Event handling method and device, electronic device and readable storage medium

Abstract

The invention relates to the technical field of computer device network security, in particular to an event handling method and device, an electronic device and a computer readable storage medium. Themethod comprises the steps of judging a target type of an event according to acquired event information; wherein the event is an unsafe event of an enterprise management system; determining an emergency disposal scheme for the target type event according to a pre-stored event disposal template library; and sending the emergency disposal scheme to an enterprise management system to enable the enterprise management system to execute the determined emergency disposal scheme. Compared with the prior art, the technical scheme provided by the invention has the advantages that the event handling efficiency is greatly improved by manually starting emergency handling by a worker after the event is subjected to offline warning, and the protection of an enterprise management system is improved.

Description

Technical field [0001] The present invention relates to the field of computer device network security technology, and more particularly to an event disposal method, apparatus, electronic device, and readable storage medium. Background technique [0002] At present, most industries, such as financial devices, in the event of unconventional events, such as unsafe events, generally disposed of the alarm monitoring group to discover alarm event or vulnerability event, and then send the event analysis group for details analysis, and corresponding items The group was confirmed and confirmed by the project group completed the emergency response, and the specific rectification measures and rectification plan were proposed. Finally, the security management group is unified to supervise and rectify, and this complete process is basically a line of operation. And there are some problems, such as (1) participating in all parties involved in event disposal, including the alarm monitoring grou...

AI Technical Summary

Problems solved by technology

[0002] At present, in most industries, such as financial devices, when unconventional events occur, such as unsafe events, the handling method is generally that the alarm monitoring team finds alarm events or vulnerability events, and then sends the event analysis team for detailed analysis, and the corresponding project After the confirmation is completed, the project team will complete the emergency response, and propose specific rectification measures and rectification plans. Finally, the safety management team will supervise the implementation of the rectification. The realization of this whole process basically belongs to offline operation communication. Moreover, there are still some problems as follows, for example (1) All parties involved in incident handling, including alarm monitoring group, event analysis team, project team, safety management team, superior leaders, etc., do not have a unified information exchange platform and event handling platform, All parties communicate mainly through offline methods such as telephone and email. Scattered and inefficient communication methods lead to low disposal efficiency and are not conducive to the management's tracking and supervision of the disposal process; (2) Every event initiates a disposal process offline , the event information is scattered, and the controllability of the promotion of the disposal link is poor. For the event handler, there is no unified display platform for the event disposal information, which is easy to cause omission or neglect; for the event management party, the statistical analysis of all events and the monitoring of its disposition is very difficult

(3) When a security alarm occurs, it takes a high labor cost to match assets, reducing disposal efficiency

Images