关于内网安全应急响应管理的技术探讨

安全事件应急响应管理是保障内网安全的重要手段。本文根据应急响应管理的六个阶段,分析了现有的内网安全应急响应解决方案的不足,提出了加强应急响应"封锁"阶段的控制能力是优化内网安全应急响应体系建设的关键所在。

The Technological Discussion on Intranet Security Incident Response Management

Security incident response management is the most important measure to ensure the safety of intranet.Based on the six phases of security incident response management,this paper analyses the shortcomings of existing solutions,and proposes that it is the key to enhance the control ability of the containment phase for improving security incident handling service.