Network security operation management platform

Abstract

The embodiment of the invention provides a network security operation management platform. The network security operation management platform comprises a data acquisition and treatment module, a threat perception and analysis module, a monitoring alarm module and a response processing module. The technical scheme has the beneficial technical effects that the data acquisition technology adopted by the invention can comprehensively obtain multi-source security information, and provides rich data support for discovery of security threats. The threat perception and analysis technology is adopted, multi-source data are fused for correlation analysis, alarm redundancy can be effectively reduced, and the threat identification accuracy is improved. According to the asset management technology, network risks are analyzed from the aspect of assets, and digital management of the assets is achieved. By adopting a security event response technology, customization of an event disposal process and tracking of the disposal process are realized, and network security is improved to realize disposal efficiency.

Description

technical field [0001] The invention belongs to the technical field of network security, in particular to a network security operation management platform. Background technique [0002] In response to the increasingly severe network security situation, enterprises have successively carried out the construction and deployment of various security protection platforms and equipment from the border to the terminal, and gradually improved the capabilities of information security hidden danger discovery, protection and disposal, monitoring and confrontation, and emergency recovery. However, due to the lack of comprehensive operation management tools, the lack of a unified safety operation standard, and the uneven technical level of personnel, how to solve internal security barriers such as isolated islands, fragmentation, and functional walls, and how to conduct timely and effective analysis, early warning and The ability to deal with security risks and quickly and truly display t...

AI Technical Summary

Problems solved by technology

[0004] In view of the problems existing in the field of network security in the prior art, the purpose of the embodiment of the present invention is to provide a network security operation management platform, which is to improve network security operation management by coordinating and coordinating network security work from a global perspective.

Images