Security risk event processing method, apparatus and device, and storage medium

Abstract

The invention relates to the technical field of safety management and discloses a security risk event processing method, apparatus and device, and a storage medium. The method comprises the followingsteps of: receiving a security log and basic device information reported by each piece of security device, determining a target security risk event and a target security device, if the target safety device has the linkage function, executing the next step; if so, determining an attack object according to the target security risk event and the target security device; acquiring type characteristicsof the attack object; determining a danger level according to the type characteristics; generating an event processing strategy to perform security risk event processing on the target security device.Therefore, the target security risk event is screened out from the security log reported by each security device. The target safety device is determined according to the target safety risk event, andthe event processing strategy is generated to process the safety risk event, so that the technical problems of how to process the safety risk event conveniently and how to improve the processing efficiency and safety are solved.

Description

technical field [0001] The present invention relates to the technical field of security management, in particular to a security risk event processing method, device, equipment and storage medium. Background technique [0002] At present, security risk event handling technologies mainly include the following two types: [0003] 1. Remotely log in to the device to perform disposal operations. The disadvantage of this technology is that the operation is not portable and cannot be processed quickly through the platform. [0004] 2. Send the script to the device through the unified platform, and the device executes the script and then returns the result to the platform. The disadvantage of this technology is that it takes a certain amount of time to send the script and execute the script, and the overall efficiency is relatively low. At the same time, there are A security risk vulnerability that could be exploited. [0005] Therefore, essentially there is a technical problem of...

AI Technical Summary

Problems solved by technology

[0003] 1. Remotely log in to the device to perform disposal operations. The disadvantage of this technology is that the operation is not portable and cannot be processed quickly through the platform.

[0004] 2. Send the script to the device through the unified platform, and the device executes the script and then returns the result to the platform. The disadvantage of this technology is that it takes a certain amount of time to send the script and execute the script, and the overall efficiency is relatively low. At the same time, there are Potentially Exploitable Security Risk Vulnerabilities

[0005] Therefore, there is essentially a technical problem of how to conveniently handle security risk events and improve processing efficiency and safety

Images