网络安全态势感知平台在安全事件闭环管理中的应用  

Application of Network Security Situation Awareness Platform in Closed Loop Management of Security Incidents

作　　者：孟瑞祺[1] 马丽[1] 刘媛媛[1] MENG Ruiqi;Ma Li;LIU Yuanyuan(Information Center of Ningxia Medical University General Hospital,Ningxia 750004,China)

机构地区：[1]宁夏医科大学总医院信息中心,宁夏750004

出　　处：《电子技术（上海）》2024年第7期90-91,共2页Electronic Technology

摘　　要：阐述网络安全态势感知平台方案,包括搭建平台安全系统架构、提取元数据、进行基于各类异构设备的行为检测。在实际应用中,可实现安全事件的发现、处置、检测、反馈的全流程闭环管理。This paper describes the network security situation awareness platform solution,including building the platform security system architecture,extracting metadata,and conducting behavior detection based on various heterogeneous devices.In practical applications,it can achieve full process closed-loop management of security event discovery,disposal,detection,and feedback.

关 键 词：网络信息安全系统 网络安全 行为检测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]