Optimization and Implementation of Network Security Incident Handling Process Based on Secure Arrangement

This article addresses the issues of low efficiency and fragmented processes in network security incident response, proposing an innovative solution that utilizes security orchestration technology to optimize the handling process and achieve automation. Through an analysis of existing processes, the limitations of traditional methods are clearly defined. The research elaborates on the principles of security orchestration technology, including its advantages in integrating security tools and designing automated processes. The designed security orchestration system integrates diverse security functions such as firewall control, intrusion defense, etc., forming an automated event response chain that emphasizes flexibility, automated decision-making, and an intuitive operational interface. Case studies and system tests demonstrate that this system can significantly reduce response time, improve accuracy in handling, enhance situational awareness, and optimize resource allocation. This work provides an efficient technical framework for network security incident management, especially in the application of SOCs and in complex threat environments, showing significant practical value and theoretical significance. In the future, with the integration of technologies such as artificial intelligence, the intelligence and adaptability of security orchestration systems will be further enhanced, opening up new possibilities for network security protection.

Authors

Institutions

Publication Details

Published
2024-08-29
DOI
https://doi.org/10.1109/icsece61636.2024.10729589
Primary Topic
Medical Research and Treatments
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Optimization and Implementation of Network Security Incident Handling Process Based on Secure Arrangement

Lin Ni, Shuai Zhang, Tong Sicheng, Bao Chakun et al.
Medical Research and Treatments
article

Optimization and Implementation of Network Security Incident Handling Process Based on Secure Arrangement

Lin Ni, Shuai Zhang, Tong Sicheng, Bao Chakun, Qian Yang
article en

Abstract

This article addresses the issues of low efficiency and fragmented processes in network security incident response, proposing an innovative solution that utilizes security orchestration technology to optimize the handling process and achieve automation. Through an analysis of existing processes, the limitations of traditional methods are clearly defined. The research elaborates on the principles of security orchestration technology, including its advantages in integrating security tools and designing automated processes. The designed security orchestration system integrates diverse security functions such as firewall control, intrusion defense, etc., forming an automated event response chain that emphasizes flexibility, automated decision-making, and an intuitive operational interface. Case studies and system tests demonstrate that this system can significantly reduce response time, improve accuracy in handling, enhance situational awareness, and optimize resource allocation. This work provides an efficient technical framework for network security incident management, especially in the application of SOCs and in complex threat environments, showing significant practical value and theoretical significance. In the future, with the integration of technologies such as artificial intelligence, the intelligence and adaptability of security orchestration systems will be further enhanced, opening up new possibilities for network security protection.

National University of Defense Technology (CN)
Openalex Percentile: Top 63%
Medical Research and Treatments
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.