Safety management center capable of conducting collaborative analysis

Abstract

The invention relates to the technical field of information safety, in particular to a safety management center capable of conducting collaborative analysis. The safety management center is composed of a safety event management module, a safety service module, a control center, a safety policy library, a log database and an internet cooperation module. Whether the collaboration of other safety management centers is needed is judged through the internet cooperation module with the combination of the self working task; if collaboration is needed, communication with other safety management centers is conducted, relevant data are transmitted, and the safety management center capable of conducting collaborative analysis asks the other safety management centers to help the safety management center to complete the tasks such as safety thread conformation. The safety management center capable of conducting collaborative analysis solves the collaborative analysis problem of the safety management center and capable of being used for information safety management.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a security management center capable of collaborative analysis. Background technique [0002] Security Operation Center (Security Operation Center) is a term that describes a management platform that can provide collection, analysis and response to various information security events. The core function of SOC is the detection and response function, which is based on massive data collected from various information security devices. Analyze security incidents, judge the security status and security trends of the information systems it manages, and respond to serious security incidents in a timely manner. [0003] Information security events: log information, alarm information, etc. generated by various information security devices [0004] With the advancement of my country's informatization construction and the increasing emphasis on information security from all wal...

AI Technical Summary

Problems solved by technology

[0015] The technical problem solved by the present invention is to propose a security management center capable of collaborative analysis, which can fully mobilize all SOC For the suspected or undiscovered threats discovered by each SOC, through the collaborative processing of each SOC, real information security threats can be discovered earlier and faster, and the threats can be dealt with before they turn into real risks. nip in the bud

Further improve information security protection capabilities

Images