Method, system and device for monitoring security event

Abstract

The invention discloses a method, a system and a device for monitoring a security event, which relate to the field of network security and are used for solving the problem that the generality of the conventional network information security event monitoring technique is poor. The method comprises the steps that: an event-acquiring client acquires an event log of a node in real time; the event-acquiring client uploads the acquired event log data to a security event monitoring center; and the security event monitoring center acquires the uploaded event log data and arranges the data to have a uniform format. The system comprises a node log server, the event-acquiring client and the security event-monitoring center, wherein the event-acquiring client is arranged on the node log server; the security event-monitoring center is communicated with the event-acquiring client; and the event-acquiring client comprises an acquiring unit and an uploading unit.

Description

technical field [0001] The invention relates to the field of network security, in particular to a method, system and device for monitoring security events. Background technique [0002] The development of information network has brought great convenience to social production and life, but also caused many problems. First, computer viruses and Trojan horses are seriously infected. In half a year in 2009, 195 million Internet users were attacked by viruses and Trojans, 110 million Internet users were attacked by viruses and Trojans while surfing the Internet, and 110 million Internet users encountered account or password theft. Second, there are frequent cyber attacks. Since June 2009, a Turkish hacker organization broke through more than 200 websites in my country, including several websites in our province, causing negative social impact. [0003] In order to cope with information security threats, information network operators and users have installed security systems such...

AI Technical Summary

Problems solved by technology

[0007] The present invention provides a security event monitoring method, system and device to solve the problem of poor versatility of the existing network information security event monitoring technology

Images