基于多节点协同的电力网络靶场混合入侵识别方法

研究了基于多节点协同的电力网络靶场混合入侵识别方法，提升电力网络对混合入侵行为的防御能力。依据多节点协同的分层协作结构，设置电力网络靶场训练平台内的通信节点作为感知节点，利用感知节点感知混合入侵数据，将感知结果传送至电力网络靶场训练平台的中心节点，利用中心节点融合混合入侵感知数据形成聚合节点。协同融合层的聚合节点将协同融合结果传送至识别层，识别层利用混合入侵识别模块，依据K-means聚类算法对混合入侵数据的聚类结果，构建C4.5决策树，利用决策树输出电力网络靶场混合入侵识别结果。实验结果表明，该方法可以精准识别电力网络靶场混合入侵行为，识别精度高于98%。

Hybrid Intrusion Identification Method for Power Network Range Based on Multi-node Cooperation

A hybrid intrusion identification method based on multi-node cooperation in power network shooting range is studied to improve the defense capability of power network against hybrid intrusion behavior. Based on hierarchical collaborative structure of multi-node cooperative, set up the electric power network as perception communication node within the range training platform, using the data from the mixed aware of node invasion will perceive the results sent to the center of the power network range training platform node, using data fusion hybrid intrusion awareness center node form aggregation node. The aggregation node of the collaborative fusion layer sends the collaborative fusion results to the recognition layer, which uses the hybrid intrusion recognition module to cluster the hybrid intrusion data according to the K-means clustering algorithm, constructs the C4.5 decision tree, and uses the decision tree to output the hybrid intrusion recognition results of the power network range. The experimental results show that the method can accurately identify the hybrid intrusion behavior of power network range, and the recognition accuracy is higher than 98%.