绿盟威胁情报解决方案  

NSFOCUS Threat Intelligence Solution

作　　者：赵阳[1] ZHAO Yang(NSFOCUS,Beijing 100089,China)

机构地区：[1]北京神州绿盟科技有限公司,北京100089

出　　处：《信息安全与通信保密》2020年第S01期23-28,共6页Information Security and Communications Privacy

摘　　要：绿盟威胁情报解决方案,基于多源多类型情报,利用多源情报清洗与归并技术、互联网资产画像技术、大数据关联分析技术和机器学习技术,结合威胁预警、设备联动智能防御、热点事件应急处理、追踪溯源、攻击者画像、定位反制等手段,通过云地结合,构建下一代预警、检测、响应、追溯一体化的立体协同防御生态,应用前景非常广阔。Built upon multi-source intelligence cleaning and merging,Internet asset profiling,correlative analysis of big data,and machine learning,the NSFOCUS Threat Intelligence(NTI)solution that comes with a wide variety of intelligence from multiple sources,is capable of threat alerting,intelligent defense via device collaboration,emergency response of topical incidents,traceback,attacker profiling,attribution and countermeasures.By integrating the cloud and on-premises devices,the NTI solution forms the next-generation all-around coordinated defense ecology that features alerting,detection,response,and traceback,thus having a broad application prospect.

关 键 词：网络安全 威胁情报 应急响应 追踪溯源 攻击者画像 定位反制 

分 类 号：TN915.08[电子电信—通信与信息系统]