论文部分内容阅读
网络漏洞必然存在,网络安全事件不可避免,应急处置作为最后一道防线,是保障网络信息可生存性的必要手段。现有的网络攻击应急处置措施相对对立,缺乏整体协作能力,难以应对日新月异的攻击方式。针对当前应急处置体系的不足,提出了一种网络事件应急处置协同方法和体系,将相对独立的应急处置组件有机统一起来,并提供专家远程辅助决策能力,可以有效减少冗余信息,提高响应能力,增强信息系统的安全性。
Network loopholes are bound to exist, and network security incidents are inevitable. Emergency treatment as the last line of defense is necessary to ensure the survivability of network information. The existing measures against cyberattacks are relatively antithetical, the lack of overall capacity for collaboration, it is difficult to cope with the ever-changing pattern of attacks. Aiming at the shortcomings of the current emergency handling system, a method and system for coordinated emergency response of network events is proposed. The relatively independent emergency handling components are organically unified and expert remote assistance decision-making ability is provided, which can effectively reduce redundant information and improve response capability , To enhance the security of information system.