Centralized management and control center situation awareness and event response collaborative analysis implementation system

Abstract

The invention discloses a centralized management and control center situation awareness and event response collaborative analysis implementation system, which is characterized in that a model capable of being applied to key infrastructure network event comprehensive management across enterprise boundaries is provided. The implementation system comprising a centralized management and control information input assembly, a public network information input assembly, an original resource storage assembly, a search index assembly and an analysis engine assembly. The analysis engine assembly comprises an input processing assembly, an evaluation assembly, a metadata storage assembly, a centralized management and control center user instrument panel and a management instrument panel. According to the invention, the problems of data sharing across enterprise boundaries, security situation awareness and event response collaboration are solved.

Description

technical field [0001] The present invention relates to the technical fields of network security, SOC (Security operation center), information sharing, data encryption, network event processing and network event reporting, and in particular to a centralized management and control center situation awareness and event response collaborative analysis implementation system. Background technique [0002] Safe production has always been the prerequisite for ensuring the orderly development of various tasks, and it is also a veto indicator for evaluating leading cadres at all levels. The network and information security operation and maintenance system is an important part of the safe production work of various enterprises. Ensuring the efficient and stable operation of the network and information systems is the basis for all market operations and normal operations of an enterprise. [0003] At present, the network and information systems of enterprises have deployed various centr...

AI Technical Summary

Problems solved by technology

Rapid coordination and coordinated response are key to mitigating the impact of a cyber threat to an increasing number of enterprises and / or mitigating further spread and cascading effects of a cyber threat across multiple enterprises; however, existing centralized controls are only responsible for the Security operation and maintenance and management services within the scope

Images