Optimization and Implementation of Network Security Incident Handling Process Based on Secure Arrangement
This article addresses the issues of low efficiency and fragmented processes in network security incident response, proposing an innovative solution that utilizes security orchestration technology to optimize the handling process and achieve automation. Through an analysis of existing processes, the limitations of traditional methods are clearly defined. The research elaborates on the principles of security orchestration technology, including its advantages in integrating security tools and designing automated processes. The designed security orchestration system integrates diverse security functions such as firewall control, intrusion defense, etc., forming an automated event response chain that emphasizes flexibility, automated decision-making, and an intuitive operational interface. Case studies and system tests demonstrate that this system can significantly reduce response time, improve accuracy in handling, enhance situational awareness, and optimize resource allocation. This work provides an efficient technical framework for network security incident management, especially in the application of SOCs and in complex threat environments, showing significant practical value and theoretical significance. In the future, with the integration of technologies such as artificial intelligence, the intelligence and adaptability of security orchestration systems will be further enhanced, opening up new possibilities for network security protection.
Authors
- Lin Ni (ORCID: https://orcid.org/0000-0001-6118-6724)
- Shuai Zhang (ORCID: https://orcid.org/0000-0003-3177-7229)
- Tong Sicheng
- Bao Chakun
- Qian Yang (ORCID: https://orcid.org/0000-0002-0409-2753)
Institutions
- National University of Defense Technology (CN)
Publication Details
- Published
- 2024-08-29
- DOI
- https://doi.org/10.1109/icsece61636.2024.10729589
- Primary Topic
- Medical Research and Treatments
- Type
- article
- Field-Weighted Citation Impact
- 0.00