{"id":477975,"date":"2023-08-09T09:23:20","date_gmt":"2023-08-09T09:23:20","guid":{"rendered":""},"modified":"2023-09-05T11:15:49","modified_gmt":"2023-09-05T11:15:49","slug":"mdr","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/mdr\/","title":{"rendered":"\u8010\u591a\u836f"},"content":{"rendered":"<p>\u6258\u7ba1\u68c0\u6d4b\u548c\u54cd\u5e94 (MDR) \u662f IT \u4e13\u4e1a\u4eba\u5458\u5411\u7ec4\u7ec7\u63d0\u4f9b\u7684\u4e13\u4e1a\u7f51\u7edc\u5b89\u5168\u670d\u52a1\u3002MDR \u670d\u52a1\u5c06\u6280\u672f\u4e0e\u4eba\u7c7b\u4e13\u4e1a\u77e5\u8bc6\u76f8\u7ed3\u5408\uff0c\u4ee5\u8bc6\u522b\u3001\u76d1\u63a7\u3001\u5206\u6790\u548c\u5e94\u5bf9\u7f51\u7edc\u5b89\u5168\u5a01\u80c1\u3002\u8fd9\u662f\u4e00\u79cd\u5b9a\u5236\u65b9\u6cd5\uff0c\u63d0\u4f9b\u5168\u5929\u5019\u76d1\u63a7\u548c\u652f\u6301\uff0c\u65e8\u5728\u5c3d\u65e9\u53d1\u73b0\u6076\u610f\u6d3b\u52a8\u5e76\u6709\u6548\u5e94\u5bf9\u4ee5\u6700\u5927\u9650\u5ea6\u5730\u51cf\u5c11\u635f\u5bb3\u3002<\/p>\n<h2>MDR \u7684\u8d77\u6e90\u5386\u53f2\u53ca\u5176\u9996\u6b21\u63d0\u53ca<\/h2>\n<p>\u6258\u7ba1\u68c0\u6d4b\u548c\u54cd\u5e94\u7684\u6982\u5ff5\u8d77\u6e90\u4e8e 2010 \u5e74\u4ee3\u521d\uff0c\u5f53\u65f6\u5404\u7ec4\u7ec7\u5f00\u59cb\u8ba4\u8bc6\u5230\u4f20\u7edf\u5b89\u5168\u63aa\u65bd\u7684\u5c40\u9650\u6027\u3002\u590d\u6742\u7f51\u7edc\u5a01\u80c1\u7684\u5feb\u901f\u589e\u957f\u9700\u8981\u66f4\u52a8\u6001\u3001\u66f4\u5168\u9762\u7684\u5b89\u5168\u65b9\u6cd5\u3002MDR \u5e94\u8fd0\u800c\u751f\uff0c\u63d0\u4f9b\u6301\u7eed\u76d1\u63a7\u3001\u5a01\u80c1\u60c5\u62a5\u548c\u4e8b\u4ef6\u54cd\u5e94\u529f\u80fd\u3002\u5b83\u7684\u65e9\u671f\u91c7\u7528\u8005\u4e3b\u8981\u662f\u5927\u578b\u4f01\u4e1a\uff0c\u4f46\u5f88\u5feb\u5c31\u6269\u5c55\u5230\u6ee1\u8db3\u5404\u79cd\u89c4\u6a21\u548c\u7c7b\u578b\u7684\u7ec4\u7ec7\u7684\u9700\u6c42\u3002<\/p>\n<h2>\u6709\u5173 MDR \u7684\u8be6\u7ec6\u4fe1\u606f\uff1a\u6269\u5c55 MDR \u4e3b\u9898<\/h2>\n<p>MDR \u7ed3\u5408\u4e86\u51e0\u4e2a\u5173\u952e\u7ec4\u4ef6\uff0c\u63d0\u4f9b\u4e86\u5168\u9762\u7684\u7f51\u7edc\u5b89\u5168\u89e3\u51b3\u65b9\u6848\uff1a<\/p>\n<ol>\n<li><strong>\u76d1\u63a7<\/strong>\uff1a\u6301\u7eed\u76d1\u89c6\u7f51\u7edc\u4ee5\u53d1\u73b0\u53ef\u7591\u6d3b\u52a8\u3002<\/li>\n<li><strong>\u5a01\u80c1\u60c5\u62a5<\/strong>\uff1a\u5206\u6790\u548c\u4e86\u89e3\u7ec4\u7ec7\u9762\u4e34\u7684\u6f5c\u5728\u5a01\u80c1\u3002<\/li>\n<li><strong>\u4e8b\u4ef6\u54cd\u5e94<\/strong>\uff1a\u5bf9\u5df2\u786e\u8ba4\u7684\u5b89\u5168\u4e8b\u4ef6\u63d0\u4f9b\u5feb\u901f\u5e72\u9884\u3002<\/li>\n<li><strong>\u98ce\u9669\u7ba1\u7406<\/strong>\uff1a\u8bc6\u522b\u5e76\u89e3\u51b3\u6f5c\u5728\u7684\u5b89\u5168\u98ce\u9669\u3002<\/li>\n<\/ol>\n<p>MDR \u63d0\u4f9b\u5546\u4f7f\u7528\u591a\u79cd\u6280\u672f\uff0c\u5982\u7aef\u70b9\u68c0\u6d4b\u548c\u54cd\u5e94 (EDR) \u5de5\u5177\u3001\u5b89\u5168\u4fe1\u606f\u548c\u4e8b\u4ef6\u7ba1\u7406 (SIEM) \u7cfb\u7edf\u4ee5\u53ca\u4e13\u95e8\u7684\u5206\u6790\u5e73\u53f0\u3002<\/p>\n<h2>MDR \u7684\u5185\u90e8\u7ed3\u6784\uff1aMDR \u7684\u5de5\u4f5c\u539f\u7406<\/h2>\n<p>MDR \u901a\u8fc7\u4e00\u7cfb\u5217\u96c6\u6210\u6b65\u9aa4\u53d1\u6325\u4f5c\u7528\uff1a<\/p>\n<ol>\n<li><strong>\u6570\u636e\u91c7\u96c6<\/strong>\uff1a\u4ece\u7aef\u70b9\u3001\u7f51\u7edc\u548c\u670d\u52a1\u5668\u6536\u96c6\u4fe1\u606f\u3002<\/li>\n<li><strong>\u5206\u6790<\/strong>\uff1a\u5229\u7528\u9ad8\u7ea7\u5206\u6790\u6280\u672f\u8bc6\u522b\u53ef\u7591\u6a21\u5f0f\u3002<\/li>\n<li><strong>\u8b66\u62a5<\/strong>\uff1a\u901a\u77e5\u7ec4\u7ec7\u6f5c\u5728\u5a01\u80c1\u3002<\/li>\n<li><strong>\u8c03\u67e5<\/strong>\uff1a\u8bc4\u4f30\u5a01\u80c1\u4ee5\u786e\u5b9a\u9002\u5f53\u7684\u884c\u52a8\u65b9\u6848\u3002<\/li>\n<li><strong>\u56de\u590d<\/strong>\uff1a\u91c7\u53d6\u5fc5\u8981\u63aa\u65bd\u904f\u5236\u548c\u6d88\u9664\u5a01\u80c1\u3002<\/li>\n<li><strong>\u62a5\u544a<\/strong>\uff1a\u8bb0\u5f55\u4e8b\u4ef6\u5e76\u63d0\u51fa\u6539\u8fdb\u5efa\u8bae\u3002<\/li>\n<\/ol>\n<h2>MDR\u4e3b\u8981\u7279\u5f81\u5206\u6790<\/h2>\n<p>MDR\u7684\u6838\u5fc3\u529f\u80fd\u5305\u62ec\uff1a<\/p>\n<ul>\n<li><strong>24\/7 \u76d1\u63a7<\/strong>\uff1a\u80fd\u591f\u66f4\u5feb\u5730\u68c0\u6d4b\u5a01\u80c1\u3002<\/li>\n<li><strong>\u4e13\u5bb6\u5206\u6790<\/strong>\uff1a\u5229\u7528\u719f\u7ec3\u7684\u4e13\u4e1a\u4eba\u5458\u6765\u89e3\u91ca\u6570\u636e\u3002<\/li>\n<li><strong>\u4e3b\u52a8\u54cd\u5e94<\/strong>\uff1a\u786e\u4fdd\u53ca\u65f6\u505a\u51fa\u53cd\u5e94\u4ee5\u6700\u5927\u7a0b\u5ea6\u5730\u51cf\u5c11\u635f\u5931\u3002<\/li>\n<li><strong>\u5408\u89c4\u7ba1\u7406<\/strong>\uff1a\u534f\u52a9\u4fdd\u6301\u6cd5\u89c4\u9075\u4ece\u6027\u3002<\/li>\n<li><strong>\u91cf\u8eab\u5b9a\u5236\u7684\u89e3\u51b3\u65b9\u6848<\/strong>\uff1a\u6839\u636e\u7ec4\u7ec7\u7684\u7279\u5b9a\u9700\u6c42\u8fdb\u884c\u5b9a\u5236\u3002<\/li>\n<\/ul>\n<h2>MDR \u7684\u7c7b\u578b<\/h2>\n<p>\u5404\u79cd MDR \u670d\u52a1\u65e8\u5728\u6ee1\u8db3\u4e0d\u540c\u7684\u9700\u6c42\u3002\u4e0b\u8868\u6982\u8ff0\u4e86\u5e38\u89c1\u7c7b\u578b\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th>\u7c7b\u578b<\/th>\n<th>\u91cd\u70b9<\/th>\n<th>\u76ee\u6807\u542c\u4f17<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u57fa\u672c\u7684<\/td>\n<td>\u6807\u51c6\u76d1\u6d4b\u4e0e\u54cd\u5e94<\/td>\n<td>\u5c0f\u578b\u4f01\u4e1a<\/td>\n<\/tr>\n<tr>\n<td>\u5148\u8fdb\u7684<\/td>\n<td>\u589e\u5f3a\u5206\u6790\u548c\u667a\u80fd<\/td>\n<td>\u5927\u4e2d\u578b\u4f01\u4e1a<\/td>\n<\/tr>\n<tr>\n<td>\u5b9a\u5236<\/td>\n<td>\u91cf\u8eab\u5b9a\u5236\u7684\u89e3\u51b3\u65b9\u6848<\/td>\n<td>\u7279\u5b9a\u884c\u4e1a\u6216\u9700\u6c42<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>MDR \u7684\u4f7f\u7528\u65b9\u6cd5\u3001\u95ee\u9898\u53ca\u5176\u89e3\u51b3\u65b9\u6848<\/h2>\n<h3>\u7528\u9014\uff1a<\/h3>\n<ul>\n<li>\u4fdd\u62a4\u654f\u611f\u6570\u636e<\/li>\n<li>\u786e\u4fdd\u4e1a\u52a1\u8fde\u7eed\u6027<\/li>\n<li>\u4fdd\u6301\u76d1\u7ba1\u5408\u89c4\u6027<\/li>\n<\/ul>\n<h3>\u95ee\u9898\uff1a<\/h3>\n<ul>\n<li>\u5b9e\u65bd\u590d\u6742\u6027<\/li>\n<li>\u4e0e\u73b0\u6709\u7cfb\u7edf\u96c6\u6210<\/li>\n<li>\u6210\u672c\u9650\u5236<\/li>\n<\/ul>\n<h3>\u89e3\u51b3\u65b9\u6848\uff1a<\/h3>\n<ul>\n<li>\u9009\u62e9\u6b63\u786e\u7684\u63d0\u4f9b\u5546<\/li>\n<li>\u4ed4\u7ec6\u89c4\u5212\u548c\u8bc4\u4f30<\/li>\n<li>\u8003\u8651\u7ec4\u7ec7\u7684\u5177\u4f53\u9700\u6c42\u548c\u9884\u7b97<\/li>\n<\/ul>\n<h2>\u4e3b\u8981\u7279\u70b9\u53ca\u5176\u4ed6\u6bd4\u8f83<\/h2>\n<p>\u4ee5\u4e0b\u662f MDR\u3001\u4f20\u7edf\u5b89\u5168\u63aa\u65bd\u548c\u6258\u7ba1\u5b89\u5168\u670d\u52a1\u63d0\u4f9b\u5546 (MSSP) \u4e4b\u95f4\u7684\u6bd4\u8f83\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th>\u7279\u5f81<\/th>\n<th>\u8010\u591a\u836f<\/th>\n<th>\u4f20\u7edf\u5b89\u5168<\/th>\n<th>\u5fae\u670d\u52a1\u5b89\u5168\u4e13\u5bb6<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u6301\u7eed\u76d1\u63a7<\/td>\n<td>\u662f\u7684<\/td>\n<td>\u6709\u9650\u7684<\/td>\n<td>\u5404\u4e0d\u76f8\u540c<\/td>\n<\/tr>\n<tr>\n<td>\u4e13\u5bb6\u5206\u6790<\/td>\n<td>\u662f\u7684<\/td>\n<td>\u4e0d<\/td>\n<td>\u5404\u4e0d\u76f8\u540c<\/td>\n<\/tr>\n<tr>\n<td>\u5b9a\u5236\u5316<\/td>\n<td>\u9ad8\u7684<\/td>\n<td>\u4f4e\u7684<\/td>\n<td>\u4e2d\u7b49\u7684<\/td>\n<\/tr>\n<tr>\n<td>\u6210\u672c<\/td>\n<td>\u4e2d\u7b49\u504f\u4e0a<\/td>\n<td>\u4f4e\u7684<\/td>\n<td>\u4e2d\u7b49\u7684<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u4e0e MDR \u76f8\u5173\u7684\u672a\u6765\u524d\u666f\u548c\u6280\u672f<\/h2>\n<p>MDR \u7684\u672a\u6765\u53ef\u80fd\u5305\u62ec\uff1a<\/p>\n<ul>\n<li><strong>\u4e0e\u4eba\u5de5\u667a\u80fd\u548c\u673a\u5668\u5b66\u4e60\u96c6\u6210<\/strong>\uff1a\u7528\u4e8e\u589e\u5f3a\u68c0\u6d4b\u548c\u5206\u6790\u3002<\/li>\n<li><strong>\u57fa\u4e8e\u4e91\u7684\u89e3\u51b3\u65b9\u6848<\/strong>\uff1a\u63d0\u4f9b\u7075\u6d3b\u6027\u548c\u53ef\u6269\u5c55\u6027\u3002<\/li>\n<li><strong>\u4e0e\u5176\u4ed6\u5b89\u5168\u63aa\u65bd\u7684\u534f\u4f5c<\/strong>\uff1a\u63d0\u4f9b\u5168\u9762\u7684\u9632\u5fa1\u7b56\u7565\u3002<\/li>\n<\/ul>\n<h2>\u5982\u4f55\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u5c06\u5176\u4e0e MDR \u5173\u8054<\/h2>\n<p>\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u65b9\u5f0f\u5728 MDR \u4e2d\u53d1\u6325\u91cd\u8981\u4f5c\u7528\uff1a<\/p>\n<ul>\n<li><strong>\u76d1\u63a7\u6d41\u91cf<\/strong>\uff1a\u901a\u8fc7\u5206\u6790\u6d41\u91cf\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u68c0\u6d4b\u5f02\u5e38\u5e76\u6709\u52a9\u4e8e\u6574\u4f53\u5a01\u80c1\u68c0\u6d4b\u8fc7\u7a0b\u3002<\/li>\n<li><strong>\u9690\u79c1\u4fdd\u62a4<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u9690\u85cf IP \u5730\u5740\uff0c\u589e\u52a0\u989d\u5916\u7684\u5b89\u5168\u6027\u3002<\/li>\n<li><strong>\u5185\u5bb9\u8fc7\u6ee4<\/strong>\uff1a\u901a\u8fc7\u4ee3\u7406\u670d\u52a1\u5668\u8fc7\u6ee4\u6076\u610f\u5185\u5bb9\u53ef\u4ee5\u963b\u6b62\u6f5c\u5728\u5a01\u80c1\u8fdb\u5165\u7f51\u7edc\u3002<\/li>\n<\/ul>\n<p>OneProxy \u4f5c\u4e3a\u9886\u5148\u7684\u4ee3\u7406\u670d\u52a1\u5668\u63d0\u4f9b\u5546\uff0c\u63d0\u4f9b\u5f3a\u5927\u7684\u89e3\u51b3\u65b9\u6848\uff0c\u53ef\u4ee5\u8865\u5145 MDR \u7b56\u7565\u3001\u589e\u5f3a\u5b89\u5168\u63aa\u65bd\u5e76\u63d0\u4f9b\u4f18\u5316\u7684\u6027\u80fd\u3002<\/p>\n<h2>\u76f8\u5173\u94fe\u63a5<\/h2>\n<ul>\n<li><a href=\"https:\/\/oneproxy.pro\/cn\/\" target=\"_new\" rel=\"noopener\">OneProxy\u5b98\u65b9\u7f51\u7ad9<\/a><\/li>\n<li><a href=\"https:\/\/www.sans.org\" target=\"_new\" rel=\"noopener nofollow\">SANS \u7814\u7a76\u6240\uff1a\u4e86\u89e3 MDR<\/a><\/li>\n<li><a href=\"https:\/\/www.gartner.com\" target=\"_new\" rel=\"noopener nofollow\">Gartner\uff1aMDR \u670d\u52a1\u5e02\u573a\u6307\u5357<\/a><\/li>\n<li><a href=\"https:\/\/www.cybersecurity-insiders.com\" target=\"_new\" rel=\"noopener nofollow\">MDR \u6700\u4f73\u5b9e\u8df5\u6307\u5357<\/a><\/li>\n<\/ul>\n<hr>\n<p>\u672c\u6587\u4e2d\u7684\u4fe1\u606f\u5168\u9762\u6982\u8ff0\u4e86\u6258\u7ba1\u68c0\u6d4b\u548c\u54cd\u5e94 (MDR)\uff0c\u5305\u62ec\u5176\u5386\u53f2\u3001\u529f\u80fd\u3001\u7279\u6027\u3001\u7c7b\u578b\u3001\u95ee\u9898\u548c\u89e3\u51b3\u65b9\u6848\u3001\u672a\u6765\u524d\u666f\u4ee5\u53ca\u5b83\u4e0e OneProxy \u7b49\u4ee3\u7406\u670d\u52a1\u5668\u7684\u5173\u7cfb\u3002\u5bf9\u4e8e\u90a3\u4e9b\u5bfb\u6c42\u589e\u5f3a\u7f51\u7edc\u5b89\u5168\u6001\u52bf\u7684\u4eba\u6765\u8bf4\uff0cMDR \u63d0\u4f9b\u4e86\u4e00\u79cd\u4e3b\u52a8\u4e14\u91cf\u8eab\u5b9a\u5236\u7684\u65b9\u6cd5\u3002<\/p>","protected":false},"featured_media":468879,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477975","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Managed Detection and Response (MDR)<\/mark>","faq_items":[{"question":"What is Managed Detection and Response (MDR)?","answer":"<p>Managed Detection and Response (MDR) is a specialized service that combines technology and human expertise to monitor, detect, analyze, and respond to cybersecurity threats in an organization. It offers continuous support and aims to minimize damage by detecting and dealing with malicious activities early.<\/p>"},{"question":"How did Managed Detection and Response (MDR) originate?","answer":"<p>MDR originated in the early 2010s as a response to the growing complexity and sophistication of cyber threats. It emerged to address the limitations of traditional security measures, offering continuous monitoring, threat intelligence, and incident response capabilities.<\/p>"},{"question":"What are the key features of MDR?","answer":"<p>The key features of MDR include 24\/7 monitoring, expert analysis, proactive response, compliance management, and tailored solutions to suit the specific needs of the organization.<\/p>"},{"question":"How does MDR work?","answer":"<p>MDR works through a sequence of integrated steps, including data collection, analysis, alerting, investigation, response, and reporting. It gathers information, identifies suspicious patterns, notifies the organization, assesses the threat, takes necessary steps to contain and eliminate it, and documents the incident.<\/p>"},{"question":"What types of MDR exist, and who are they for?","answer":"<p>There are different types of MDR services designed to cater to various needs, such as Basic MDR for small businesses, Advanced MDR for medium to large enterprises, and Customized MDR for specific industries or needs.<\/p>"},{"question":"What are some common problems with MDR, and how can they be solved?","answer":"<p>Some common problems with MDR include implementation complexity, integration challenges with existing systems, and cost constraints. Solutions may include careful planning, choosing the right provider, and considering the organization\u2019s specific needs and budget.<\/p>"},{"question":"How does MDR compare to traditional security measures and MSSP?","answer":"<p>MDR offers continuous monitoring, expert analysis, and high customization, making it more comprehensive compared to traditional security, which may lack continuous monitoring and expert analysis. Compared to Managed Security Services Providers (MSSP), MDR offers a more specialized and tailored approach.<\/p>"},{"question":"What are the future perspectives and technologies related to MDR?","answer":"<p>The future of MDR may include integration with AI and machine learning for enhanced detection, cloud-based solutions for scalability, and collaboration with other security measures to offer comprehensive defense.<\/p>"},{"question":"How can proxy servers like OneProxy be associated with MDR?","answer":"<p>Proxy servers like OneProxy can enhance MDR by monitoring traffic to detect anomalies, protecting privacy by hiding IP addresses, and filtering malicious content to prevent threats from reaching the network.<\/p>"},{"question":"Where can I find more information about MDR?","answer":"<p>You can find more information about MDR through resources such as the <a href=\"https:\/\/www.oneproxy.pro\" target=\"_new\">OneProxy Official Website<\/a>, <a href=\"https:\/\/www.sans.org\" target=\"_new\">SANS Institute: Understanding MDR<\/a>, <a href=\"https:\/\/www.gartner.com\" target=\"_new\">Gartner: Market Guide for MDR Services<\/a>, and the <a href=\"https:\/\/www.cybersecurity-insiders.com\" target=\"_new\">MDR Best Practices Guide<\/a>.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/477975","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/477975\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/468879"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=477975"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}