企业网络安全态势感知平台架构研究

Research on Enterprise Network Security Situation Awareness Platform Architecture

企业网络一直以来是发生网络安全事件的重灾区,企业信息资产遭到更改、破坏和泄漏的事件层出不穷。网络态势感知平台可作为企业网络安全事件监测、预警和分析的基础,对企业的安全形势进行预警和溯源。基于此,笔者针对该平台各层的设计架构,提出多维度融合的企业网络安全态势感知平台构建的新模式,能够为提高企业的网络安全水平打下坚实的基础。

Enterprise Network has always been a disaster area of network security events,enterprise information assets have been changed,destroyed and leaked events emerge one after another.Network situation awareness platform can be used as the basis of enterprise network security event monitoring,early warning and analysis.According to the design framework of each layer of the platform,this paper puts forward a new mode of constructing the multi-dimensional fusion enterprise network security situation awareness platform,which lays a solid foundation for improving enterprise network security level.