The Design And Application Of Data-Network Security Management System Based On SOC

With the continuous growing of networks, users, and information flow, data network, which takes an important part in mobile communication network , has more and more prominent security issues about network and information day by day. For instances, the communication security on the Internet, the overall security issues on application systems, physical security issues on system equipments, security issues on users and data.An advanced, scientific, and safety management system is required in order to ensure that the operation state of data network is efficient, and it can reflect the related status immediately, improve the efficiency of network, and reduce the incidents of the security issues and the impacts to the mobile operators.The main research works of this paper include: (1) Analyzing the current management status and the security management requirement of mobile data network, meanwhile, pointing out that setting up a scientific, integrate and full-functioned security management system is urgent. (2) Realizing the real-time safety monitoring on the various business system networks and the equipments of data network, forming a unified management interface, completing the analysis of the function risk, the analysis of security event collection, vulnerability management, alarm monitoring and other functions. (3) Improving the safety management system functions in the practice safety management, achieving a management which is clear, humanization, personalization and common, then with some alarm examples, showing that the manage system can find security alarms accurately and immediately, deal with the security alarms scientifily and correctly, and prevent the security threatens completely. This paper introduces the various management functions of SOC(Security Operation Center) and improvements of making security strategies, output of reports , alarm description, asset searching, various characteristic management of business systems, and dealing with the equipment alarms. It is realized that the security incidents are found at the first time, the security alarms are dealed with at the fisrt time, and the impact of the security threats are eliminated at the first time. It provides the security monitor persons with a convenient, direct and comprehensive safety management system to protect the network and information security of the data network.