Method capable of automatically responding to security issues in modular environment

Abstract

The invention discloses a method capable of automatically responding to a security problem in a modular environment. The method is characterized by comprising the following steps of performing modularization on a process of a server through a module management system, and acquiring security performance indexes of all modules in real time; the module management system automatically predicts and analyzes the acquired related safety indexes, matches a safety strategy database to automatically start safety countermeasures, and displays normal performance data in a modular manner; the security policy database continuously recommends coping policies to an administrator in accordance with changes in confidence levels of the presented threats. The system is advantaged in that a modular managementsystem is used, and the safety performance indexes of the detection object are modularized; monitoring objects with normal safety performance index data can be displayed in different modules, coping strategies can be continuously and dynamically provided for safety threat events, safety event processing efficiency is greatly improved, and meanwhile the processing time is saved.

Description

technical field

[0001] The invention belongs to the field of processing methods for safety events, and in particular relates to a method for automatically responding to safety problems in a modular environment. Background technique

[0002] With the rapid development of information technology, computer systems have become a part of modern enterprises. In recent years, the informatization construction of various industries has been continuously improved, and business operations have increasingly focused on information systems or information platforms. The security work of the system is also becoming more and more important. How to quickly and correctly respond to various security problems encountered by the system has become one of the priorities of the operation and maintenance personnel.

[0003] At present, for emergency security incidents, the industry generally adopts security incident grading. The corresponding processing method of this working method may become inappr...

Images