Disclosure of Invention
The invention aims to provide an ERP information transmission safety monitoring system, which obtains the use state of ERP information transmission equipment by obtaining the state data of the ERP information transmission equipment, namely, processing the CPU use rate, the stored state value and the network state value of the ERP information transmission equipment, namely, the lower the CPU use rate, the higher the memory idle rate and the higher the memory caching efficiency, the better the ERP information transmission equipment use state, thereby completing the evaluation of the ERP information transmission equipment state, completing the ERP information transmission under a good operating environment, and improving the ERP information transmission stability and safety.
The aim of the invention can be achieved by the following technical scheme:
an ERP information transmission security monitoring system, comprising:
the state analysis module is used for monitoring state data of the ERB information transmission equipment, obtaining a state effective value of the ERB information transmission equipment according to the state data of the ERB information transmission equipment, obtaining an ERP information transmission equipment operation signal based on the state effective value of the ERB information transmission equipment, and transmitting the ERP information transmission equipment operation signal to the cloud management and control platform;
the ERP information transmission equipment operation signals comprise ERP information transmission equipment operation normal signals and ERP information transmission equipment operation abnormal signals;
the decision analysis module receives an ERP information transmission equipment operation normal signal transmitted by the cloud management and control platform, monitors ERP information transmission behavior data, obtains target file transmission ratios based on the ERP information transmission behavior data, processes a plurality of target file transmission ratios, and completes monitoring of abnormality of the target file ERP information transmission equipment;
when the target file is abnormal, a file abnormal signal is obtained;
when the ERP information transmission equipment is abnormal, an operation abnormal signal of the ERP information transmission equipment is obtained;
and transmitting the file abnormal signal and the ERP information transmission equipment operation abnormal signal to a cloud management and control platform.
As a further scheme of the invention: the state data of the ERP information transmission equipment comprises CPU utilization rate, stored state value and network state value;
and obtaining the state effective value of the ERP information transmission equipment by carrying out weighting processing on the CPU utilization rate, the stored state value and the network state value.
As a further scheme of the invention: if the state effective value of the ERP information transmission equipment is more than or equal to the state effective value threshold of the ERP information transmission equipment, indicating that the operation state of the ERP information transmission equipment is normal, and obtaining an operation normal signal of the ERP information transmission equipment;
and if the state effective value of the ERP information transmission equipment is less than the state effective value threshold of the ERP information transmission equipment, indicating that the operation state of the ERP information transmission equipment is abnormal, and obtaining an operation abnormal signal of the ERP information transmission equipment.
As a further scheme of the invention: the ERP information transmission behavior data comprises file transmission rate, file transmission time rate and file transmission packet loss rate;
the ERP information file which is required to be transmitted by the ERP information transmission equipment is recorded as a target file;
and calculating the ratio of the file transmission packet loss rate of the target file to the sum of the file transmission rate and the file transmission time rate to obtain the target file transmission ratio.
As a further scheme of the invention: the transmission ratio of the target file is marked as CSB;
presetting a first limit value of a target file transmission ratio threshold as CSB1 and a second limit value as CSB2, wherein CSB1 is smaller than CSB2;
taking the number of the target files as an X axis, taking the target file transmission ratio of teammates of the target files as a Y axis, and establishing a plane coordinate system;
in the plane coordinate system, a lower standard datum line parallel to the X axis is made by a first limit value CSB1 of a target file transfer ratio threshold value;
taking a second limit value CSB2 of the target file transfer ratio threshold value as an upper standard datum line parallel to the X axis;
and obtaining a limit value range interval of the transmission ratio of the target file.
As a further scheme of the invention: drawing points in a plane coordinate system according to the target file transmission ratio of a plurality of target files on ERP information transmission equipment in time sequence, and connecting the points of the plurality of target files in the plane coordinate system by using a smooth curve to obtain a target file transmission ratio image;
acquiring an image of the transmission ratio image of the target file above a second limit value, marking the image above the second limit value as an out-of-limit image, and acquiring the out-of-limit image area;
if the area of the out-of-limit image is within the preset out-of-limit image area range, the out-of-limit image is marked as a normal out-of-limit image;
if the area of the out-of-limit image exceeds the preset out-of-limit image area range, the out-of-limit image is marked as an abnormal out-of-limit image.
As a further scheme of the invention: marking the first abnormal out-of-limit image as a verification target image, and identifying a target file transmission ratio image after the verification of the target image;
if the target file transmission ratio image after the target image is checked is returned to the limit value range interval of the target file transmission ratio in a gradually downward running trend, the target file abnormality corresponding to the checked target image is explained, and a file abnormality signal is generated;
and if the target file transmission ratio image after the target image is verified is not in the limit value range interval of the target file transmission ratio in a gradual downward running trend, indicating that the ERP information transmission equipment for transmitting the target file is abnormal, and generating an ERP information transmission equipment operation abnormal signal.
As a further scheme of the invention: the target file transfer ratio image does not run gradually downward including the target file transfer ratio image after validating the target image running gradually upward away from the limit value range area of the target file transfer ratio or in a linearly fluctuating manner above the upper standard reference line.
As a further scheme of the invention: the system also comprises a monitoring analysis module, wherein the monitoring analysis module receives the file abnormal signal and detects the ERP information file corresponding to the file abnormal signal;
and calculating the ratio of the abnormal transmission ratio of the target file to obtain the abnormal ratio of the target file, and identifying the abnormal degree of the target file based on the abnormal ratio of the target file.
As a further scheme of the invention: the ERP information transmission equipment operation abnormal signal detection system comprises an ERP information transmission equipment operation abnormal signal detection module, a monitoring analysis module and a control analysis module, wherein the monitoring analysis module receives the ERP information transmission equipment operation abnormal signal and detects ERP information transmission equipment corresponding to the ERP information transmission equipment operation abnormal signal;
the detection of ERP information transmission equipment comprises equipment state monitoring, network performance monitoring, log analysis monitoring and equipment virus detection.
The invention has the beneficial effects that:
(1) The invention obtains the use state of the ERP information transmission equipment by obtaining the state data of the ERP information transmission equipment, namely, processing the CPU use rate, the stored state value and the network state value of the ERP information transmission equipment, namely, the lower the CPU use rate, the higher the memory idle rate and the higher the memory caching efficiency, the better the ERP information transmission equipment use state is, thereby completing the evaluation of the ERP information transmission equipment state, completing the ERP information transmission under a good operation environment, and improving the ERP information transmission stability and safety;
(2) When the ERP information transmission equipment operates a normal signal, ERP information transmission behavior data are obtained, namely, a target file transmission ratio is obtained by processing a file transmission rate, a file transmission time rate and a file transmission packet loss rate, then, image processing is carried out on a first limit value and a second limit value of a target file transmission ratio threshold value, an out-of-limit image area in the target file transmission process is obtained, a verification target image is obtained by identifying the out-of-limit image area, and the corresponding target file abnormality in the transmission abnormality process and ERP information transmission equipment abnormality are identified based on a trend curve of the verification target image, namely, quick response to an abnormal state in the ERP information transmission process is completed, so that management staff can timely process the ERP information transmission abnormality, and file loss in the ERP information transmission process is effectively prevented.
Detailed Description
The following description of the embodiments of the present invention will be made clearly and completely with reference to the accompanying drawings, in which it is apparent that the embodiments described are only some embodiments of the present invention, but not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
1-2, the invention relates to an ERP information transmission safety monitoring system, which comprises a state analysis module, a decision analysis module, a monitoring analysis module and a cloud management and control platform;
the state analysis module, the decision analysis module and the monitoring analysis module are electrically connected with the cloud control platform;
the state analysis module is used for acquiring state data of the ERB information transmission equipment, obtaining a state effective value of the ERB information transmission equipment according to the state data of the ERB information transmission equipment, obtaining an ERP information transmission equipment operation signal based on the state effective value of the ERP information transmission equipment, and transmitting the ERP information transmission equipment operation signal to the cloud management and control platform;
the ERP information transmission equipment operation signals comprise ERP information transmission equipment operation normal signals and ERP information transmission equipment operation abnormal signals;
the decision analysis module receives an ERP information transmission equipment operation normal signal transmitted by the cloud management and control platform, acquires ERP information transmission behavior data, obtains target file transmission ratios based on the ERP information transmission behavior data, processes a plurality of target file transmission ratios, and completes recognition of target file ERP information transmission equipment abnormality;
when the target file is abnormal, a file abnormal signal is obtained, and when the ERP information transmission equipment is abnormal, an ERP information transmission equipment operation abnormal signal is obtained;
transmitting the file abnormal signal and the ERP information transmission equipment operation abnormal signal to a cloud management and control platform;
when the monitoring analysis module receives the file abnormal signal or the ERP information transmission equipment operation abnormal signal transmitted by the cloud Guan Kong platform, the ERP information file corresponding to the file abnormal signal or the ERP information transmission equipment corresponding to the ERP information transmission equipment operation abnormal signal is detected.
The ERP information transmission equipment comprises a CPU (Central processing Unit) utilization rate, a storage state value and a network state value, wherein the state data of the ERP information transmission equipment comprises a CPU utilization rate, a storage state value and a network state value;
the CPU utilization rate is checked through a device task manager or checked by using a performance monitor and a third-party tool, and the CPU utilization rate is marked as Ci;
wherein the third party tool comprises a Process Explorer or Resource Monitor;
the acquisition process of the stored state value is as follows:
acquiring the memory occupancy rate of ERP information transmission equipment, and marking as Nz;
obtaining the memory idle rate of ERP information transmission equipment, and marking the memory idle rate as Nx;
obtaining the memory caching efficiency of ERP information transmission equipment and marking as Nh;
i.e. by the formulaCalculating to obtain a stored state value Ni, wherein a1, a2 and a3 are preset proportionality coefficients and are all larger than zero;
the acquisition process of the network state value comprises the following steps:
acquiring network delay time of ERP information transmission equipment through Ping test, and marking as Ww;
obtaining a corresponding network speed based on the network delay time of the ERP information transmission equipment, and marking the network speed as Wu;
performing product operation on the network delay time Ww and the network speed Wu to obtain a network state value and marking the network state value as Wi;
the CPU utilization rate Ci, the stored state value Ni and the network state value Wi are weighted, so that a state effective value of the ERP information transmission equipment is obtained;
in one specific example:
the method comprises the steps of (1) calculating a weight ratio of CPU utilization rate Ci to be n1, a weight ratio of a stored state value Ni to be n2, a weight ratio of a network state value Wi to be n3 according to a formula CNW=Ci+Nin1+Nin2+wi+N3 to obtain a state effective value CNW of ERP information transmission equipment; wherein, n1, n2, n3 are all greater than zero, and n1+n2+n3=1;
if the state effective value of the ERP information transmission equipment is more than or equal to the state effective value threshold of the ERP information transmission equipment, indicating that the operation state of the ERP information transmission equipment is normal, and obtaining an operation normal signal of the ERP information transmission equipment;
and if the state effective value of the ERP information transmission equipment is less than the state effective value threshold of the ERP information transmission equipment, indicating that the operation state of the ERP information transmission equipment is abnormal, and obtaining an operation abnormal signal of the ERP information transmission equipment.
When the decision analysis module receives an ERP information transmission device operation normal signal, ERP information transmission behavior data is obtained, and an ERP information transmission verification signal is obtained based on the ERP information transmission behavior data;
the ERP information transmission behavior data comprises file transmission rate, file transmission time rate and file transmission packet loss rate;
the ERP information file which is required to be transmitted by the ERP information transmission equipment is recorded as a target file;
the file transmission rate obtaining process comprises the following steps:
the method comprises the steps of obtaining the analysis speed of ERP information transmission equipment on a target file and the compression speed of the target file;
summing the analysis speed of the target file and the compression speed of the target file to obtain an average value, obtaining the aging speed of the target file, and calculating the ratio of the aging speed of the target file to the size of the target file to obtain the file transmission rate;
the file transmission time rate is calculated by the ratio of the transmission time required by the target file from the sender to the receiver to the size of the target file;
the acquisition process of the file transmission packet loss rate comprises the following steps:
before transmitting the target file, acquiring the number of data packets of the target file transmitted by a transmitting party;
after the transmission of the target file is completed, counting the number of data packets successfully received by a receiver;
calculating the difference between the number of data packets received by the receiving side and the number of data packets sent by the sending side to obtain a data packet difference;
calculating the ratio of the data packet difference value to the number of the data packets sent by the sender to obtain the file transmission packet loss rate;
calculating the ratio of the file transmission packet loss rate of the target file to the sum of the file transmission rate and the file transmission time rate to obtain a target file transmission ratio, and marking the target file transmission ratio as CSB;
presetting a first limit value of a target file transmission ratio threshold as CSB1 and a second limit value as CSB2, wherein CSB1 is smaller than CSB2;
taking the number of the target files as an X axis, taking the target file transmission ratio of teammates of the target files as a Y axis, and establishing a plane coordinate system;
in the plane coordinate system, a lower standard datum line parallel to the X axis is made by a first limit value CSB1 of a target file transfer ratio threshold value;
taking a second limit value CSB2 of the target file transfer ratio threshold value as an upper standard datum line parallel to the X axis;
obtaining a limit value range interval of the transmission ratio of the target file;
drawing points in a plane coordinate system according to the target file transmission ratio of a plurality of target files on ERP information transmission equipment in time sequence, and connecting the points of the plurality of target files in the plane coordinate system by using a smooth curve to obtain a target file transmission ratio image;
acquiring an image of the transmission ratio image of the target file above a second limit value, marking the image above the second limit value as an out-of-limit image, and acquiring the out-of-limit image area;
if the area of the out-of-limit image is within the preset out-of-limit image area range, the out-of-limit image is marked as a normal out-of-limit image;
if the area of the out-of-limit image exceeds the preset out-of-limit image area range, the out-of-limit image is marked as an abnormal out-of-limit image;
marking the first abnormal out-of-limit image as a verification target image, and identifying a target file transmission ratio image after the verification of the target image;
if the target file transmission ratio image after the target image is checked is returned to the limit value range interval of the target file transmission ratio in a gradually downward running trend, the target file abnormality corresponding to the checked target image is explained, and a file abnormality signal is generated;
if the target file transmission ratio image after the target image is verified is not in the limit value range interval of the target file transmission ratio in a gradual downward running trend regression mode, indicating that ERP information transmission equipment for target file transmission is abnormal, and generating an ERP information transmission equipment operation abnormal signal;
the target file transfer ratio image after the target image is checked is not in a limit value range zone of the target file transfer ratio which is returned by the gradual downward running trend, and the target file transfer ratio image after the target image is checked is in a limit value range zone of the gradual upward running zone away from the target file transfer ratio or is in linear fluctuation change above an upper standard reference line.
Example 2
On the basis of the embodiment 1, monitoring and processing a file abnormal signal or an ERP information transmission equipment operation abnormal signal;
referring to fig. 3, in particular:
the monitoring analysis module receives the file abnormality signal and detects the ERP information file corresponding to the file abnormality signal;
the method comprises the steps of detecting the transmission integrity of the ERP information file and detecting the virus of the ERP information file;
the method comprises the steps of detecting the transmission integrity of ERP information files, including but not limited to detection through a Hash algorithm;
among other things, the ERP information file virus detection includes, but is not limited to, GFI Sandbox and virus.
In a specific embodiment, obtaining a target file transmission ratio of an ERP information file corresponding to a file abnormality signal, and marking the target file transmission ratio as the target file abnormality transmission ratio;
calculating the ratio of the abnormal transmission ratio of the target file to the transmission ratio of the target file to obtain the abnormal ratio of the target file;
if the anomaly ratio of the target file is more than or equal to 1, the ERP information file corresponding to the file anomaly signal is indicated to have low anomaly degree, and the integrity and usability of the file are not affected;
if the anomaly ratio of the file is more than or equal to 3 and more than 1, the anomaly degree of the ERP information file corresponding to the file anomaly signal is severe, the integrity and the usability of the file are affected, and repair or retransmission is needed;
if the anomaly ratio of the target file is more than 3, the abnormal degree of the ERP information file corresponding to the file anomaly signal is very serious, so that the file cannot be used or data is lost, and measures are needed to be taken for repairing.
The monitoring analysis module receives the operation abnormal signal of the ERP information transmission device and detects the ERP information transmission device corresponding to the operation abnormal signal of the ERP information transmission device;
detection of ERP information transmission devices includes, but is not limited to, device status monitoring, network performance monitoring, log analysis monitoring, and device virus detection;
wherein, the monitoring of the state of the equipment comprises, but is not limited to, utilizing a sensor to collect whether the temperature, voltage, current and other data of the equipment exceed the preset safety range;
the network performance monitoring comprises, but is not limited to, monitoring indexes such as network transmission rate, packet loss rate, delay and the like of the equipment in real time;
the log analysis and monitoring comprises the steps of recording the running state and any problems, and finding out the fault mode of the equipment by analyzing the log;
wherein device virus detection includes, but is not limited to, processing by antivirus software.
One of the core points of the present invention is: the method comprises the steps of obtaining state data of the ERP information transmission equipment, namely, obtaining the use state of the ERP information transmission equipment by processing CPU use rate, stored state value and network state value of the ERP information transmission equipment, namely, the lower the CPU use rate is, the higher the memory idle rate is and the higher the memory caching efficiency is, the better the ERP information transmission equipment use state is, thereby completing the evaluation of the ERP information transmission equipment state, completing ERP information transmission under a good operation environment, and improving the ERP information transmission stability and safety;
one of the core points of the present invention is: when the ERP information transmission equipment operates a normal signal, ERP information transmission behavior data are obtained, namely, a target file transmission ratio is obtained by processing a file transmission rate, a file transmission time rate and a file transmission packet loss rate, then image processing is carried out on a first limit value and a second limit value of a target file transmission ratio threshold value, the area of an out-of-limit image in the target file transmission process is obtained, a verification target image is obtained by identifying the area of the out-of-limit image, and the target file abnormality and the ERP information transmission equipment abnormality corresponding to the transmission abnormality process are identified based on a trend curve of the verification target image, namely, quick response to the abnormal state in the ERP information transmission process is completed, so that management personnel can timely process the ERP information transmission abnormality, and file loss in the ERP information transmission process is effectively prevented.
The foregoing describes one embodiment of the present invention in detail, but the description is only a preferred embodiment of the present invention and should not be construed as limiting the scope of the invention. All equivalent changes and modifications within the scope of the present invention are intended to be covered by the present invention.