Network safety emergency response method and emergency response platform

Abstract

The invention discloses a network safety emergency response method and an emergency response platform. The emergency response platform is used for obtaining relevant event information according to thesafety event and determines the terminal which is affected by the relevant event information, and the threat of relevant event information is eliminated, so that the emergency response platform can find the threat in time, the influence range of the threat can be accurately known, the threat can be rapidly and accurately eliminated, and the safety of the network is improved. The method comprisesthe steps that the emergency response platform receives a safety event; the emergency response platform obtains the relevant event information according to the safety event; the emergency response platform determines the target terminal from the terminal according to the relevant event information; the emergency response platform generates a safety policy instruction and sends the safety policy instruction to the target terminal, so that the target terminal eliminates the threat of the relevant event information according to the safety policy instruction.

Description

technical field [0001] The invention relates to the technical field of Internet security, in particular to a network security emergency response method and an emergency response platform. Background technique [0002] The rapid development of network technology has facilitated human life, but it has also brought many security problems. Enterprises and public institutions respond to various network attacks by purchasing some security equipment and security protection software (such as intrusion prevention systems, next-generation firewalls, and antivirus software, etc.). [0003] Existing network security solutions are: by modeling existing attacks and threats, extracting corresponding features for protection, which can effectively prevent existing attack methods. [0004] However, the attack methods of hackers are changing rapidly, the attack methods are becoming more and more industrialized, and various software and system vulnerabilities are continuously exposed. The defe...

AI Technical Summary

Problems solved by technology

[0006] There is nothing that can be done about the threat of bypassing enterprise security protection measures. It often takes a long time for customers to find out that they have been hacked. For example, the database is deleted or sensitive information is secretly uploaded. After the customer uses the database or the sensitive information is exposed , to know the threat exists, resulting in huge losses

Images