电视台信息系统网络安全监测业务实践探讨

Discussion on Cyber Security Monitoring of Information System in TV Station

改变电视媒体传统的网络安全监测技术路线,建设动态、可视化、主动、智能的新一代安全监测系统,解决先前监测系统海量告警数据、无从下手等的弊端,切实提升监测效率。以各类流量、安全威胁和告警事件数据为支撑,运用全流量采集监测、安全大数据、用户行为关联分析、安全事件关联分析、安全可视化与态势感知等技术,实现漏洞补丁、威胁信息、安全事件、安全攻击等内容的动态展现,从被动的事中事后防护走向事前预警,形成由分散到集中、由局部到全面、由事后到实时、由被动到主动的网络安全监测保障能力。

Cyber security monitoring systems based on classifed protection have changed the traditional static and passive security monitoring to the dynamic and active monitoring.Supported by all kinds of network data fow,security threats and alarms,using technologies such as data fow collection and monitoring,big data,user behavior correlation analysis,security event correlation analysis,security visualization and situational awareness,this system provides dynamic display of vulnerability patching,threat information,security alarms,hacker attacks and so on.A cyberspace security monitoring system with centralized,comprehensive,real-time and active monitoring capability has been implemented.