Abnormal Operation Detection of Access Equipment in Dispatching Exchange Network Based on Data Mining

To meet the requirements of a power dispatching service, a dispatching switching network has been widely used instead of circuit switching technology. However, with the growth of the number of access devices, the problem of network security is becoming more and more serious. At present, the commonly...

Full description

Saved in:
Bibliographic Details
Published in:Journal of physics. Conference series 2023-02, Vol.2427 (1), p.12014
Main Authors: Zhai, Hongting, Zhang, Qingrui, Sun, Lili, Zhang, Yantong, Zhai, Qi
Format: Article
Language:English
Subjects:
Algorithms
Circuits
Clustering
Data collection
Data mining
Electronic devices
Feature extraction
Identification methods
Network security
Physics
Security
Switching
Traffic information
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:To meet the requirements of a power dispatching service, a dispatching switching network has been widely used instead of circuit switching technology. However, with the growth of the number of access devices, the problem of network security is becoming more and more serious. At present, the commonly used access equipment abnormal operation detection method mainly relies on a two-stage clustering method to identify the abnormal operation state, but the processing effect is not good in the face of a large number of data, resulting in a low F1 value of the final detection result. Therefore, aiming at the access equipment of the dispatching exchange network, an abnormal operation detection method based on data mining is proposed. Scapy, a network tool, is used to capture the traffic data of access devices, and the collected data are normalized and fused. Data feature information is extracted through time sliding window and incremental calculation mode. With the clustering algorithm and related rules in data mining as the core, the abnormal operation detection method of access equipment is designed to obtain accurate abnormal detection results. Finally, based on the recursive graph structure, the detection results are visualized. The experimental results show that the average F1 value of the detection results of the proposed method is 0. 98, which indicates that the detection results of the proposed method have higher accuracy, and based on this, the network security isolation is carried out, which effectively improves the security of dispatching switching network.
ISSN:1742-6588
1742-6596
DOI:10.1088/1742-6596/2427/1/012014