【摘要】 提出了一种拟人的网络安全智能集中管理机制,给出了系统模型并对系统性能和实现进行了分析。该机制中,agent对各种安全产品所产生的安全事件进行分析、处理,同时各agent之间根据需要进行交互,对未授权或无法识别的安全事件向安全智能管理中心汇报。安全智能管理中心将各agent汇报的安全事件(结合记忆中的相关信息)进行集中关联分析,按警报的紧急程度建立网络安全全局视图,并触发相应的响应与报告机制。采用该机制能够很好地减少系统开销,剔除误报,发现真实威胁,有利于网络安全管理员轻松地对安全事件实施管理。更多还原

【Abstract】 A personified network security intelligent centralized management mechanism is proposed in this paper,and a system model using the mechanism and the analysis of the performance and realization are presented.In this mechanism,each agent which behaves like a human worker deals with security events separately and communicates with other agents if necessary and it reports to Security Intelligent Management Center unauthorized or unidentified security events.The Security Intelligent Management Center makes a correlative analysis in received security events(combining relevant information in its memory),setting up a whole view according to emergency degrees of alarms,which is followed by relevant responses and report systems.It helps to reduce system wastage,eliminate error reports and find out missing reports which benefits security administrators with security events management easily.更多还原