A Study of Operation Mechanism for a Security Operation Center(SOC)

Autor: Jung-Feng Chang, 張榮鋒
Rok vydání: 2007
Druh dokumentu: 學位論文 ; thesis
Popis: 95
As the progress of information technology, communication and the Internet, lots of companies, official agencies, and military units rely on computer and network based operation to improve performance. However, information incidents like hackers, phishing mail, and phishing websites happened endlessly. Hence how to assurance the security of information systems and networks becomes the most critical issue. To build up a safe information communication environment, avoid hacker intrusion and computer virus incidents, most IT departments had already implement firewall、IDS(Intrusion Detection System) and anti-virus system. Nevertheless, the incidents and alerts generated by the information security devices are huge and lack for experts’ analyses and judgments. These data cannot become useful information to IT departments. Consequently, to solve the large number of security incidents generated by gradually weakening human resources and increasing security devices, SOC(Security Operation Center)was produced to become the best solution. SOC operating standards and incident handling SOP(Standard Operation Procedure) are surveyed carefully in this thesis to help timely awareness, processing large number of incidents and reducing information security threats. Therefore information security can be firmly believe by early alert and joint defense.
Databáze: Networked Digital Library of Theses & Dissertations