Safety protection system and method

Abstract

The invention discloses a safety protection system and method. The system comprises: a threat event detection module which is suitable for carrying out threat detection on a to-be-protected object so as to obtain a plurality of threat events generated in the threat detection process; an aggregation module which is suitable for performing aggregation processing on the plurality of generated threat events so as to generate at least one security event corresponding to the plurality of threat events, wherein one security event is formed by aggregating a plurality of threat events; and an alarm module which is suitable for generating alarm information corresponding to the security event. By adopting the scheme, the closed-loop processing of the threat event can be realized, the processing efficiency is improved, and the effective protection of the security protection object is realized; moreover, according to the scheme, the number of events to be processed and the number of alarms can be greatly reduced through aggregation processing of the threat events, and the processing precision is further improved on the basis of saving system resources and improving the processing efficiency.

Description

technical field [0001] The invention relates to the field of safety technology, in particular to a safety protection system and method. Background technique [0002] At present, computer and Internet technology has achieved rapid development. However, at present, security threats to terminals and networks (eg, to enterprise networks, user networks, etc.) continue to occur. In order to ensure the security of the terminal and the network, in the prior art, the security protection of the network or the terminal is generally implemented through a corresponding security protection system. [0003] However, the inventor found in the implementation process that there are the following defects in the prior art: the security protection system in the prior art cannot quickly process threat events in a timely manner, the processing efficiency is low, and the security protection performance is poor. Contents of the invention [0004] In view of the above problems, the present invent...

AI Technical Summary

Problems solved by technology

[0003] However, the inventor found in the implementation process that there are the following defects in the prior art: the security protection system in the prior art cannot quickly process the threat events in a timely manner, the processing efficiency is low, and the security protection performance is poor

Images