摘要
[目的/意义]信息化建设的高速发展,导致网络安全问题日益凸显,安全设备的多样化也给日常运维带来了困难.在广播电视媒体行业中,安全运营平台的搭建解决了广电媒体在日常运营中所存在的瓶颈和面临的问题[方法/过程]安全运营平台采用大数据分析技术,汇聚安全设备相关数据,通过建模手段提取数据的关键字段,为安全事件的精准研判和分析起到了推动作用.[结果/结论]安全运营平台采用联动设备对风险进行及时处置,提高了安全运营平台整体的安全监测和保障能力.
[Purpose/Significance]The rapid development of information technology construction has led to information security problem,and the different of security services has also brought difficult to the security operation.In the broadcasting and television industry,the establishment of security operation center solves the problems face to broadcasting and television media in security operations.[Method/Process]The security operation center adopts big data analysis technology to gather data related to security services,extract the key of data through the modeling and play a important role in the judgment and analysis of security events.[Results/Conclusion]The security operation center adopts the SOAR to handle risks,improve ability about the security operation center in monitoring and protection.
作者
蔡晶晶
张莹
张胜龙
Cai Jingjing;Zhang Ying;Zhang Shenglong(Zhejiang Media Group,Zhejiang Hangzhou 310005)
出处
《网络空间安全》
2024年第2期62-67,93,共7页
Cyberspace Security
关键词
安全运营平台
精准研判
联动处置
信息安全
网络安全监测与保障
security operations center
analysis and judgment
security orchestration automation and response
information security
network security monitoring and protection
作者简介
蔡晶晶(1991-),女,汉族,浙江杭州人,浙江大学,硕士,浙江广播电视集团,工程师,主要研究方向和关注领域:网络安全、安全治理、网络安全运营;张莹(1973-)女,汉族,浙江杭州人,本科,浙江广电集团融媒体技术中心系统支撑部,高级工程师,主要研究方向和关注领域:云平台IaaS、PaaS层建设与运维、云安全和终端安全;张胜龙(1992-),男,汉族,安阜阳市人,浙江工商大学,硕士,浙江广播电视集团融媒体技术中心,工程师,主要研究方向和关注领域:云计算、存储和网络安全。
