Management system for integrated information security service and the protection method thereof

Abstract

The invention relates to a management system for integrated information security service and the protection method thereof, which are characterized in that first the management system for integrated information security service enables a protection device to protect data packets on a device at the user end for security, generates a log event from the protection result and sends the log event to acentralized monitoring platform; then the centralized monitoring platform normalizes and relationally analyzes the log event and detects and transmits the exceptional information to a service platform; finally the service platform displays the exceptional information integrated with the information about the network status on the interface of a webpage and sends the information about the network status and exceptional information to the device at the user end. The management system for integrated information security service and the protection method thereof can directly provide a series of information about the network status and security information at the Internet service provider end to address the problem that a network subscriber usually needs to spend high equipment and (monitoring) labor costs in purchasing, establishing and maintaining an information security protection system on his own in the prior art.

Description

technical field [0001] The invention relates to a management system and a protection method for integrating information security services, more specifically, a management system and protection method for integrating information security services by analyzing the event records (Log) of information security equipment. Background technique [0002] Due to the development of network technology, the speed of network system construction is accelerated. With the increasing popularity of the Internet, it is an inevitable trend for users to conduct various human activities through the Internet, such as using the Internet to collect data, browse knowledge, buy goods or make friends. [0003] In order to connect to the Internet, a user generally has to connect through an Internet Service Provider (ISP). Internet service providers are companies or institutions that provide users with access to the Internet and network information services. These companies invest in the establishment of...

AI Technical Summary

Problems solved by technology

However, there are many types of malicious programs that pose a threat to information security, so network users must build various types of security protection equipment

However, the construction and maintenance of security protection equipment will cause a heavy cost burden for users, and may not be able to effectively prevent network viruses and hacker (software cracker, that is, software hacker) attacks, and even if malicious packets can be successfully blocked at the user end , it is also difficult to prevent a large number of malicious packets from reducing the bandwidth of the external network

What troubles users even more is that the information security event records generated by these information security devices are numerous and complicated. If the user does not have professional knowledge in network and information security, it is difficult to integrate, analyze and organize information security event records to instantly discover the shallow The problem

Images