to the data transmission access points and the analysis node does not exceed the threshold of the shortest interval time, determining that the storage environment of the corresponding analysis node is unqualified for analysis, generating an environment high-risk signal and sending the environment high-risk signal and the number of the corresponding analysis node to a server; if the number of the data transmission access points corresponding to the analysis node and connected without the network key does not exceed the threshold of the number of the data transmission access points, and the shortest interval time length of the connection between the data transmission access points corresponding to the analysis node and the analysis node exceeds the threshold of the shortest interval time length, judging that the storage environment of the corresponding analysis node is qualified for analysis, generating an environment low-risk signal and sending the environment low-risk signal and the number of the corresponding analysis node to a server;
after receiving the environment low-risk signal, the server acquires the corresponding misconnection times of the analysis node, sorts the operation sequence of the analysis node according to the sequence of the corresponding misconnection times from low to high, and marks the misconnection as the analysis node to be connected with a data transmission access point without a network key; generate real-time operation analysis signal simultaneously and with real-time operation analysis signal transmission to real-time operation analysis unit, real-time operation analysis unit is used for carrying out real-time operation analysis to the high performance node that carries out data storage, judges the data storage running state of real-time high performance node to improve data storage's detection efficiency, can judge the factor of safety of real-time high performance node simultaneously, concrete real-time operation analysis process is as follows:
collecting a high-performance node which is subjected to data storage and is not generated by data transmission to obtain a data transmission access point which is connected with the high-performance node in real time, marking the data transmission access point which is provided with a network key and completes connection as a qualified access point, and marking the data transmission access point which is not provided with the network key and completes connection as an unqualified access point; the method comprises the following steps of collecting the ratio of the number of qualified access points connected with the high-performance node in real time to the number of unqualified access points, simultaneously collecting the time consumption difference value of the repeated connection of the qualified access points of the high-performance node, and comparing the time consumption difference value of the repeated connection of the qualified access points of the high-performance node and the ratio of the number of the qualified access points connected with the high-performance node in real time to the number of the unqualified access points with a repeated connection time consumption threshold value and a number ratio threshold value respectively:
if the time consumption difference value of the repeated connection of the qualified access points of the high-performance nodes exceeds the repeated connection time consumption threshold value, or the ratio of the number of the qualified access points of the real-time connection of the high-performance nodes to the number of the unqualified access points does not exceed the number ratio threshold value, judging that the real-time operation analysis of the corresponding high-performance nodes is unqualified, generating a real-time operation unqualified signal, sending the real-time operation unqualified signal and the number of the corresponding high-performance nodes to a server, and after receiving the real-time operation unqualified signal and the number of the corresponding high-performance nodes, carrying out safety analysis on the repeatedly connected data transmission access points of the corresponding high-performance nodes; if the time consumption difference value of the repeated connection of the qualified access points of the high-performance nodes does not exceed the repeated connection time consumption threshold value, and the ratio of the number of the qualified access points of the real-time connection of the high-performance nodes to the number of the unqualified access points exceeds the number ratio threshold value, judging that the corresponding high-performance nodes are qualified in real-time operation and analysis, generating a qualified real-time operation signal and sending the qualified real-time operation signal and the numbers of the corresponding high-performance nodes to a server;
the real-time operation analysis unit sends the high-performance node number corresponding to the real-time operation unqualified signal to the transmission influence analysis unit, the transmission influence analysis unit is used for carrying out transmission analysis on the high-performance node corresponding to the real-time operation unqualified signal, the real-time transmission state of the high-performance node which is unqualified in real-time operation is judged, thereby analyzing the influence of the real-time operation unqualified on the high-performance node, the risk of data loss is reduced, the data transmission is timely detected, the influence of the operation unqualified on the data transmission efficiency is reduced, and the specific transmission influence analysis process is as follows:
the method comprises the following steps of carrying out transmission analysis on a high-performance node corresponding to an unqualified signal which runs in real time, acquiring the real-time transmission speed and the transmission data bandwidth per minute of the high-performance node, and comparing the real-time transmission speed and the transmission data bandwidth per minute of the high-performance node with a real-time transmission speed threshold value and a transmission data bandwidth threshold value respectively:
if the real-time transmission speed of the high-performance node exceeds a real-time transmission speed threshold value and the transmission data bandwidth within every minute exceeds a transmission data bandwidth threshold value, judging that the real-time transmission is qualified, generating a current non-influence signal and sending the current non-influence signal and the number of the corresponding high-performance node to a server; if the real-time transmission speed of the high-performance node does not exceed the real-time transmission speed threshold value, or the transmission data bandwidth within every minute does not exceed the transmission data bandwidth threshold value, judging that the real-time transmission is unqualified, generating a current influence signal and sending the current influence signal and the number of the corresponding high-performance node to a server; and after receiving the current influence signal, the server suspends the data transmission corresponding to the high-performance node and sets the data transmission time according to the real-time running state.
The formulas are obtained by acquiring a large amount of data and performing software simulation, and the coefficients in the formulas are set by the technicians in the field according to actual conditions;
when the data storage encryption detection platform is used, the data storage encryption detection platform is used for detecting network data storage encryption, analyzing a network and arranging i sub-nodes in the network, a server generates a network node analysis signal and sends the network node analysis signal to a network node analysis unit, and each sub-node in the network is analyzed through the network node analysis unit; analyzing the corresponding storage environment of the high-performance node for data storage through a storage environment analysis unit; the real-time operation analysis unit is used for carrying out real-time operation analysis on the high-performance nodes for data storage; and generating a real-time operation unqualified signal or a real-time operation qualified signal through real-time operation analysis, sending the real-time operation unqualified signal to a transmission influence analysis unit, and performing transmission analysis on the high-performance node corresponding to the real-time operation unqualified signal through the transmission influence analysis unit.
The preferred embodiments of the invention disclosed above are intended to be illustrative only. The preferred embodiments are not intended to be exhaustive or to limit the invention to the precise forms disclosed. Obviously, many modifications and variations are possible in light of the above teaching. The embodiments were chosen and described in order to best explain the principles of the invention and the practical application, to thereby enable others skilled in the art to best utilize the invention. The invention is limited only by the claims and their full scope and equivalents.
Claims (5)
1. A network data storage encryption detection system based on data analysis is characterized by comprising a data storage encryption detection platform, wherein a server is arranged in the data storage encryption detection platform and is in communication connection with a network node analysis unit, a storage environment analysis unit, a real-time operation analysis unit and a transmission influence analysis unit;
the data storage encryption detection platform is used for detecting network data storage encryption, analyzing a network and setting i sub-nodes in the network, wherein i is a natural number larger than 1, each sub-node is provided with a data storage space for corresponding data storage in the network, the data transmission of each sub-node needs to correspond to a network key, and the network key is generated after encryption verification when the data transmission access point is connected with the sub-node; the server generates a network node analysis signal and sends the network node analysis signal to the network node analysis unit, and each sub-node in the network is analyzed through the network node analysis unit; the server generates a storage environment analysis signal and sends the storage environment analysis signal to the storage environment analysis unit, and the storage environment analysis unit analyzes the storage environment corresponding to the high-performance node for data storage; the server generates a real-time operation analysis signal and sends the real-time operation analysis signal to the real-time operation analysis unit, and the real-time operation analysis unit carries out real-time operation analysis on the high-performance nodes for data storage; and generating a real-time operation unqualified signal or a real-time operation qualified signal through real-time operation analysis, sending the real-time operation unqualified signal to a transmission influence analysis unit, and performing transmission analysis on the high-performance node corresponding to the real-time operation unqualified signal through the transmission influence analysis unit.
2. The system for detecting encryption of network data storage based on data analysis as claimed in claim 1, wherein the network node analysis process of the network node analysis unit is as follows:
performing real-time analysis on child nodes in the network, acquiring the maximum storage amount of data corresponding to each child node in the network and the times of data loss of each child node pair, and marking the maximum storage amount of data corresponding to each child node in the network and the times of data loss of each child node pair in the network as CCLi and QSCi respectively; acquiring the average data transmission speed of each child node in the network, and marking the average data transmission speed of each child node in the network as PSDi;
analyzing and acquiring each sub-node analysis coefficient Xi in the network, and comparing each sub-node analysis coefficient Xi in the network with a sub-node analysis coefficient threshold value:
if the analysis coefficient Xi of each sub-node in the network exceeds the analysis coefficient threshold of the sub-node, judging that the corresponding sub-node is qualified in analysis, marking the corresponding sub-node as a high-performance node, generating a node analysis qualified signal and sending the node analysis qualified signal and the number of the corresponding high-performance node to a server; and if the analysis coefficient Xi of each sub node in the network does not exceed the analysis coefficient threshold of the sub node, judging that the corresponding sub node is unqualified in analysis, marking the corresponding sub node as a low-performance node, generating a signal of unqualified node analysis, and sending the signal of unqualified node analysis and the number of the corresponding low-performance node to the server.
3. The system for detecting encryption of network data storage based on data analysis as claimed in claim 1, wherein the storage environment analysis process of the storage environment analysis unit is as follows:
the method comprises the following steps of marking a high-performance node for real-time data storage as an analysis node, collecting the number of data transmission access points corresponding to non-network key connection of the analysis node and the shortest interval duration of connection between the data transmission access points corresponding to the non-network key connection and the analysis node, and comparing the number of the data transmission access points corresponding to the non-network key connection of the analysis node and the shortest interval duration of connection between the data transmission access points corresponding to the non-network key connection and the analysis node with a data transmission access point number threshold and a shortest interval duration threshold respectively:
if the number of the data transmission access points corresponding to the analysis node and connected without the network key exceeds the threshold of the number of the data transmission access points, or the shortest interval time for establishing connection between the data transmission access points corresponding to the data transmission access points and the analysis node does not exceed the threshold of the shortest interval time, determining that the storage environment of the corresponding analysis node is unqualified for analysis, generating an environment high-risk signal and sending the environment high-risk signal and the number of the corresponding analysis node to a server; if the number of the data transmission access points corresponding to the analysis node and connected without the network key does not exceed the data transmission access point number threshold value, and the shortest interval duration of the connection between the data transmission access points corresponding to the data transmission access points connected without the network key and the analysis node exceeds the shortest interval duration threshold value, judging that the storage environment corresponding to the analysis node is qualified for analysis, generating an environment low-risk signal and sending the environment low-risk signal and the number corresponding to the analysis node to the server.
4. The system for detecting encryption of network data storage based on data analysis according to claim 1, wherein the real-time operation analysis process of the real-time operation analysis unit is as follows:
collecting a high-performance node which is subjected to data storage and is not generated by data transmission to obtain a data transmission access point which is connected with the high-performance node in real time, marking the data transmission access point which is provided with a network key and completes connection as a qualified access point, and marking the data transmission access point which is not provided with the network key and completes connection as an unqualified access point; the method comprises the following steps of collecting the ratio of the number of qualified access points connected with the high-performance node in real time to the number of unqualified access points, simultaneously collecting the time consumption difference value of the repeated connection of the qualified access points of the high-performance node, and comparing the time consumption difference value of the repeated connection of the qualified access points of the high-performance node and the ratio of the number of the qualified access points connected with the high-performance node in real time to the number of the unqualified access points with a repeated connection time consumption threshold value and a number ratio threshold value respectively:
if the time consumption difference value of the repeated connection of the qualified access points of the high-performance nodes exceeds the repeated connection time consumption threshold value, or the ratio of the number of the qualified access points of the real-time connection of the high-performance nodes to the number of the unqualified access points does not exceed the number ratio threshold value, judging that the corresponding high-performance nodes are unqualified in real-time operation analysis, generating an unqualified real-time operation signal and sending the unqualified real-time operation signal and the numbers of the corresponding high-performance nodes to a server;
if the time consumption difference value of the repeated connection of the qualified access points of the high-performance nodes does not exceed the repeated connection time consumption threshold value, and the ratio of the number of the qualified access points of the real-time connection of the high-performance nodes to the number of the unqualified access points exceeds the number ratio threshold value, the corresponding high-performance nodes are judged to be qualified in real-time operation and analysis, a real-time operation qualified signal is generated, and the real-time operation qualified signal and the numbers of the corresponding high-performance nodes are sent to the server.
5. The system according to claim 1, wherein the transmission impact analysis unit analyzes the transmission impact as follows:
the method comprises the following steps of carrying out transmission analysis on a high-performance node corresponding to an unqualified signal which runs in real time, acquiring the real-time transmission speed and the transmission data bandwidth per minute of the high-performance node, and comparing the real-time transmission speed and the transmission data bandwidth per minute of the high-performance node with a real-time transmission speed threshold value and a transmission data bandwidth threshold value respectively:
if the real-time transmission speed of the high-performance node exceeds a real-time transmission speed threshold value and the transmission data bandwidth within every minute exceeds a transmission data bandwidth threshold value, judging that the real-time transmission is qualified, generating a current non-influence signal and sending the current non-influence signal and the number of the corresponding high-performance node to a server; if the real-time transmission speed of the high-performance node does not exceed the real-time transmission speed threshold value, or the transmission data bandwidth within every minute does not exceed the transmission data bandwidth threshold value, judging that the real-time transmission is unqualified, generating a current influence signal and sending the current influence signal and the number of the corresponding high-performance node to a server; and after receiving the current influence signal, the server suspends the data transmission corresponding to the high-performance node and sets the data transmission time according to the real-time running state.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210024609.7A CN114444096B (en) | 2022-01-06 | 2022-01-06 | Network data storage encryption detection system based on data analysis |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210024609.7A CN114444096B (en) | 2022-01-06 | 2022-01-06 | Network data storage encryption detection system based on data analysis |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN114444096A true CN114444096A (en) | 2022-05-06 |
| CN114444096B CN114444096B (en) | 2022-12-02 |
Family
ID=81368681
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210024609.7A Active CN114444096B (en) | 2022-01-06 | 2022-01-06 | Network data storage encryption detection system based on data analysis |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114444096B (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115296903A (en) * | 2022-08-04 | 2022-11-04 | 国家信息中心 | Data security supervision method based on privacy calculation |
| CN116797267A (en) * | 2023-08-23 | 2023-09-22 | 深空间发展投资控股(湖北)有限公司 | Distributed market data acquisition management system for equity investment |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107734502A (en) * | 2017-09-07 | 2018-02-23 | 京信通信系统（中国）有限公司 | Micro-base station communication management method, system and equipment based on block chain |
| CN112994158A (en) * | 2021-03-01 | 2021-06-18 | 合肥徽韵光电有限公司 | Power operation autonomous management system |
| CN113411194A (en) * | 2020-03-16 | 2021-09-17 | 瑞昱半导体股份有限公司 | Internet of things network system and networking method thereof |
| CN113867966A (en) * | 2021-10-11 | 2021-12-31 | 桂林航天工业学院 | Cloud resource scheduling method in hybrid cloud mode |
-
2022
- 2022-01-06 CN CN202210024609.7A patent/CN114444096B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107734502A (en) * | 2017-09-07 | 2018-02-23 | 京信通信系统（中国）有限公司 | Micro-base station communication management method, system and equipment based on block chain |
| CN113411194A (en) * | 2020-03-16 | 2021-09-17 | 瑞昱半导体股份有限公司 | Internet of things network system and networking method thereof |
| CN112994158A (en) * | 2021-03-01 | 2021-06-18 | 合肥徽韵光电有限公司 | Power operation autonomous management system |
| CN113867966A (en) * | 2021-10-11 | 2021-12-31 | 桂林航天工业学院 | Cloud resource scheduling method in hybrid cloud mode |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115296903A (en) * | 2022-08-04 | 2022-11-04 | 国家信息中心 | Data security supervision method based on privacy calculation |
| CN116797267A (en) * | 2023-08-23 | 2023-09-22 | 深空间发展投资控股(湖北)有限公司 | Distributed market data acquisition management system for equity investment |
| CN116797267B (en) * | 2023-08-23 | 2023-11-24 | 深空间发展投资控股(湖北)有限公司 | Distributed market data acquisition management system for equity investment |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114444096B (en) | 2022-12-02 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN114444096B (en) | Network data storage encryption detection system based on data analysis | |
| CN110909811B (en) | OCSVM (online charging management system) -based power grid abnormal behavior detection and analysis method and system | |
| CN111191767B (en) | Vectorization-based malicious traffic attack type judging method | |
| Zhu et al. | Extracting secret key from wireless link dynamics in vehicular environments | |
| CN115442375B (en) | Property digital management system based on cloud edge cooperation technology | |
| CN114124478B (en) | Method and system for detecting abnormal industrial control flow of power system | |
| CN111405633B (en) | Power communication monitoring system based on cloud computing | |
| CN111181930A (en) | DDoS attack detection method, device, computer equipment and storage medium | |
| CN113935426A (en) | Method and device for detecting abnormal data traffic of power internet of things | |
| CN112462212A (en) | Artificial intelligent partial discharge monitoring and distinguishing system and method based on cloud technology | |
| CN112512073A (en) | Internet of things equipment anomaly detection method based on fingerprint identification technology | |
| CN114710761A (en) | Network equipment monitoring system based on wireless remote transmission technology | |
| CN111314310B (en) | Attack detection method for unresolvable network data feature selection based on machine learning | |
| CN117346743A (en) | Water regime remote measuring station intelligent monitoring inspection system based on machine learning model | |
| CN111355635B (en) | Online detection method and detection system for product performance of Internet of things | |
| CN115766297B (en) | Information data safety protection method based on Internet of things | |
| CN111935767A (en) | Network simulation system | |
| CN112948845B (en) | Data processing method and system based on Internet of things data center | |
| CN115175174A (en) | Method for realizing probe equipment management and control system based on Internet of things platform | |
| CN114330363A (en) | Industrial control protocol vulnerability mining method based on vulnerability semantic intelligent analysis | |
| CN108512729B (en) | Average delay extraction method based on network information transmission delay sequence | |
| CN112969154B (en) | 5G communication method for electric power distribution safety control | |
| CN115086043B (en) | Encryption network flow classification and identification method based on minimum public subsequence | |
| CN112417462B (en) | Network security vulnerability tracking method and system | |
| CN117749450A (en) | Satellite data transmission safety supervision system based on data analysis |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |