Security event processing method and device, equipment and medium

Abstract

The invention discloses a security event processing method and device, equipment and a medium. The method comprises the steps that a combat room page corresponding to a security event is generated; according to a combat room entering request sent by a client, whether a user corresponding to the client is a related user of the security event or not is judged, and if yes, the combat room page serves as response information to be returned to the client; when a security capability execution request sent by the client of any related user based on the combat room page is obtained, calling and executing the corresponding security capability from a security capability center; and pushing the execution information of the security capability to a client of a subsequent user in real time for display, so that the subsequent user executes a corresponding operation according to the execution information, and cooperative processing of multiple users on the security event is realized. Therefore, the processing efficiency of the security event can be improved, and the resource waste of the security equipment can be reduced.

Description

technical field [0001] The present application relates to the technical field of information security, and in particular to a security event processing method, device, equipment and medium. Background technique [0002] At present, the focus of network security work has shifted to security operation and security management. The process of traditional security operation and maintenance is cumbersome, the disposal cycle is long, and the cost of communication is high. Insufficient, the integration degree of security equipment is low, the linkage is not strong, the security equipment is fighting independently, and the lack of unified and collaborative work ability leads to waste of resources. Contents of the invention [0003] In view of this, the purpose of the present application is to provide a security event processing method, device, equipment and medium, which can improve the security event processing efficiency and reduce the resource waste of security equipment. The s...

AI Technical Summary

Problems solved by technology

[0002] At present, the focus of network security work has shifted to security operation and security management. The process of traditional security operation and maintenance is cumbersome, the disposal cycle is long, and the cost of communication is high. Insufficient, the integration degree of security equipment is low, the linkage is not strong, the security equipment is fighting independently, and the lack of unified collaborative work ability leads to waste of resources

Images