目前的网络安全管理以单点防御为主,缺乏有效协作,面临异构安全设备难以协同、海量告警信息难以处理,缺乏统一的关联分析手段与有效的快速响应流程。本文针对这些问题,提出统一网络安全管理平台的概念,设计平台的体系框架,并具体介绍平台的主要功能模块。 At present, the network security management is mainly single-point defense, which lacks effective cooperation. Facing heterogeneous security devices, coordination of massive heterogeneous security devices, massive alarm information is difficult to deal with, the lack of a unified correlation analysis method and effective rapid response process. In view of these problems, this article puts forward the concept of a unified network security management platform, the system framework of the design platform, and introduces the main function modules of the platform in detail.