CN118296666A - Data storage early warning method and system for information system - Google Patents
Data storage early warning method and system for information system Download PDFInfo
- Publication number
- CN118296666A CN118296666A CN202410718830.1A CN202410718830A CN118296666A CN 118296666 A CN118296666 A CN 118296666A CN 202410718830 A CN202410718830 A CN 202410718830A CN 118296666 A CN118296666 A CN 118296666A
- Authority
- CN
- China
- Prior art keywords
- response
- access
- early warning
- value
- data
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000013500 data storage Methods 0.000 title claims abstract description 47
- 238000000034 method Methods 0.000 title claims abstract description 35
- 230000004044 response Effects 0.000 claims abstract description 235
- 230000002159 abnormal effect Effects 0.000 claims abstract description 82
- 230000008859 change Effects 0.000 claims abstract description 41
- 238000004458 analytical method Methods 0.000 claims abstract description 24
- 238000012545 processing Methods 0.000 claims description 46
- 230000008569 process Effects 0.000 claims description 11
- 230000001105 regulatory effect Effects 0.000 claims description 10
- 230000001276 controlling effect Effects 0.000 claims description 6
- 230000009286 beneficial effect Effects 0.000 description 3
- 238000007726 management method Methods 0.000 description 2
- 230000007812 deficiency Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
- 238000012502 risk assessment Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
- G06F21/78—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F12/00—Accessing, addressing or allocating within memory systems or architectures
- G06F12/14—Protection against unauthorised use of memory or access to memory
- G06F12/1416—Protection against unauthorised use of memory or access to memory by checking the object accessibility, e.g. type of access defined by the memory independently of subject rights
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Computer Hardware Design (AREA)
- Software Systems (AREA)
- Alarm Systems (AREA)
Abstract
The invention belongs to the technical field of data security, and provides a data storage early warning method and system for an information system, wherein the method comprises the following steps: response data of the storage unit are obtained in real time, the response data are compared, an early warning response period is obtained, abnormal data of the early warning response period are obtained, and analysis is conducted, so that early warning abnormal values are obtained; comparing and analyzing the early warning abnormal values to obtain early warning signals; acquiring real-time access data of a storage unit, analyzing by combining response data to obtain access interference ratio, and analyzing the access interference ratio to obtain a rule influence value; judging whether a proportional influence relation exists between the change of the access times and the change of the response rate according to the rule influence value; the access regulation and control coefficient is obtained to regulate and control the access of the storage unit, and the invention performs early warning control on the data storage in time, thereby ensuring the safety of the data storage.
Description
Technical Field
The invention belongs to the technical field of data security, and particularly relates to a data storage early warning method and system for an information system.
Background
With the rapid development of information technology, information systems are increasingly used in various industries. Data storage is a core of an information system, and its security and stability are critical to the overall operation of the system. However, in practical applications, various risks are often faced in the data storage process. Therefore, how to effectively early warn and prevent these risks becomes a current urgent problem to be solved.
One chinese patent application with publication number CN116633689a discloses a data storage risk early warning method and system based on network security analysis, comprising: obtaining safety environment data; performing risk assessment on the security environment data based on a network security expert system to obtain a network risk level; acquiring a plurality of real-time protection measures and generating a safety protection level; when the network risk level is smaller than the security protection level, generating a data storable time window; identifying the data storage object based on the data storable time window, and generating expected storage time when the identification passes; and receiving the storage data, monitoring the storage process, and generating abnormal storage early warning information to perform data storage management when the data storage time is longer than the expected storage time.
In the prior art, storage early warning management is achieved by analyzing the network risk level and the security protection level, but the stored data access is analyzed under the normal actual condition, so that effective early warning can be carried out on the data storage under the condition that the network security cannot be ensured.
Therefore, the invention provides a data storage early warning method and system for an information system.
Disclosure of Invention
In order to overcome the deficiencies of the prior art, at least one technical problem presented in the background art is solved.
The invention realizes real-time early warning analysis of data storage, is beneficial to alarming before abnormal data storage, is convenient for timely early warning control, and judges whether a proportional influence relationship exists between the change of the access times and the change of the response speed by carrying out combined analysis on the access data and the response data of the storage unit, is beneficial to effectively analyzing and positioning the influence reason of the early warning of the data storage, and then acquires the access times regulation value to regulate and control the access of the storage unit.
The technical scheme adopted for solving the technical problems is as follows: a data storage early warning method and system for an information system comprises the following steps:
step one: response data of the storage unit are obtained in real time, the response data are compared, an early warning response period is obtained, abnormal data of the early warning response period are obtained, product processing is carried out on the abnormal data, and an early warning abnormal value is obtained through output;
Step two: comparing and analyzing the early warning abnormal values to obtain early warning signals;
Step three: based on the generated early warning signal, acquiring real-time access data of the storage unit, wherein the real-time access data comprises access times, based on the combination analysis of the real-time access data and response data, obtaining access interference ratio, and analyzing the access interference ratio to obtain a rule influence value;
Step four: judging whether a proportional influence relation exists between the change of the access times and the change of the response rate according to the rule influence value, and generating an influence signal, wherein the influence signal comprises an access influence signal and a non-access influence signal;
step five: based on the generated access influence signal, an access regulation coefficient is obtained, and the access of the storage unit is regulated;
the access regulation coefficient comprises an access frequency regulation value and a target access regulation duration.
The invention further adopts the technical scheme that: the response data comprises a response speed value, the response speed value is compared and analyzed to obtain a response abnormal signal, and a time period in which the response signal appears is marked as an early warning response period;
if the response speed value is greater than or equal to the response standard speed value, generating a response normal signal;
if the response speed value is smaller than the response standard speed value, generating a response abnormal signal;
the abnormal data of the early warning response time period comprises a duration representation value and a response degree representation value, and the duration representation value and the response degree representation value are subjected to product processing to obtain an early warning abnormal value.
The invention further adopts the technical scheme that: the obtaining process of the duration representation value comprises the following steps:
performing ratio processing on the duration corresponding to the early warning response time period and the preset response time period to obtain a duration representation value;
The obtaining process of the response degree representation value comprises the following steps:
All response speed values of the early warning response time period are obtained, difference processing is carried out on the response speed values and the response standard speed values respectively to obtain response abnormal deviation values, summation and average value obtaining are carried out on all the obtained response abnormal deviation values to obtain response abnormal deviation average value, ratio processing is carried out on the response abnormal deviation average value and the response standard speed values to obtain response degree representation values.
The invention further adopts the technical scheme that: and comparing the early warning abnormal value with an early warning abnormal threshold value, and generating an early warning signal if the early warning abnormal value is larger than the early warning abnormal threshold value.
The invention further adopts the technical scheme that: dividing the early warning response time period into a plurality of early warning response sub-time periods, acquiring a response rate value at the beginning of the early warning response sub-time period and a response rate value at the end of the early warning response sub-time period, and taking an absolute value of a result obtained by performing difference processing on the response rate value to obtain a response rate deviation value in the early warning response sub-time period;
acquiring the access times at the beginning and the access times at the end of the early warning response subperiod, and taking the absolute value of the result obtained by performing difference processing on the access times to obtain the access times deviation value in the early warning response subperiod;
and carrying out difference processing on the response rate deviation value and the access frequency deviation value in the early warning response subperiod to obtain the access interference ratio.
The invention further adopts the technical scheme that: summing all the access interference ratios, taking an average value to obtain an access interference average value ratio, carrying out difference processing on the access interference ratio and the access interference average value ratio, taking an absolute value of the difference value to obtain an access interference deviation ratio, and comparing the access interference deviation ratio with an access interference deviation ratio threshold value;
If the access interference deviation ratio is smaller than or equal to the access interference deviation ratio threshold, marking an early warning response subperiod corresponding to the access interference deviation ratio as a proportional change subperiod;
Counting the number of the proportion change sub-periods and the number of the early warning response sub-periods, and carrying out ratio processing on the number of the proportion change sub-periods and the number of the early warning response sub-periods to obtain a rule influence value.
The invention further adopts the technical scheme that: and comparing the rule influence value with a rule influence threshold, if the rule influence value is larger than or equal to the rule influence threshold, indicating that a proportional influence relationship exists between the change of the access times and the change of the response rate, and generating an access influence signal.
The invention further adopts the technical scheme that: in the fifth step, access interference ratios in all proportion change subintervals are obtained, and are summed and averaged to obtain a target access interference ratio;
Acquiring a response abnormal deviation mean value corresponding to an end time point in an early warning response period, and performing ratio processing on the response abnormal deviation mean value and a target access interference ratio to obtain an access frequency regulation value;
performing difference processing on the duration corresponding to the early warning response time period and the preset response time period to obtain a first access regulation duration;
acquiring the storage total amount of frequently accessed files in files which are not backed up in a storage unit of the early warning response time period at the end time point of the early warning response time period;
Performing ratio processing on the storage total amount of frequently accessed files in the files which are not backed up in the storage unit and the average backup rate of the storage unit to obtain backup time, wherein the backup time is used as a second access regulation duration;
comparing the first access regulation duration with the second access regulation duration:
If the first access regulation duration is longer than the second access regulation duration, taking the first access regulation duration as a target access regulation duration;
If the first access regulation duration is equal to the second access regulation duration, taking the first access regulation duration or the second access regulation duration as a target access regulation duration;
And if the first access regulation duration is smaller than the second access regulation duration, taking the second access regulation duration as the target access regulation duration.
The invention further adopts the technical scheme that: the frequent access file is obtained by the following steps:
acquiring all files in a storage unit, acquiring the total accessed times of the files in an early warning response period, and performing ratio processing on the total accessed times of the files in the early warning response period and the total accessed times of the storage unit in the early warning response period to obtain the accessed times ratio of the files;
Comparing the accessed times ratio of the file with an accessed times ratio threshold:
if the accessed frequency ratio of the files is greater than or equal to the access frequency ratio threshold value, marking the files as frequently accessed files;
If the accessed number ratio of files is smaller than the access number ratio threshold, the files are marked as non-frequently accessed files.
A data storage warning system for an information system, comprising:
The early warning abnormal data acquisition module: response data of the storage unit are obtained in real time, the response data are compared, an early warning response period is obtained, abnormal data of the early warning response period are obtained, product processing is carried out on the abnormal data, and an early warning abnormal value is obtained through output;
early warning analysis module: comparing and analyzing the early warning abnormal values to obtain early warning signals;
An influence data acquisition module: based on the generated early warning signal, acquiring real-time access data of the storage unit, based on the combination analysis of the real-time access data and the response data, obtaining access interference ratio, and analyzing the access interference ratio to obtain a rule influence value;
Impact analysis module: judging whether a proportional influence relation exists between the change of the access times and the change of the response rate according to the rule influence value, and generating an influence signal, wherein the influence signal comprises an access influence signal and a non-access influence signal;
And a regulation and control limiting module: and based on the generated access influence signal, acquiring an access regulation coefficient, and regulating and controlling the access of the storage unit.
The beneficial effects of the invention are as follows:
1. According to the invention, the response data of the storage unit is obtained and analyzed in real time to obtain the early warning response time period, whether the early warning is needed or not is judged by the duration of the early warning response time period and the abnormal degree of the response speed in the early warning response time period, the real-time early warning analysis of the data storage is realized, the alarm is favorably carried out before the data storage is abnormal, and the early warning control is conveniently carried out in time.
2. According to the invention, through carrying out combined analysis on the access data and the response data of the storage unit, whether the proportional influence relationship exists between the change of the access times and the change of the response speed is judged, so that the effective analysis and positioning of the influence cause of the data storage early warning are facilitated, and the high-efficiency and targeted early warning regulation and control are facilitated during the data storage early warning.
3. And on the other hand, the target access regulation duration is obtained by analyzing the file data backup condition of the storage unit when data early warning occurs, the regulation and control are more guaranteed, the shortage of the regulation duration is prevented, the abnormal loss or damage of the stored data is caused before the file data backup is not completed, and the safety of data storage is guaranteed.
Drawings
The invention is further described below with reference to the accompanying drawings.
FIG. 1 is a flow chart of early warning analysis in a data storage early warning method for an information system according to an embodiment of the present invention;
FIG. 2 is a flow chart of impact analysis in a data storage pre-warning method for an information system according to a second embodiment of the present invention;
FIG. 3 is a flow chart illustrating a method for early warning of data storage for an information system according to a third embodiment of the present invention
Fig. 4 is a flowchart of a data storage early warning system for an information system according to a fourth embodiment of the present invention.
Detailed Description
The invention is further described in connection with the following detailed description in order to make the technical means, the creation characteristics, the achievement of the purpose and the effect of the invention easy to understand.
Example 1
As shown in fig. 1, a data storage early warning method for an information system according to an embodiment of the present invention includes:
step one: response data of the storage unit are obtained in real time, the response data are compared, an early warning response period is obtained, abnormal data of the early warning response period are obtained, product processing is carried out on the abnormal data, and an early warning abnormal value is obtained through output;
Wherein the response data comprises a response rate value;
In some embodiments, the response rate value is obtained by detecting the storage unit by the storage performance tester;
In some embodiments, comparing and analyzing the response speed value to obtain a response abnormal signal, and marking the time period of the response signal as an early warning response period;
The process of comparing and analyzing the response speed value is to compare the response speed value with a response standard speed value, specifically:
if the response speed value is greater than or equal to the response standard speed value, generating a response normal signal;
if the response speed value is smaller than the response standard speed value, generating a response abnormal signal;
The abnormal data of the early warning response time period comprises a duration representation value and a response degree representation value, and the duration representation value and the response degree representation value are subjected to product processing to obtain an early warning abnormal value;
the obtaining process of the duration representation value comprises the following steps:
Acquiring the duration corresponding to the early warning response time period, and performing ratio processing on the duration corresponding to the early warning response time period and the preset response time period to obtain a duration representation value;
It is to be explained that the preset response time is set by a person skilled in the art according to historical experimental data;
The obtaining process of the response degree representation value comprises the following steps:
Obtaining all response speed values of the early warning response time period, respectively carrying out difference processing on the response speed values and the response standard speed values to obtain response abnormal deviation values, summing all the obtained response abnormal deviation values to obtain an average value of the response abnormal deviation values, and carrying out ratio processing on the response abnormal deviation average value and the response standard speed values to obtain a response degree representation value;
Step two: comparing and analyzing the early warning abnormal values to obtain early warning signals;
In some embodiments, comparing the pre-warning abnormal value with a pre-warning abnormal threshold, if the pre-warning abnormal value is greater than the pre-warning abnormal threshold, generating a pre-warning signal, and if the pre-warning abnormal value is less than or equal to the pre-warning abnormal threshold, not generating the pre-warning signal;
The technical scheme of the embodiment of the invention is as follows: according to the invention, the response data of the storage unit is obtained and analyzed in real time to obtain the early warning response time period, whether the early warning is needed or not is judged by the duration of the early warning response time period and the abnormal degree of the response speed in the early warning response time period, the real-time early warning analysis of the data storage is realized, the alarm is favorably carried out before the data storage is abnormal, and the early warning control is conveniently carried out in time.
Example two
As shown in fig. 2, based on the first embodiment, the data storage early warning method for an information system according to the embodiment of the present invention includes:
Step three: based on the generated early warning signal, acquiring real-time access data of the storage unit, based on the combination analysis of the real-time access data and the response data, obtaining access interference ratio, and analyzing the access interference ratio to obtain a rule influence value;
wherein, the real-time access data comprises access times;
it should be noted that the number of accesses is real-time;
In some embodiments, dividing the early warning response time period into a plurality of early warning response sub-time periods, acquiring a response speed value at the beginning of the early warning response sub-time period and a response speed value at the end of the early warning response sub-time period, taking an absolute value of a result obtained by performing difference processing on the response speed value to obtain a response speed deviation value in the early warning response sub-time period, and similarly, acquiring the access times at the beginning of the early warning response sub-time period and the access times at the end of the early warning response sub-time period, taking the absolute value of the result obtained by performing difference processing on the access times in the early warning response sub-time period to obtain an access time deviation value in the early warning response sub-time period;
performing difference processing on the response rate deviation value and the access frequency deviation value in the early warning response subperiod to obtain an access interference ratio;
Summing all the access interference ratios, taking an average value to obtain an access interference average value ratio, carrying out difference processing on the access interference ratio and the access interference average value ratio, taking an absolute value of the difference value to obtain an access interference deviation ratio, and comparing the access interference deviation ratio with an access interference deviation ratio threshold value, wherein the specific comparison process is as follows:
if the access interference deviation ratio is larger than the access interference deviation ratio threshold, marking an early warning response subperiod corresponding to the access interference deviation ratio as a non-proportional change subperiod;
If the access interference deviation ratio is smaller than or equal to the access interference deviation ratio threshold, marking an early warning response subperiod corresponding to the access interference deviation ratio as a proportional change subperiod;
Counting the number of the proportion change sub-periods and the number of the early warning response sub-periods, and carrying out ratio processing on the number of the proportion change sub-periods and the number of the early warning response sub-periods to obtain a rule influence value;
Step four: judging whether a proportional influence relation exists between the change of the access times and the change of the response rate according to the rule influence value, and generating an influence signal, wherein the influence signal comprises an access influence signal and a non-access influence signal;
in some embodiments, the rule impact value is compared to a rule impact threshold, with the specific comparison process being as follows:
if the rule influence value is greater than or equal to the rule influence threshold, the rule influence value indicates that a proportional influence relationship exists between the change of the access times and the change of the response rate, and an access influence signal is generated;
If the rule influence value is smaller than the rule influence threshold, the influence relation of proportionality does not exist between the change of the access times and the change of the response speed, and a non-access influence signal is generated;
Regulating and controlling the access times of the storage unit based on the generation of the access influence signal, and checking and analyzing other reasons influencing the response speed of the storage unit based on the generation of the non-access signal;
In some embodiments, the checking and analyzing other reasons affecting the response speed of the storage unit include, but are not limited to, checking and analyzing the network and interface speed of the hardware system to which the storage unit belongs;
The technical scheme of the embodiment of the invention is as follows: according to the invention, through carrying out combined analysis on the access data and the response data of the storage unit, whether the proportional influence relationship exists between the change of the access times and the change of the response speed is judged, so that the effective analysis and positioning of the influence cause of the data storage early warning are facilitated, and the high-efficiency and targeted early warning regulation and control are facilitated during the data storage early warning.
Example III
As shown in fig. 3, based on the first embodiment and the second embodiment, the data storage early warning method for an information system according to the embodiment of the present invention includes:
step five: based on the generated access influence signal, an access regulation coefficient is obtained, and the access of the storage unit is regulated;
the access regulation coefficient comprises an access frequency regulation value and a target access regulation duration;
It should be noted that, the target access control duration indicates: regulating and controlling the real-time access times of the storage unit according to the access times regulating and controlling values, and continuously limiting the duration required by limiting the access of the storage unit according to the regulated and controlled real-time access times;
In some embodiments, when an early warning signal appears, access interference ratios in all proportion change subintervals are obtained, and summed and averaged to obtain a target access interference ratio;
Acquiring a response abnormal deviation mean value corresponding to an end time point in an early warning response period, and performing ratio processing on the response abnormal deviation mean value and a target access interference ratio to obtain an access frequency regulation value;
in some practical application examples, performing difference processing on a duration corresponding to the early warning response time period and a preset response duration to obtain a first access regulation duration;
acquiring all files in a storage unit, acquiring the total accessed times of the files in an early warning response period, and performing ratio processing on the total accessed times of the files in the early warning response period and the total accessed times of the storage unit in the early warning response period to obtain the accessed times ratio of the files;
Comparing the accessed times ratio of the file with an accessed times ratio threshold:
if the accessed frequency ratio of the files is greater than or equal to the access frequency ratio threshold value, marking the files as frequently accessed files;
if the accessed frequency ratio of the files is smaller than the access frequency ratio threshold value, marking the files as non-frequent access files;
acquiring the storage total amount of frequently accessed files in files which are not backed up in a storage unit of the early warning response time period at the end time point of the early warning response time period;
Performing ratio processing on the storage total amount of frequently accessed files in the files which are not backed up in the storage unit and the average backup rate of the storage unit to obtain backup time, wherein the backup time is used as a second access regulation duration;
In some embodiments, the first access regulation duration is compared to the second access regulation duration:
If the first access regulation duration is longer than the second access regulation duration, taking the first access regulation duration as a target access regulation duration;
If the first access regulation duration is equal to the second access regulation duration, taking the first access regulation duration or the second access regulation duration as a target access regulation duration;
If the first access regulation duration is smaller than the second access regulation duration, taking the second access regulation duration as a target access regulation duration;
The average backup rate of the storage unit is obtained by the following way:
acquiring the storage total amount of all files backed up by a storage unit in a plurality of history periods, and carrying out ratio processing on the storage total amount and the sum of the time durations of the plurality of history periods to obtain the average backup rate of the storage unit;
The technical scheme of the embodiment of the invention is as follows: and on the other hand, the target access regulation duration is obtained by analyzing the file data backup condition of the storage unit when data early warning occurs, the regulation and control are more guaranteed, the shortage of the regulation duration is prevented, the abnormal loss or damage of the stored data is caused before the file data backup is not completed, and the safety of data storage is guaranteed.
Example IV
As shown in fig. 4, a data storage early warning system for an information system according to an embodiment of the present invention includes:
The early warning abnormal data acquisition module: response data of the storage unit are obtained in real time, the response data are compared, an early warning response period is obtained, abnormal data of the early warning response period are obtained, product processing is carried out on the abnormal data, and an early warning abnormal value is obtained through output;
early warning analysis module: comparing and analyzing the early warning abnormal values to obtain early warning signals;
An influence data acquisition module: based on the generated early warning signal, acquiring real-time access data of the storage unit, based on the combination analysis of the real-time access data and the response data, obtaining access interference ratio, and analyzing the access interference ratio to obtain a rule influence value;
Impact analysis module: judging whether a proportional influence relation exists between the change of the access times and the change of the response rate according to the rule influence value, and generating an influence signal, wherein the influence signal comprises an access influence signal and a non-access influence signal;
And a regulation and control limiting module: and based on the generated access influence signal, acquiring an access regulation coefficient, and regulating and controlling the access of the storage unit.
The foregoing has shown and described the basic principles, principal features and advantages of the invention. It will be understood by those skilled in the art that the present invention is not limited to the embodiments described above, and that the above embodiments and descriptions are merely illustrative of the principles of the present invention, and various changes and modifications may be made without departing from the spirit and scope of the invention, which is defined in the appended claims. The scope of the invention is defined by the appended claims and equivalents thereof.
Claims (10)
1. A data storage early warning method for an information system is characterized in that: comprising the following steps:
step one: response data of the storage unit are obtained in real time, the response data are compared, an early warning response period is obtained, abnormal data of the early warning response period are obtained, product processing is carried out on the abnormal data, and an early warning abnormal value is obtained through output;
Step two: comparing and analyzing the early warning abnormal values to obtain early warning signals;
Step three: based on the generated early warning signal, acquiring real-time access data of the storage unit, wherein the real-time access data comprises access times, based on the combination analysis of the real-time access data and response data, obtaining access interference ratio, and analyzing the access interference ratio to obtain a rule influence value;
Step four: judging whether a proportional influence relation exists between the change of the access times and the change of the response rate according to the rule influence value, and generating an influence signal, wherein the influence signal comprises an access influence signal and a non-access influence signal;
step five: based on the generated access influence signal, an access regulation coefficient is obtained, and the access of the storage unit is regulated;
the access regulation coefficient comprises an access frequency regulation value and a target access regulation duration.
2. The method for data storage and pre-warning for an information system according to claim 1, wherein: the response data comprises a response speed value, the response speed value is compared and analyzed to obtain a response abnormal signal, and a time period in which the response signal appears is marked as an early warning response period;
if the response speed value is greater than or equal to the response standard speed value, generating a response normal signal;
if the response speed value is smaller than the response standard speed value, generating a response abnormal signal;
the abnormal data of the early warning response time period comprises a duration representation value and a response degree representation value, and the duration representation value and the response degree representation value are subjected to product processing to obtain an early warning abnormal value.
3. The method for data storage and pre-warning for an information system according to claim 2, wherein: the obtaining process of the duration representation value comprises the following steps:
performing ratio processing on the duration corresponding to the early warning response time period and the preset response time period to obtain a duration representation value;
The obtaining process of the response degree representation value comprises the following steps:
All response speed values of the early warning response time period are obtained, difference processing is carried out on the response speed values and the response standard speed values respectively to obtain response abnormal deviation values, summation and average value obtaining are carried out on all the obtained response abnormal deviation values to obtain response abnormal deviation average value, ratio processing is carried out on the response abnormal deviation average value and the response standard speed values to obtain response degree representation values.
4. The method for data storage and pre-warning for an information system according to claim 2, wherein: and comparing the early warning abnormal value with an early warning abnormal threshold value, and generating an early warning signal if the early warning abnormal value is larger than the early warning abnormal threshold value.
5. The method for data storage and pre-warning for an information system according to claim 2, wherein: dividing the early warning response time period into a plurality of early warning response sub-time periods, acquiring a response rate value at the beginning of the early warning response sub-time period and a response rate value at the end of the early warning response sub-time period, and taking an absolute value of a result obtained by performing difference processing on the response rate value to obtain a response rate deviation value in the early warning response sub-time period;
acquiring the access times at the beginning and the access times at the end of the early warning response subperiod, and taking the absolute value of the result obtained by performing difference processing on the access times to obtain the access times deviation value in the early warning response subperiod;
and carrying out difference processing on the response rate deviation value and the access frequency deviation value in the early warning response subperiod to obtain the access interference ratio.
6. The method for data storage and pre-warning for an information system according to claim 5, wherein: summing all the access interference ratios, taking an average value to obtain an access interference average value ratio, carrying out difference processing on the access interference ratio and the access interference average value ratio, taking an absolute value of the difference value to obtain an access interference deviation ratio, and comparing the access interference deviation ratio with an access interference deviation ratio threshold value;
If the access interference deviation ratio is smaller than or equal to the access interference deviation ratio threshold, marking an early warning response subperiod corresponding to the access interference deviation ratio as a proportional change subperiod;
Counting the number of the proportion change sub-periods and the number of the early warning response sub-periods, and carrying out ratio processing on the number of the proportion change sub-periods and the number of the early warning response sub-periods to obtain a rule influence value.
7. The method for data storage and pre-warning for an information system according to claim 1, wherein: and comparing the rule influence value with a rule influence threshold, if the rule influence value is larger than or equal to the rule influence threshold, indicating that a proportional influence relationship exists between the change of the access times and the change of the response rate, and generating an access influence signal.
8. The method for data storage and pre-warning for an information system according to claim 1, wherein: in the fifth step, access interference ratios in all proportion change subintervals are obtained, and are summed and averaged to obtain a target access interference ratio;
Acquiring a response abnormal deviation mean value corresponding to an end time point in an early warning response period, and performing ratio processing on the response abnormal deviation mean value and a target access interference ratio to obtain an access frequency regulation value;
performing difference processing on the duration corresponding to the early warning response time period and the preset response time period to obtain a first access regulation duration;
acquiring the storage total amount of frequently accessed files in files which are not backed up in a storage unit of the early warning response time period at the end time point of the early warning response time period;
Performing ratio processing on the storage total amount of frequently accessed files in the files which are not backed up in the storage unit and the average backup rate of the storage unit to obtain backup time, wherein the backup time is used as a second access regulation duration;
comparing the first access regulation duration with the second access regulation duration:
If the first access regulation duration is longer than the second access regulation duration, taking the first access regulation duration as a target access regulation duration;
If the first access regulation duration is equal to the second access regulation duration, taking the first access regulation duration or the second access regulation duration as a target access regulation duration;
And if the first access regulation duration is smaller than the second access regulation duration, taking the second access regulation duration as the target access regulation duration.
9. The method for data storage and pre-warning for an information system according to claim 8, wherein: the frequent access file is obtained by the following steps:
acquiring all files in a storage unit, acquiring the total accessed times of the files in an early warning response period, and performing ratio processing on the total accessed times of the files in the early warning response period and the total accessed times of the storage unit in the early warning response period to obtain the accessed times ratio of the files;
Comparing the accessed times ratio of the file with an accessed times ratio threshold:
if the accessed frequency ratio of the files is greater than or equal to the access frequency ratio threshold value, marking the files as frequently accessed files;
If the accessed number ratio of files is smaller than the access number ratio threshold, the files are marked as non-frequently accessed files.
10. A data storage early warning system for an information system is characterized in that: the system implements the pre-warning method according to any one of the preceding claims 1-9, comprising:
The early warning abnormal data acquisition module: response data of the storage unit are obtained in real time, the response data are compared, an early warning response period is obtained, abnormal data of the early warning response period are obtained, product processing is carried out on the abnormal data, and an early warning abnormal value is obtained through output;
early warning analysis module: comparing and analyzing the early warning abnormal values to obtain early warning signals;
An influence data acquisition module: based on the generated early warning signal, acquiring real-time access data of the storage unit, based on the combination analysis of the real-time access data and the response data, obtaining access interference ratio, and analyzing the access interference ratio to obtain a rule influence value;
Impact analysis module: judging whether a proportional influence relation exists between the change of the access times and the change of the response rate according to the rule influence value, and generating an influence signal, wherein the influence signal comprises an access influence signal and a non-access influence signal;
And a regulation and control limiting module: and based on the generated access influence signal, acquiring an access regulation coefficient, and regulating and controlling the access of the storage unit.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202410718830.1A CN118296666B (en) | 2024-06-05 | 2024-06-05 | Data storage early warning method and system for information system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202410718830.1A CN118296666B (en) | 2024-06-05 | 2024-06-05 | Data storage early warning method and system for information system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN118296666A true CN118296666A (en) | 2024-07-05 |
| CN118296666B CN118296666B (en) | 2024-10-22 |
Family
ID=91681323
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202410718830.1A Active CN118296666B (en) | 2024-06-05 | 2024-06-05 | Data storage early warning method and system for information system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN118296666B (en) |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2021012745A1 (en) * | 2019-07-22 | 2021-01-28 | 深圳壹账通智能科技有限公司 | Knowledge map-based data early-warning method and apparatus, and computer device |
| WO2021109314A1 (en) * | 2019-12-06 | 2021-06-10 | 网宿科技股份有限公司 | Method, system and device for detecting abnormal data |
| CN116488843A (en) * | 2023-02-07 | 2023-07-25 | 山东空天网安科技发展有限公司 | User behavior anomaly detection system and method based on cluster analysis |
| CN116865817A (en) * | 2023-07-14 | 2023-10-10 | 长江水利委员会水文局 | Station interference early warning system for hydrologic communication based on data analysis |
| CN117319047A (en) * | 2023-10-09 | 2023-12-29 | 北京易财花科技有限公司 | Network path analysis method and system based on network security anomaly detection |
| CN117370957A (en) * | 2023-12-06 | 2024-01-09 | 吉林省东启铭网络科技有限公司 | Data security access system based on big data |
| CN117852003A (en) * | 2024-02-04 | 2024-04-09 | 杭州全顺科技有限公司 | Account monitoring early warning management method based on data analysis |
| CN117912186A (en) * | 2023-12-15 | 2024-04-19 | 深圳市铁越电气有限公司 | Intelligent security linkage early warning system based on big data service |
-
2024
- 2024-06-05 CN CN202410718830.1A patent/CN118296666B/en active Active
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2021012745A1 (en) * | 2019-07-22 | 2021-01-28 | 深圳壹账通智能科技有限公司 | Knowledge map-based data early-warning method and apparatus, and computer device |
| WO2021109314A1 (en) * | 2019-12-06 | 2021-06-10 | 网宿科技股份有限公司 | Method, system and device for detecting abnormal data |
| CN116488843A (en) * | 2023-02-07 | 2023-07-25 | 山东空天网安科技发展有限公司 | User behavior anomaly detection system and method based on cluster analysis |
| CN116865817A (en) * | 2023-07-14 | 2023-10-10 | 长江水利委员会水文局 | Station interference early warning system for hydrologic communication based on data analysis |
| CN117319047A (en) * | 2023-10-09 | 2023-12-29 | 北京易财花科技有限公司 | Network path analysis method and system based on network security anomaly detection |
| CN117370957A (en) * | 2023-12-06 | 2024-01-09 | 吉林省东启铭网络科技有限公司 | Data security access system based on big data |
| CN117912186A (en) * | 2023-12-15 | 2024-04-19 | 深圳市铁越电气有限公司 | Intelligent security linkage early warning system based on big data service |
| CN117852003A (en) * | 2024-02-04 | 2024-04-09 | 杭州全顺科技有限公司 | Account monitoring early warning management method based on data analysis |
Non-Patent Citations (3)
| Title |
|---|
| QIN, XB等: "Research on Monitoring and Early Warning of the Mine Backfill System Based on Blockchain Technology", APPLIED SCIENCES-BASEL, vol. 13, no. 1, 24 January 2023 (2023-01-24) * |
| 卢艳军;蔡国浩;张靖;: "广域网入侵异常检测技术实现", 中国新通信, no. 19, 5 October 2006 (2006-10-05) * |
| 张险峰, 秦志光, 刘锦德: "网络安全分布式预警体系结构研究", 计算机应用, no. 05, 28 May 2004 (2004-05-28) * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN118296666B (en) | 2024-10-22 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN115858303B (en) | Zabbix-based server performance monitoring method and system | |
| CN117454114B (en) | Subway tunnel tunneling blasting vibration safety monitoring device based on multi-point location distribution | |
| CN117318297A (en) | Alarm threshold setting method, system, equipment and medium based on state monitoring | |
| CN114878934A (en) | Electric energy consumption data abnormity early warning method | |
| CN118281912A (en) | Intelligent new energy storage network management method and system | |
| CN115473331B (en) | Digital twin power grid electricity consumption monitoring system based on dynamic modeling | |
| CN118296666B (en) | Data storage early warning method and system for information system | |
| CN108921223B (en) | Server cooling system, control method, computer program and computer | |
| CN117278425B (en) | Information technology operation and maintenance management method and system | |
| CN113805564A (en) | Equipment fault early warning and diagnosis system based on CEP | |
| CN117521109A (en) | Computer data transmission supervisory systems based on data analysis | |
| CN117093943A (en) | Power consumption monitoring and early warning method and device | |
| CN112737120B (en) | Regional power grid control report generation method and device and computer equipment | |
| CN115392380A (en) | Method and device for identifying abnormal data of partial discharge online monitoring and storage medium | |
| CN113918372A (en) | Early warning system of data development platform based on flink realization | |
| CN117973267B (en) | Abnormality detection method for fuel gas data | |
| CN114900419B (en) | Digital cable and method for intelligently reporting parameters | |
| CN116596336B (en) | State evaluation method and device of electronic equipment, electronic equipment and storage medium | |
| CN117551972B (en) | Magnetron sputtering cooling intracavity reaction simulation display system | |
| CN113723725B (en) | Risk early warning method and device for operation process of chemical device and terminal equipment | |
| CN118504981A (en) | Security equipment energy consumption intelligent management system based on data analysis | |
| CN118033310A (en) | Cable intelligent alarm system and method based on multidimensional factors | |
| CN116859106A (en) | Intelligent residual current monitoring and risk robust early warning method and system | |
| CN117541097A (en) | Digital power data analysis method and system | |
| CN115189350A (en) | Real-time electricity price attack detection method and device for power grid user side and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |