Network security collaborative linkage system and method

Abstract

The invention provides a network security collaborative linkage system. A security resource interface module supplies transmission interfaces to a plurality of security resources to facilitate file transmission between the collaborative linkage system and the security resources; a security resource adaptation module converts security events information supplied by the corresponding security resources into a standard format of the collaborative linkage system from a specific format; and a collaborative linkage engine module performs association analysis and exploration on security events supplied by the security resources according to a collaborative linkage demand so as to acquire more valuable information. The system has the collaborative analysis and linkage control capacity to the network security resources complying with collaborative interfaces and has higher uniformity; and different network security resources can be added into the collaborative linkage system quickly and conveniently through corresponding special security adaptation modules, therefore the better expandability is achieved.

Description

technical field [0001] The invention belongs to the field of network security, and in particular relates to a network security collaborative linkage system and method. Background technique [0002] With the rapid development of information technology and Internet technology, malicious attacks on network information systems have become more and more diverse and complex. These security incidents have greatly threatened my country's national security and people's lives, and the network security situation has become increasingly severe. To this end, all walks of life, such as academics and industries, have carried out in-depth and comprehensive research work on network security technology, and have achieved relatively mature research results, such as intrusion detection, vulnerability scanning, botnet discovery, distributed denial of service attack detection, spam filtering, anti-virus, anti-Trojan and other technologies and systems, however, the existing research work is still ...

AI Technical Summary

Problems solved by technology

To this end, all walks of life, such as academics and industries, have carried out in-depth and comprehensive research work on network security technology, and have achieved relatively mature research results, such as intrusion detection, vulnerability scanning, botnet discovery, distributed denial of service attack detection, spam filtering, anti-virus, anti-Trojan and other technologies and systems, however, the existing research work is still facing the following two problems: First, the isolated research of a single technology has been difficult to greatly reduce the false alarm rate and leakage of network security incidents; rate, such as intrusion detection; second, it is difficult for a single technical means to meet increasingly complex application requirements, such as in-depth analysis and knowledge mining for network security incidents

However, because the industry has not formed a unified understanding at present, the SOC implementation among various manufacturers is not uniform, and there is still a lack of synergy between products of different manufacturers.

Images