Data center operation and maintenance security management and control method and device

Abstract

The invention provides a data center operation and maintenance safety management and control method and device, and belongs to the technical field of finance, and the method comprises the steps: automatically detecting newly-added assets, and carrying out the safety recognition of the newly-added assets; performing threat processing on the illegal assets to obtain a threat processing result; and improving a system defense strategy according to a threat processing result, and updating by using the improved system defense strategy. According to the invention, by constructing the operation and maintenance security management and control platform of the data center, the problems that a security operation center and situation awareness cannot communicate with an asset management platform, an IT service management platform, a big data analysis platform and a data bus, and the source of security information is relatively single are solved; the problem of security asset isolation is also solved, and the management problem of security assets and threat intelligence is solved by using the CMDB.

Description

technical field [0001] The present application belongs to the technical field of data operation and maintenance, and in particular, relates to a method and device for managing and controlling security of data center operation and maintenance. Background technique [0002] As network security is paid more and more attention, especially for large data centers, more and more network security devices are purchased and used, such as situational awareness, security operation center (SOC), log analysis platform, behavior analysis platform, traffic analysis Platforms, gatekeepers, etc. These devices have their own defense capabilities, but they have not formed a unified management, the management cost is high, and there is no unified platform for connecting these tools. [0003] Current situation and problems [0004] Insufficient grasp of infrastructure [0005] With the change of applications and changes in network scale, there is an incomplete grasp of the assets and applicatio...

AI Technical Summary

Problems solved by technology

[0012] This application provides a data center operation and maintenance security management and control method and device to at least solve the current large-scale data center's insufficient grasp of infrastructure equipment, lack of massive data and big data analysis technical support, insufficient security analysis technical means, and third-party intelligence Insufficient data etc.

Images