METHOD AND SYSTEM FOR OPERATING SECURITY CALL CENTER TO COPE WITH SECURITY INTRUSION ACCIDENTS FOR NETWORK

摘要

Purpose: a kind of method and system that security intrusion accident is dealt with for operating a safety call center is provided to the type integrated form security solution an of intelligence, suitable for novel or a change information communication environment a intrusion, intrusion in real time or attack are correctly detected/dealt with. Construction: one of firewall connects between an external network and an internal network. Security agent monitor data stream flows in the internal network of a server and a system call. One ISE (intelligent security engine) judgements attack is by one warning message of analysis, traffic information, and from the event information of security agent, generates signature by study. One security strategy manage/is applied to each security agent of a judging result based on ISE by one SPM (security policy manager).