System and method for supplying information security operation service to medium-sized and small enterprises

Abstract

The invention discloses a system for supplying information security operation service to medium-sized and small enterprises. The system comprises the components of a security operation data acquiring module, a security operation service module, a security operation supporting module and a security policy module. The security operation data acquiring module comprises a message detecting module, a terminal security management module, a host security management module and a network equipment security management module. The security operation service module comprises an asset management module and a service management module. The security operation supporting module performs the functions of enterprise user management, identity authentication, authorization charging, service management, terminal management and statistical analysis. The security policy module is used for setting security baseline data, a security event processing strategy, an invasion detecting rule, a security event reporting rule and a service association rule.

Description

technical field [0001] The invention relates to the technical fields of information security, network management and business management, in particular to a system and method for providing information security operation and maintenance services to small and medium-sized enterprises. Background technique [0002] Today, with the continuous development of computer technology and network technology, the daily operation of enterprises is inseparable from the information network. Whether it is a large enterprise group, a large enterprise, or a small and medium-sized enterprise, or even a start-up workshop, it has its own information network. . Although the information network makes internal office work, market information collection, new technology and remote collaboration and communication more convenient, and brings convenience to the operation and development of enterprises; however, information security is always a serious concern for enterprises. The endless viruses, increa...

AI Technical Summary

Problems solved by technology

The advantages of this model are: special tool software is deployed to assist enterprise information network security management, and special personnel are arranged for security management, which is conducive to providing enterprise information network security; but its disadvantages are: the procurement management system requires special funds; in addition , but also requires later investment, such as upgrade costs, personnel training costs, etc. What's worse, the research and development manufacturers of enterprise information network security management systems cannot obtain more practical application experience from the products they have sold, because many times, enterprises The problems of information network security are solved by the information security management personnel inside the enterprise, and the manufacturer will not be notified of the processing process, so the manufacturer cannot effectively obtain knowledge from the enterprise user side, and then improve its product functions, Performance and knowledge sharing

Due to the increasingly complex network environment and endless attack methods, the problem of information security can no longer be solved by purely static information security equipment. On the other hand, there is no OMC (Operation and Maintenance Center, operation and maintenance center) and network management, or only simple Static network management functions and lack of linkage between devices; professional information security operation and maintenance services must be sought

Images