Distributed monitoring method and device for industrial control network attack events

The embodiment of the invention provides an industrial control network attack event distributed monitoring method and device, and the method comprises the steps: determining a corresponding network real feature through obtaining historical industrial control network activity data, inputting the network real feature and a preset noise vector into a full connection layer of a preset deep neural network for network training, and obtaining an attack event of the industrial control network; determining a corresponding network prediction feature, determining a corresponding network real probability value according to the network real feature, the network prediction feature and a preset dichotomy deep neural network model, determining a corresponding parameter of a preset deep neural network according to the maximum value of the network real probability value, and determining a corresponding generator model; the missing monitoring data of the industrial control network is acquired, the corresponding complete monitor