安全事件应急处理系统分析

Analysis of Emergency Handling System of Security Incidents

从国内外现状出发，详细分析了安全事件应急处理系统在入侵监测、审计分析、事件响应、安全服务等方面的功能及特性需求，在此基础上提出了基于三层架构的应急处理系统结构模型，为系统的具体设计和实施提供了可行的操作框架。

Based on the state of the art, this paper analyzes the function and feature requirements of emergency handling system in detail, especially on aspects of intrusion surveillance, audit analysis, incident response and security service. It proposes the three-level framework for emergency handling system of security incidents for the sake of providing feasible operational architecture.