CN118118379A - Equipment operation monitoring method and system based on Internet of things - Google Patents
Equipment operation monitoring method and system based on Internet of things Download PDFInfo
- Publication number
- CN118118379A CN118118379A CN202410516504.2A CN202410516504A CN118118379A CN 118118379 A CN118118379 A CN 118118379A CN 202410516504 A CN202410516504 A CN 202410516504A CN 118118379 A CN118118379 A CN 118118379A
- Authority
- CN
- China
- Prior art keywords
- network
- network security
- security device
- monitoring
- safety device
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000012544 monitoring process Methods 0.000 title claims abstract description 158
- 238000000034 method Methods 0.000 title claims abstract description 51
- 238000012512 characterization method Methods 0.000 claims abstract description 68
- 230000008569 process Effects 0.000 claims abstract description 17
- 238000012545 processing Methods 0.000 claims description 49
- 230000002159 abnormal effect Effects 0.000 claims description 45
- 230000008859 change Effects 0.000 claims description 24
- 238000004364 calculation method Methods 0.000 claims description 19
- 238000004458 analytical method Methods 0.000 claims description 16
- 238000012216 screening Methods 0.000 claims description 12
- 238000007405 data analysis Methods 0.000 claims description 10
- 230000015556 catabolic process Effects 0.000 claims description 6
- 230000006855 networking Effects 0.000 claims 1
- 230000009286 beneficial effect Effects 0.000 abstract description 8
- 230000005856 abnormality Effects 0.000 abstract description 6
- 206010000117 Abnormal behaviour Diseases 0.000 abstract description 3
- 238000012937 correction Methods 0.000 description 7
- 238000003909 pattern recognition Methods 0.000 description 4
- 230000009471 action Effects 0.000 description 3
- 238000011161 development Methods 0.000 description 3
- 238000012423 maintenance Methods 0.000 description 3
- 230000008439 repair process Effects 0.000 description 3
- 238000005265 energy consumption Methods 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 230000004044 response Effects 0.000 description 2
- 230000005540 biological transmission Effects 0.000 description 1
- 238000004422 calculation algorithm Methods 0.000 description 1
- 230000001186 cumulative effect Effects 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000005457 optimization Methods 0.000 description 1
- 230000000737 periodic effect Effects 0.000 description 1
- 230000002093 peripheral effect Effects 0.000 description 1
- 230000035945 sensitivity Effects 0.000 description 1
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a device operation monitoring method and a system based on the Internet of things, which relate to the technical field of operation monitoring of all network safety devices, and are used for comprehensively monitoring and analyzing the network safety devices, monitoring the network connection state and the operation state of the network safety devices through the comprehensive monitoring and analyzing process of the network safety devices, timely finding out network safety threats and abnormal behaviors of the network safety devices, improving the safety of the network, timely finding out the condition that the resource utilization rate is too high or too low, comprehensively knowing the operation condition of the network safety devices, comprehensively obtaining the comprehensive characterization value of the network safety devices, and being beneficial to timely finding out the signs of the operation abnormality of the network safety devices and carrying out abnormality early warning, thereby improving the stability, safety and use efficiency of the network safety devices.
Description
Technical Field
The invention relates to the technical field of operation monitoring of various network security devices, in particular to a device operation monitoring method and system based on the Internet of things.
Background
In the digital age today, network security devices play a vital role. With the popularization of the internet and the rapid development of information technology, enterprises and individuals face increasingly serious security threats on data, assets and privacy, so that the development and innovation of network security devices continue to be important subjects in the field of network security. The advent and development of network security devices has provided critical safeguards for protecting network systems and data assets.
The prior art is as disclosed in the publication No.: the patent application of CN110909987A is a method and a device for monitoring the operation condition of each network safety equipment, wherein the method comprises the following steps: acquiring the actual service time of each network safety device and the maintenance data of each network safety device, wherein the maintenance data comprises the number of reported repairs; fitting the actual use time of each network safety device and the repair number of each network safety device in a preset period to obtain a fitting curve; judging whether the faults of each network safety device are periodical or not and the warranty rate of each network safety device is changed along with the service time according to the fitted curve, and obtaining the usable life of each network safety device; corresponding apparatus are also disclosed.
The prior art is as disclosed in the publication No.: CN114661735A is a system for monitoring running state of each network safety device of electric power, which comprises a power distribution monitoring module, an environment monitoring module, an energy consumption monitoring module, a safety monitoring module and a monitoring platform, wherein the monitoring platform establishes information link with the power distribution monitoring module, the environment monitoring module, the energy consumption monitoring module and the safety monitoring module, and can be tested and displayed.
According to the scheme, the performance of the network safety equipment in the operation monitoring method of the network safety equipment is not carefully monitored, the network connection state of the network safety equipment is not analyzed, the accuracy of data analysis is possibly lowered, the operation state and the performance state of the network safety equipment cannot be comprehensively known, meanwhile, abnormal network safety equipment is not screened out in time to perform abnormal early warning, and the stable operation and the performance optimization of the network safety equipment are possibly further affected.
Disclosure of Invention
Aiming at the defects of the prior art, the invention provides a device operation monitoring method and a system based on the Internet of things, which can effectively solve the problems related to the background technology.
In order to achieve the above purpose, the invention is realized by the following technical scheme: the equipment operation monitoring method based on the Internet of things comprises the steps of counting all network security equipment in an area through an Internet of things cloud management server, monitoring network connection states of all the network security equipment, and analyzing network connection state representation values of all the network security equipment.
And monitoring the operation state of each network security device and analyzing the operation state representation value of each network security device.
And according to the network connection state representation value of each network safety device and the operation state representation value of each network safety device, integrating and analyzing the comprehensive representation value of each network safety device, and screening each abnormal network safety device to perform abnormal early warning.
Further, the analyzing the network connection state characterization value of each network security device specifically includes: setting a monitoring period, counting the network maximum delay amount and the network minimum delay amount of each network security device in the monitoring period, extracting defined network delay variation amounts stored in a cloud database, and processing to obtain the network delay stability index of each network security device.
And monitoring and counting the accumulated data quantity transmitted by the network connection of each network security device in the monitoring period, extracting the duration of the monitoring period, and processing to obtain the data throughput of each network security device.
And monitoring and counting the average packet loss rate of each network security device in the monitoring period, extracting the reference data throughput stored in the cloud database according to the network delay stability index of each network security device, and processing to obtain the first connection index of each network security device.
And monitoring and counting the average data uploading rate and the average data downloading rate of each network security device in the monitoring period, extracting the average data uploading rate and the average data downloading rate stored in the cloud database, and processing to obtain a second connection index of each network security device.
And processing according to the first connection index of each network security device and the second connection index of each network security device to obtain the network connection state representation value of each network security device.
Further, the network connection state representation value of each network security device represents a numerical basis for quantitatively analyzing the network connection state of each network security device by monitoring the network connection state of each network security device.
Further, the analyzing the operation state characterization value of each network security device specifically includes: dividing the monitoring period into a plurality of time points, monitoring and counting the temperature of each network safety device in each monitoring time point, carrying out difference processing on the temperature of two adjacent monitoring time points, recording the interval period between the two adjacent time points as a monitoring sub-period, counting the temperature difference of each network safety device in each monitoring sub-period, extracting the duration of the monitoring sub-period, and obtaining the average change rate of the temperature of each network safety device in each monitoring sub-period in the monitoring period through processing.
And extracting the maximum temperature of each network safety device in the monitoring period and the defined temperature of each network safety device stored in the cloud database according to the temperature change rate of each network safety device, and processing to obtain the operating temperature representation value of each network safety device.
And monitoring the CPU utilization rate and the hard disk space utilization rate of each network security device at each monitoring time point, extracting the reference CPU utilization rate and the reference hard disk space utilization rate stored in the cloud database, and processing to obtain the resource utilization balance value of each network security device.
And counting the restarting times and the system breakdown times of each network security device in the monitoring period, extracting the influence factors of single restarting of each network security device and the influence factors of single system breakdown stored in the cloud database, and processing to obtain the starting abnormal characterization value of each network security device.
And comprehensively processing according to the operating temperature representation value of each network security device, the resource utilization balance value of each network security device and the starting abnormal representation value of each network security device to obtain the operating state representation value of each network security device.
Further, the operation state representation value of each network security device represents a numerical basis for quantitatively analyzing the operation state of each network security device by monitoring the operation state of each network security device.
Further, the analyzing the comprehensive characterization value of each network security device comprises the following specific analysis processes: and processing according to the network connection state representation value of each network security device and the running state representation value of each network security device to obtain the comprehensive representation value of each network security device.
The comprehensive characterization value of each network safety device represents a numerical basis for quantitatively analyzing the overall operation performance degree of each network safety device by carrying out data analysis processing on the network connection state characterization value of each network safety device and the operation state characterization value of each network safety device.
Further, the screening of each abnormal network safety device carries out abnormal early warning, and the specific process is as follows: and comparing the comprehensive characterization value of each network safety device with a set comprehensive characterization threshold, wherein if the comprehensive characterization value of a certain network safety device is lower than the comprehensive characterization threshold, the network safety device is marked as an abnormal network safety device, and thus, each abnormal network safety device is obtained through screening.
Further, the network connection state characterization value of each network security device has a calculation formula:
; in the/> Representing a value for the network connection status of an ith network security device,/>First connection index for the ith network security device,/>Second connection index for the ith individual network security appliance,/>For the weight factor corresponding to the first connection indexAnd e is a weight factor corresponding to the set second connection index, and e is a natural constant.
Further, the operation state representation value of each network security device has a calculation formula:
; in the/> For the operational state characterization value of the ith network security device,For the operating temperature characterization value of the ith network security device,/>A resource utilization characterization value for the ith network security device,Enable exception characterization value for ith network security device,/>For the weight factor corresponding to the set operating temperature characterization value,For the weight factor corresponding to the set resource utilization characterization value,/>For the weight factor corresponding to the set operation abnormality characterization value, i is the number of each network security device,/>N represents the number of network security devices.
The second aspect of the present invention provides a device operation monitoring system based on the internet of things, comprising: the network connection state monitoring module is used for counting all network security devices in the area through the cloud management server of the Internet of things, monitoring the network connection state of all the network security devices and analyzing the network connection state representation value of all the network security devices.
And the running state monitoring module is used for monitoring the running state of each network safety device and analyzing the running state representation value of each network safety device.
And the early warning module is used for integrating and analyzing the comprehensive characterization value of each network safety device according to the network connection state characterization value of each network safety device and the operation state characterization value of each network safety device, and screening each abnormal network safety device to perform abnormal early warning.
The invention has the following beneficial effects:
(1) The invention provides a device operation monitoring method and a system based on the Internet of things, which monitor the network connection state and the operation state of network safety devices through the comprehensive monitoring and analysis process of the network safety devices, can timely discover the network safety threat and abnormal behavior existing in the network safety devices, improve the network safety, timely discover the condition of over-high or over-low resource utilization rate, comprehensively know the operation condition of the network safety devices, comprehensively obtain the comprehensive characterization value of each network safety device, timely discover the signs of abnormal operation of the network safety devices and perform abnormal early warning, thereby being beneficial to timely discovering and solving the potential problems, and improving the stability, safety and use efficiency of the network safety devices.
(2) The invention monitors the network connection state of each network safety device, firstly, monitors parameters such as network delay, average packet loss rate, data throughput and the like, more comprehensively evaluates the network connection quality of the network safety device, obtains the network delay stability index of each network safety device, monitors and analyzes the network connection state, is beneficial to improving the sensitivity and accuracy of the network condition, and further analyzes the connection condition of the network safety device by combining with the data uploading and downloading rate, and helps to ensure the stable operation and the network connection quality of the network safety device.
(3) The invention monitors and analyzes the running state of each network safety device, and monitors the parameters such as the temperature change rate, the CPU utilization rate, the hard disk space utilization rate and the like, so that the working state and the resource utilization condition of the network safety device can be known in time, and the invention is beneficial to finding potential problems and anomalies. Secondly, the restarting times and the system crash times are counted, so that the stability and the reliability of the network security equipment can be comprehensively evaluated. Finally, the operation state representation value of the network security equipment is obtained by comprehensively processing various parameters, so that the overall monitoring and analysis of the operation state of the network security equipment are realized, the overall state of the network security equipment is more comprehensively evaluated, and a basis is provided for the management and maintenance of the network security equipment.
(4) By analyzing the comprehensive characterization value of each network safety device, the invention is beneficial to realizing the timely monitoring and abnormal early warning of the running state of the network safety device, further promotes the automatic and intelligent management of the running monitoring of each network safety device based on the Internet of things, and is beneficial to improving the stability and safety of the network safety device, thereby ensuring the normal running and data safety of the network safety device.
Of course, it is not necessary for any one product to practice the invention to achieve all of the advantages set forth above at the same time.
Drawings
FIG. 1 is a schematic flow chart of the method of the present invention.
Fig. 2 is a schematic diagram of system module connection according to the present invention.
Detailed Description
The following description of the embodiments of the present invention will be made clearly and completely with reference to the accompanying drawings, in which it is apparent that the embodiments described are only some embodiments of the present invention, but not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
In the description of the present invention, it should be understood that the terms "open," "upper," "lower," "thickness," "top," "middle," "length," "inner," "peripheral," and the like indicate orientation or positional relationships, merely for convenience in describing the present invention and to simplify the description, and do not indicate or imply that the components or elements referred to must have a particular orientation, be constructed and operated in a particular orientation, and thus should not be construed as limiting the present invention.
Referring to fig. 1, the first aspect of the present invention provides a technical solution: the equipment operation monitoring method based on the Internet of things comprises the steps of counting all network security equipment in an area through an Internet of things cloud management server, monitoring network connection states of all the network security equipment, and analyzing network connection state representation values of all the network security equipment.
It should be noted that, the cloud management server of the internet of things refers to a server for managing, monitoring and controlling the devices of the internet of things. It is typically hosted on a cloud platform to provide remote management and services for internet of things systems, including areas such as businesses and office parks.
And monitoring the operation state of each network security device and analyzing the operation state representation value of each network security device.
And according to the network connection state representation value of each network safety device and the operation state representation value of each network safety device, integrating and analyzing the comprehensive representation value of each network safety device, and screening each abnormal network safety device to perform abnormal early warning.
Specifically, analyzing the network connection state characterization value of each network security device, wherein the specific analysis process is as follows:
Setting a monitoring period, counting the network maximum delay amount and the network minimum delay amount of each network security device in the monitoring period, extracting defined network delay variation amounts stored in a cloud database, and processing to obtain a network delay stability index of each network security device;
The network delay stability index of each network security device means a quantized result obtained by performing data analysis processing on a network maximum delay amount and a network minimum delay amount of each network security device, wherein the quantized result is used for analyzing a delay variation degree of each network security device in a monitoring period, and is used as an analysis basis of a first connection index of each network security device, the network delay stability index of each network security device can be obtained by performing weighted average on the delay amounts not only through importance or weights at different time points, for example, setting weights according to a time period length or a network load condition, but also through the following calculation method, and a specific calculation method is as follows:
In the above, the ratio of/> Network delay stability index for the ith network security device,/>To monitor the maximum amount of network delay of the ith network security device in a cycle,/>To monitor the network minimum delay of the ith network security device in a cycle,/>To define the network delay variation,/>E represents a natural constant, i is the number of each network security device, and i is the number of each network security device, which is the compensation factor corresponding to the set network delay amountN represents the number of network security devices.
It should also be explained that if the difference between the maximum delay amount and the minimum delay amount is small, it is explained that the delay condition remains relatively stable in the monitoring period, and the variation is not large, which means that the response speed of the network security device is relatively consistent, which is beneficial to maintaining the overall stability of the system.
It should also be explained that if the difference between the maximum delay amount and the minimum delay amount is large, this indicates that the delay has a large fluctuation in the condition monitoring period, which may indicate that the network security device has a large uncertainty or instability factor in processing the request, and corresponding control may be required.
And monitoring and counting the accumulated data quantity transmitted by the network connection of each network security device in the monitoring period, extracting the duration of the monitoring period, and processing to obtain the data throughput of each network security device.
The data throughput of each network security device represents the capability or efficiency of processing data in unit time by the network security device through performing data analysis processing on the average packet loss rate of each network security device and the accumulated data amount transmitted by the network connection, and the data throughput of each network security device can be monitored in real time and calculated by using a special network traffic analysis tool or each network security device, or the access log of the proxy server can be used for analyzing and acquiring the information of the network traffic and the data transmission amount, so that the data throughput of each network security device can be indirectly calculated, and the data throughput can be obtained by the following calculation method, wherein the specific calculation method is as follows:
In the above, the ratio of/> Data throughput for the ith network security device,/>For monitoring the cumulative data volume transmitted by the network connection of the ith network security appliance in a cycle,/>Indicating the duration of the monitoring period.
And monitoring and counting the average packet loss rate of each network security device in the monitoring period, extracting the reference data throughput stored in the cloud database according to the network delay stability index of each network security device, and processing to obtain the first connection index of each network security device.
The first connection index of each network security device represents a quantized result obtained by performing data analysis on the network delay stability index of each network security device and the data throughput of each network security device and used for analyzing the connection state of each network security device, and the first connection index of each network security device can be obtained by performing pattern recognition and analysis by using historical data, and can also be obtained by the following calculation method:
In the above, the ratio of/> For the first connection index of the ith network security device,Network delay stability index for the ith network security device,/>Data throughput for the ith network security device,/>For reference data throughput,/>Compensation factor corresponding to the set network delay stability index,/>And (5) setting a correction factor corresponding to the data throughput.
And monitoring and counting the average data uploading rate and the average data downloading rate of each network security device in the monitoring period, extracting the average data uploading rate and the average data downloading rate stored in the cloud database, and processing to obtain a second connection index of each network security device.
And processing according to the first connection index of each network security device and the second connection index of each network security device to obtain the network connection state representation value of each network security device.
It should be noted that, the second connection index of each network security device represents a quantized result of a connection state for each network security device obtained by performing data analysis on a data average upload rate and a data average download rate of each network security device, and the second connection index of each network security device may be obtained by performing pattern recognition and analysis using historical data, and may also be obtained by the following calculation method:
In the above, the ratio of/> A second connection index for the ith network security device,Data average upload rate for ith network security device,/>Data average download rate for ith network security device,/>For reference data average upload rate,/>For reference data average download rate,/>For the correction factor corresponding to the set average data uploading rate,/>And the correction factor corresponding to the set data average download rate is used.
Specifically, the network connection state representation value of each network security device represents a numerical basis for quantitatively analyzing the network connection state of each network security device by monitoring the network connection state of each network security device.
Specifically, the network connection state representation value of each network security device represents a numerical basis for quantitatively analyzing the network connection state of each network security device by monitoring the network connection state of each network security device.
Specifically, the operation state representation value of each network security device is analyzed, and the specific analysis process is as follows: dividing a monitoring period into a plurality of time points, monitoring and counting the temperature of each network safety device in each monitoring time point, carrying out difference processing on the temperature of two adjacent monitoring time points, recording the interval period between the two adjacent time points as a monitoring sub-period, counting the temperature difference of each network safety device in each monitoring sub-period, extracting the duration of the monitoring sub-period, and obtaining the average change rate of the temperature of each network safety device in each monitoring sub-period in the monitoring period through processing;
It should be noted that, the average rate of change of the temperature of each network security device in each monitoring sub-period represents the average rate of change of the temperature of the device in the monitoring period, which reflects the speed and stability of the temperature change of the device, and the average rate of change of the temperature can be calculated by monitoring the temperature change condition of the device in real time by means of a remote monitoring system and using the analysis function provided by the system, and also can be obtained by the following calculation method:
In the above, the ratio of/> Temperature change rate for the ith network security device during the c-th monitoring sub-period,/>For the ith network security device, monitoring the temperature difference of the subperiod c,/>Representing the duration of the monitoring sub-period, c being the number of each monitoring sub-period,/>B represents the number of monitoring sub-periods.
In the present embodiment, specifically, if the operating temperature change rate of each network security device is low, it may indicate that each network security device operates normally and stably, so that the temperature change is small; if the change rate is higher, the abnormal condition or fault of each network safety device may be indicated, so that the temperature change is larger, the abnormal condition of each network safety device can be rapidly found by monitoring the temperature change rate, and management personnel can be timely helped to take measures to repair or adjust, so that the normal operation of each network safety device can be ensured.
And extracting the maximum temperature of each network safety device in the monitoring period and the defined temperature of each network safety device stored in the cloud database according to the temperature change rate of each network safety device, and processing to obtain the operating temperature representation value of each network safety device.
It should be further noted that, the operation temperature characterization value of each network security device is obtained by comparing and processing the temperature change rate of each network security device and the maximum temperature of each network security device, and is used for analyzing the temperature change condition of each network security device in a monitoring period, and is used as the basis of the operation state characterization value of each network security device, and the operation temperature characterization value of each network security device can be deduced from the operation temperature characterization value of each network security device by analyzing the temperature data in the past period, including the change trend, the periodic change, etc., and can also be obtained by the following calculation method, wherein the specific calculation method is as follows:
; in the/> For the operating temperature characterization value of the ith network security device,/>For the maximum temperature of the ith network security device,/>Temperature change rate for the ith network security device during the c-th monitoring sub-period,/>Defined temperature for ith network security device,/>For the correction factor corresponding to the set maximum temperature,/>The correction factor corresponding to the set temperature change rate is set.
And monitoring the CPU utilization rate and the hard disk space utilization rate of each network security device at each monitoring time point, extracting the reference CPU utilization rate and the reference hard disk space utilization rate stored in the cloud database, and processing to obtain the resource utilization balance value of each network security device.
It should be noted that, the resource utilization balance value of each network security device is obtained by comparing and processing the CPU utilization rate and the hard disk space utilization rate of each network security device, and is used for analyzing the utilization degree of resources by each network security device in a monitoring period and as a data analysis basis of the operation state representation value of each network security device, the resource utilization balance value of each network security device can be obtained by monitoring the input and output operation utilization rate of each network security device, including the disk read-write rate, etc., so as to understand the utilization condition of storage resources by each network security device, and also can be obtained by considering the load balance condition of each network security device, including the number, the speed, the average response time, etc., of processing requests, so as to evaluate the balance of resource utilization of each network security device, and the specific calculation method is as follows:
; in the/> Balance value for resource utilization of ith network security device,/>CPU usage for the ith network security device at the jth point in time,/>Hard disk space utilization for the ith network security device at the jth monitoring time point,/>Representing and referencing CPU usage,/>Representing reference hard disk space utilization,/>For the correction factor corresponding to the set CPU utilization rate,/>For the correction factor corresponding to the set hard disk space utilization rate, j is the number of each monitoring time point,/>B represents the number of monitoring time points.
And counting the restarting times and the system breakdown times of each network security device in the monitoring period, extracting the influence factors of single restarting of each network security device and the influence factors of single system breakdown stored in the cloud database, and processing to obtain the starting abnormal characterization value of each network security device.
The starting abnormal representation value of each network safety device is obtained by processing the restarting times and the system crash times of each network safety device, is used for reflecting the stability and the reliability of the network safety device and the influence degree on the normal operation of the system, is used as a data analysis basis of the operation state representation value of each network safety device, can be obtained by analyzing log files of each network safety device, including system logs, error logs and the like, so as to identify abnormal events and error conditions of each network safety device in a monitoring period, can be obtained by specifically analyzing the operation data of each network safety device by applying an abnormality detection algorithm, and can be used for identifying abnormal modes and abnormal behaviors, thereby evaluating the operation abnormal conditions of each network safety device, and can be obtained by analyzing the starting abnormal representation value of each network safety device by the following calculation method:
，
In the method, in the process of the invention, Enable exception characterization value for ith network security device,/>For the number of reboots of the ith network security device,/>For the number of system crashes of the ith network security device,/>For the impact factor of single network security device restart,/>Is the impact factor of a single system crash.
And comprehensively processing according to the operating temperature representation value of each network security device, the resource utilization balance value of each network security device and the starting abnormal representation value of each network security device to obtain the operating state representation value of each network security device.
Specifically, the operation state representation value of each network security device represents a numerical basis for quantitatively analyzing the operation state of each network security device by monitoring the operation state of each network security device.
Specifically, the comprehensive characterization value of each network security device is analyzed, and the specific analysis process is as follows: and processing according to the network connection state representation value of each network security device and the running state representation value of each network security device to obtain the comprehensive representation value of each network security device.
The comprehensive characterization value of each network safety device represents a numerical basis for quantitatively analyzing the overall operation performance degree of each network safety device by carrying out data analysis processing on the network connection state characterization value of each network safety device and the operation state characterization value of each network safety device.
Specifically, screening each abnormal network security device to perform abnormal early warning, wherein the specific process is as follows: and comparing the comprehensive characterization value of each network safety device with a set comprehensive characterization threshold, wherein if the comprehensive characterization value of a certain network safety device is lower than the comprehensive characterization threshold, the network safety device is marked as an abnormal network safety device, and thus, each abnormal network safety device is obtained through screening to perform abnormal early warning.
It is also necessary to record and analyze various abnormal network security devices, including the time and duration of occurrence of the abnormality, and send an early warning notice to the relevant personnel, prompting them that the device may have a problem.
Specifically, the network connection state characterization value of each network security device can be obtained by performing pattern recognition and analysis by using historical data, and can also be obtained by a more accurate calculation method, wherein the specific calculation method is as follows:
; in the/> Representing a value for the network connection status of an ith network security device,/>First connection index for the ith network security device,/>Second connection index for the ith individual network security appliance,/>For the weight factor corresponding to the first connection indexAnd e is a weight factor corresponding to the set second connection index, and e is a natural constant.
Specifically, the operation state representation value of each network security device can be obtained by performing pattern recognition and analysis by using historical data, and can also be obtained by a more accurate calculation method, wherein the specific calculation method is as follows:
; in the/> For the operational state characterization value of the ith network security device,For the operating temperature characterization value of the ith network security device,/>A resource utilization characterization value for the ith network security device,Enable exception characterization value for ith network security device,/>For the weight factor corresponding to the set operation temperature representation value,/>For the weight factor corresponding to the set resource utilization characterization value,/>For the weight factor corresponding to the set operation abnormality characterization value, i is the number of each network security device,/>N represents the number of network security devices.
Referring to fig. 2, a second aspect of the present invention provides an operation monitoring system for a device based on internet of things, including: the network connection state monitoring module is used for counting all network security devices in the area through the cloud management server of the Internet of things, monitoring the network connection state of all the network security devices and analyzing the network connection state representation value of all the network security devices.
And the running state monitoring module is used for monitoring the running state of each network safety device and analyzing the running state representation value of each network safety device.
And the early warning module is used for integrating and analyzing the comprehensive characterization value of each network safety device according to the network connection state characterization value of each network safety device and the operation state characterization value of each network safety device, and screening each abnormal network safety device to perform abnormal early warning.
The equipment operation monitoring system based on the Internet of things further comprises a cloud database, wherein the cloud database is used for storing and defining network delay variation, reference data throughput, reference data average uploading speed, reference data average downloading speed, definition temperature of each network security equipment, influence factors of single restarting of each network security equipment and influence factors of single system crash, reference CPU (central processing unit) utilization rate and reference hard disk space utilization rate. It is noted that relational terms such as first and second, and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Moreover, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus.
The preferred embodiments of the invention disclosed above are intended only to assist in the explanation of the invention. The preferred embodiments are not exhaustive or to limit the invention to the precise form disclosed. Obviously, many modifications and variations are possible in light of the above teaching. The embodiments were chosen and described in order to best explain the principles of the invention and the practical application, to thereby enable others skilled in the art to best understand and utilize the invention. The invention is limited only by the claims and the full scope and equivalents thereof.
Claims (10)
1. The equipment operation monitoring method based on the Internet of things is characterized by comprising the following steps of:
Counting all network security devices in the area through an Internet of things cloud management server, monitoring the network connection state of each network security device, and analyzing the network connection state representation value of each network security device;
monitoring the operation state of each network security device and analyzing the operation state representation value of each network security device;
And according to the network connection state representation value of each network safety device and the operation state representation value of each network safety device, integrating and analyzing the comprehensive representation value of each network safety device, and screening each abnormal network safety device to perform abnormal early warning.
2. The method for monitoring the operation of the equipment based on the internet of things according to claim 1, wherein the method comprises the following steps: the network connection state representation value of each network security device is analyzed, and the specific analysis process is as follows:
Setting a monitoring period, counting the network maximum delay amount and the network minimum delay amount of each network security device in the monitoring period, extracting defined network delay variation amounts stored in a cloud database, and processing to obtain a network delay stability index of each network security device;
monitoring and counting the accumulated data quantity transmitted by the network connection of each network security device in a monitoring period, extracting the duration of the monitoring period, and processing to obtain the data throughput of each network security device;
Monitoring and counting the average packet loss rate of each network security device in a monitoring period, extracting the reference data throughput stored in a cloud database according to the network delay stability index of each network security device, and processing to obtain a first connection index of each network security device;
monitoring and counting the average uploading rate and the average downloading rate of the data of each network security device in a monitoring period, extracting the average uploading rate and the average downloading rate of the reference data stored in a cloud database, and processing to obtain a second connection index of each network security device;
and processing according to the first connection index of each network security device and the second connection index of each network security device to obtain the network connection state representation value of each network security device.
3. The method for monitoring the operation of the equipment based on the internet of things according to claim 2, wherein the method comprises the following steps: the network connection state representation value of each network security device represents a numerical basis for quantitatively analyzing the network connection state of each network security device by monitoring the network connection state of each network security device.
4. The method for monitoring the operation of the equipment based on the internet of things according to claim 1, wherein the method comprises the following steps: the operation state representation value of each network security device is analyzed, and the specific analysis process is as follows:
Dividing a monitoring period into a plurality of time points, monitoring and counting the temperature of each network safety device in each monitoring time point, carrying out difference processing on the temperature of two adjacent monitoring time points, recording the interval period between the two adjacent time points as a monitoring sub-period, counting the temperature difference of each network safety device in each monitoring sub-period, extracting the duration of the monitoring sub-period, and obtaining the average change rate of the temperature of each network safety device in each monitoring sub-period in the monitoring period through processing;
extracting the maximum temperature of each network safety device in the monitoring period and the defined temperature of each network safety device stored in the cloud database according to the temperature change rate of each network safety device, and processing to obtain the operating temperature representation value of each network safety device;
Monitoring CPU utilization rate and hard disk space utilization rate of each network security device in each monitoring time point, extracting reference CPU utilization rate and reference hard disk space utilization rate stored in a cloud database, and obtaining resource utilization balance values of each network security device through processing;
counting the restarting times and the system breakdown times of each network security device in a monitoring period, extracting the influence factors of single restarting of each network security device and the influence factors of single system breakdown stored in a cloud database, and processing to obtain the starting abnormal characterization value of each network security device;
and comprehensively processing according to the operating temperature representation value of each network security device, the resource utilization balance value of each network security device and the starting abnormal representation value of each network security device to obtain the operating state representation value of each network security device.
5. The method for monitoring the operation of the equipment based on the internet of things according to claim 4, wherein the method comprises the following steps: the operation state representation value of each network security device represents a numerical basis for quantitatively analyzing the operation state of each network security device by monitoring the operation state of each network security device.
6. The method for monitoring the operation of the equipment based on the internet of things according to claim 1, wherein the method comprises the following steps: the comprehensive characterization value of each network security device is analyzed, and the specific analysis process is as follows:
According to the network connection state representation value of each network security device and the operation state representation value of each network security device, the comprehensive representation value of each network security device is obtained through processing;
The comprehensive characterization value of each network safety device represents a numerical basis for quantitatively analyzing the overall operation performance degree of each network safety device by carrying out data analysis processing on the network connection state characterization value of each network safety device and the operation state characterization value of each network safety device.
7. The method for monitoring the operation of the equipment based on the internet of things according to claim 1, wherein the method comprises the following steps: the screening of each abnormal network safety device carries out abnormal early warning, and the specific process is as follows:
And comparing the comprehensive characterization value of each network safety device with a set comprehensive characterization threshold, wherein if the comprehensive characterization value of a certain network safety device is lower than the comprehensive characterization threshold, the network safety device is marked as an abnormal network safety device, and thus, each abnormal network safety device is obtained through screening.
8. The method for monitoring the operation of the equipment based on the internet of things according to claim 2, wherein the method comprises the following steps: the network connection state representation value of each network security device has a calculation formula as follows:
；
In the method, in the process of the invention, Representing a value for the network connection status of an ith network security device,/>First connection index for the ith network security device,/>Second connection index for the ith individual network security appliance,/>For the weight factor corresponding to the first connection indexAnd e is a weight factor corresponding to the set second connection index, and e is a natural constant.
9. The method for monitoring the operation of the equipment based on the internet of things according to claim 4, wherein the method comprises the following steps: the operation state representation value of each network security device has a calculation formula as follows:
；
In the method, in the process of the invention, Representing value for the running state of the ith network security equipment,/>For the operating temperature characterization value of the ith network security device,/>Characterization value for resource utilization of the ith network security device,/>Enable exception characterization value for ith network security device,/>For the weight factor corresponding to the set operation temperature representation value,/>For the weight factor corresponding to the set resource utilization characterization value,/>For the weight factor corresponding to the set abnormal operation characterization value, i is the number of each network safety device,N represents the number of network security devices.
10. An equipment operation monitoring system based on thing networking, characterized by comprising:
The network connection state monitoring module is used for counting all network security devices in the area through the cloud management server of the Internet of things, monitoring the network connection state of all the network security devices and analyzing the network connection state representation value of all the network security devices;
the running state monitoring module is used for monitoring the running state of each network safety device and analyzing the running state representation value of each network safety device;
And the early warning module is used for integrating and analyzing the comprehensive characterization value of each network safety device according to the network connection state characterization value of each network safety device and the operation state characterization value of each network safety device, and screening each abnormal network safety device to perform abnormal early warning.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202410516504.2A CN118118379A (en) | 2024-04-28 | 2024-04-28 | Equipment operation monitoring method and system based on Internet of things |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202410516504.2A CN118118379A (en) | 2024-04-28 | 2024-04-28 | Equipment operation monitoring method and system based on Internet of things |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN118118379A true CN118118379A (en) | 2024-05-31 |
Family
ID=91219555
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202410516504.2A Pending CN118118379A (en) | 2024-04-28 | 2024-04-28 | Equipment operation monitoring method and system based on Internet of things |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN118118379A (en) |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106992904A (en) * | 2017-05-19 | 2017-07-28 | 湖南省起航嘉泰网络科技有限公司 | Network equipment health degree appraisal procedure based on dynamic comprehensive weight |
| US20200177485A1 (en) * | 2018-12-04 | 2020-06-04 | Cisco Technology, Inc. | Network traffic metrics and trends for internet of things management |
| CN112311617A (en) * | 2019-08-02 | 2021-02-02 | 中国移动通信有限公司政企客户分公司 | Configured data monitoring and alarming method and system |
| CN113242153A (en) * | 2021-06-08 | 2021-08-10 | 广东嘉贸通科技有限公司 | Application-oriented monitoring analysis method based on network traffic monitoring |
| CN116383023A (en) * | 2023-04-06 | 2023-07-04 | 山东第一医科大学(山东省医学科学院) | Computer running performance intelligent supervision system based on data analysis |
| CN116389304A (en) * | 2023-04-12 | 2023-07-04 | 国网湖北省电力有限公司荆州供电公司 | SG-TMS-based network operation state trend analysis system |
| CN117201206A (en) * | 2023-11-08 | 2023-12-08 | 河北翎贺计算机信息技术有限公司 | Network safety supervision system for preventing network data leakage |
-
2024
- 2024-04-28 CN CN202410516504.2A patent/CN118118379A/en active Pending
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106992904A (en) * | 2017-05-19 | 2017-07-28 | 湖南省起航嘉泰网络科技有限公司 | Network equipment health degree appraisal procedure based on dynamic comprehensive weight |
| US20200177485A1 (en) * | 2018-12-04 | 2020-06-04 | Cisco Technology, Inc. | Network traffic metrics and trends for internet of things management |
| CN112311617A (en) * | 2019-08-02 | 2021-02-02 | 中国移动通信有限公司政企客户分公司 | Configured data monitoring and alarming method and system |
| CN113242153A (en) * | 2021-06-08 | 2021-08-10 | 广东嘉贸通科技有限公司 | Application-oriented monitoring analysis method based on network traffic monitoring |
| CN116383023A (en) * | 2023-04-06 | 2023-07-04 | 山东第一医科大学(山东省医学科学院) | Computer running performance intelligent supervision system based on data analysis |
| CN116389304A (en) * | 2023-04-12 | 2023-07-04 | 国网湖北省电力有限公司荆州供电公司 | SG-TMS-based network operation state trend analysis system |
| CN117201206A (en) * | 2023-11-08 | 2023-12-08 | 河北翎贺计算机信息技术有限公司 | Network safety supervision system for preventing network data leakage |
Non-Patent Citations (1)
| Title |
|---|
| 孙红杰;方滨兴;张宏莉;: "一种新的大规模网络主动预警方法", 电信科学, no. 01, 15 January 2007 (2007-01-15) * |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| EP3557819B1 (en) | Server failure detection method and system | |
| CN111209131B (en) | Method and system for determining faults of heterogeneous system based on machine learning | |
| US6973415B1 (en) | System and method for monitoring and modeling system performance | |
| US7082381B1 (en) | Method for performance monitoring and modeling | |
| CN106886485B (en) | System capacity analysis and prediction method and device | |
| US8161058B2 (en) | Performance degradation root cause prediction in a distributed computing system | |
| US20060277080A1 (en) | Method and system for automatically testing information technology control | |
| US7197428B1 (en) | Method for performance monitoring and modeling | |
| US20090158189A1 (en) | Predictive monitoring dashboard | |
| US8774023B2 (en) | Method and system for detecting changes in network performance | |
| KR102432284B1 (en) | A system that automatically responds to event alarms or failures in IT management in real time and its operation method | |
| US20070260735A1 (en) | Methods for linking performance and availability of information technology (IT) resources to customer satisfaction and reducing the number of support center calls | |
| US7369967B1 (en) | System and method for monitoring and modeling system performance | |
| JP2010526352A (en) | Performance fault management system and method using statistical analysis | |
| CN107992410B (en) | Software quality monitoring method and device, computer equipment and storage medium | |
| US20080249647A1 (en) | System and Method of Data Harvesting | |
| CN110765189A (en) | Exception management method and system for Internet products | |
| US7617313B1 (en) | Metric transport and database load | |
| CN116719664B (en) | Application and cloud platform cross-layer fault analysis method and system based on micro-service deployment | |
| JP2009086896A (en) | Failure prediction system and failure prediction method for computer | |
| AlGhamdi et al. | Towards reducing the time needed for load testing | |
| KR20130065800A (en) | Real-time collaborated enterprise asset management system based on condition-based maintenance and method thereof | |
| CN114691521A (en) | Software testing platform based on artificial intelligence | |
| KR20110037578A (en) | The integration security monitoring system and method thereof | |
| CN118118379A (en) | Equipment operation monitoring method and system based on Internet of things |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |