The invention discloses a method and
system for driving SOAR automatic disposal based on
system dynamic
risk assessment. According to the invention, a closed-loop
protection system including
data acquisition and preprocessing, dynamic
risk assessment, disposal decision triggering, SOAR automatic disposal execution,
system total risk value calculation, system-level risk determination, asset risk weighted upgrading, manual intervention triggering, manual disposal feedback and alarm level overall improvement is constructed; and accurate identification and efficient response of
network security threats are realized. According to the method, the
total risk value of the system is calculated through a multi-dimensional dynamic
risk assessment model in combination with an asset value weight
algorithm, and real-time upgrading of the asset
risk level is realized through a
risk threshold dynamic adjustment mechanism, so that a two-level response mechanism (automatic disposal-manual takeover) is realized, and the
automation efficiency and the manual reliability are balanced. According to the invention, precise and efficient disposal of
network security threats and intelligence of security protection are realized, and the method can be widely applied to core service systems of various industries.