Safety alarm event processing method and device, equipment and storage medium

Abstract

The embodiment of the invention discloses a safety alarm event processing method and device, equipment and a storage medium. The method comprises the following steps: collecting a plurality of safety alarm events generated within a set duration, and recognizing target alarm hardware corresponding to each safety alarm event; obtaining a target asset type corresponding to each target alarm hardware, and querying a mapping relationship between the asset type and an asset importance index to obtain a target asset importance index; obtaining a target hazard level corresponding to each safety alarm event, and querying a mapping relationship between the hazard level and a hazard importance index to obtain a target hazard importance index; According to each target asset importance index and each target hazard importance index, determining a processing sequence of each safety alarm event, and processing the safety alarm events. According to the embodiment of the invention, the problem of effective protection of tens of thousands of information technology assets is solved, the safety event handling efficiency is improved, and the cost benefit of safety reinforcement is maximized.

Description

technical field [0001] Embodiments of the present invention relate to computer data processing technology, and in particular to a processing method, device, equipment and storage medium of a security alarm event. Background technique [0002] With the accelerated evolution of the digital transformation trend, the number of enterprises migrating to the cloud has surged, and information technology (Information Technology, IT) assets are increasing, and the resulting vulnerabilities are also increasing day by day. In the face of increasingly complex attacks, network security issues are becoming increasingly prominent, and the traditional mode of relying on limited human input and stacking dozens of monitoring and protection tools cannot meet current needs. [0003] During the process of invention, the inventor found that the defect of the existing technology is: in the face of tens of thousands of assets that need to be protected, many key security alarms may be overwhelmed, an...

AI Technical Summary

Problems solved by technology

In the face of increasingly complex attacks, network security issues are becoming increasingly prominent, and the traditional mode of relying on limited human input and stacking dozens of monitoring and protection tools cannot meet current needs

[0003] During the process of invention, the inventor found that the defect of the existing technology is: in the face of tens of thousands of assets that need to be protected, many key security alarms may be overwhelmed, and it is very likely that the best protection time will be missed, which will bring unimaginable consequences , the core data may be modified and leaked, and the production system may be interrupted, which will affect the healthy development of the enterprise, and even affect the national cyberspace sovereignty, security and development interests

Images