A security service providing method and server

Abstract

The present invention provides a server and method for security service providing, wherein a basic platform is used for verifying the call request after receiving the call request of the user for any application, forwarding the call request to the application it calls after the call request is verified and configuring the resources for the run of the called application. Every application is used to receive the forwarded call request of the basic platform and provides the user with the business of the security class according to the call request. The basic platform provides unified services of request verifying and resources configuring for all the applications. And because each application is independent of other applications in the running process, numerous applications can be built based on the basic platform theoretically, which can improve the scalability of the security service providing server.

Description

technical field

[0001] This application relates to the field of electronic information, in particular to a security service provider and server. Background technique

[0002] A security operation center (Security Operate Center, SOC) is a system for centralized management of security devices (including centralized operation status monitoring, event collection and analysis, and security policy delivery).

[0003] Traditional SOC is generally built as a system. For traditional SOC, this system is closed. The system includes several modules such as asset management, security log management, event management, process management, and risk management. Through the analysis of security logs, Generate security incidents, and then drive the resolution of security issues through the operation of security incidents, in order to reduce security risks. It can be seen that the traditional SOC is a complex system, in which there are various levels of coupling and calling among various func...

Images