{"id":479046,"date":"2023-08-09T10:01:33","date_gmt":"2023-08-09T10:01:33","guid":{"rendered":""},"modified":"2023-09-05T11:18:03","modified_gmt":"2023-09-05T11:18:03","slug":"soc","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/soc\/","title":{"rendered":"SOC"},"content":{"rendered":"

\u5b89\u5168\u8fd0\u8425\u4e2d\u5fc3 (SOC) \u662f\u7ec4\u7ec7\u5185\u7684\u4e00\u4e2a\u4e2d\u592e\u5355\u4f4d\uff0c\u8d1f\u8d23\u76d1\u63a7\u3001\u68c0\u6d4b\u3001\u5206\u6790\u548c\u5e94\u5bf9\u7f51\u7edc\u5b89\u5168\u4e8b\u4ef6\u3002\u5b83\u662f\u7ec4\u7ec7\u7f51\u7edc\u5b89\u5168\u5de5\u4f5c\u7684\u795e\u7ecf\u4e2d\u67a2\uff0c\u5b89\u5168\u5206\u6790\u5e08\u548c\u4e13\u5bb6\u5728\u8fd9\u91cc\u5171\u540c\u52aa\u529b\uff0c\u4fdd\u62a4\u7ec4\u7ec7\u7684\u5173\u952e\u8d44\u4ea7\u548c\u6570\u636e\u514d\u53d7\u5404\u79cd\u7f51\u7edc\u5a01\u80c1\u3002<\/p>\n

SOC\u7684\u8d77\u6e90\u5386\u53f2\u53ca\u5176\u9996\u6b21\u63d0\u53ca<\/h2>\n

\u5b89\u5168\u8fd0\u8425\u4e2d\u5fc3\u7684\u6982\u5ff5\u53ef\u4ee5\u8ffd\u6eaf\u5230 20 \u4e16\u7eaa 80 \u5e74\u4ee3\uff0c\u5f53\u65f6\u8ba1\u7b97\u673a\u7f51\u7edc\u548c\u4e92\u8054\u7f51\u7684\u5174\u8d77\u5e26\u6765\u4e86\u65b0\u7684\u5b89\u5168\u6311\u6218\u3002\u968f\u7740\u7f51\u7edc\u5a01\u80c1\u53d8\u5f97\u8d8a\u6765\u8d8a\u590d\u6742\uff0c\u7ec4\u7ec7\u610f\u8bc6\u5230\u9700\u8981\u4e00\u652f\u4e13\u95e8\u7684\u56e2\u961f\u6765\u53ca\u65f6\u6709\u6548\u5730\u5904\u7406\u5b89\u5168\u4e8b\u4ef6\u3002<\/p>\n

SOC \u6700\u65e9\u51fa\u73b0\u5728 20 \u4e16\u7eaa 90 \u5e74\u4ee3\u4e2d\u671f\uff0c\u5f53\u65f6\u5927\u578b\u4f01\u4e1a\u548c\u653f\u5e9c\u673a\u6784\u5f00\u59cb\u7ec4\u5efa\u56e2\u961f\u6765\u76d1\u63a7\u548c\u5e94\u5bf9\u7f51\u7edc\u5b89\u5168\u4e8b\u4ef6\u3002\u6700\u521d\uff0c\u8fd9\u4e9b\u4e2d\u5fc3\u4ec5\u9650\u4e8e\u5904\u7406\u7f51\u7edc\u5b89\u5168\u4e8b\u4ef6\uff0c\u4f46\u968f\u7740\u65f6\u95f4\u7684\u63a8\u79fb\uff0c\u5b83\u4eec\u9010\u6e10\u53d1\u5c55\u5230\u6db5\u76d6\u66f4\u5e7f\u6cdb\u7684\u7f51\u7edc\u5b89\u5168\u95ee\u9898\uff0c\u5305\u62ec\u7aef\u70b9\u5b89\u5168\u3001\u5e94\u7528\u7a0b\u5e8f\u5b89\u5168\u548c\u5a01\u80c1\u60c5\u62a5\u3002<\/p>\n

\u6709\u5173 SOC \u7684\u8be6\u7ec6\u4fe1\u606f\u3002\u6269\u5c55 SOC \u4e3b\u9898\u3002<\/h2>\n

SOC \u7684\u4e3b\u8981\u76ee\u6807\u662f\u901a\u8fc7\u4e3b\u52a8\u76d1\u63a7 IT \u57fa\u7840\u8bbe\u65bd\u3001\u8bc6\u522b\u6f5c\u5728\u5b89\u5168\u4e8b\u4ef6\u5e76\u53ca\u65f6\u54cd\u5e94\u6765\u4fdd\u62a4\u7ec4\u7ec7\u514d\u53d7\u7f51\u7edc\u5a01\u80c1\u3002\u8fd9\u79cd\u4e3b\u52a8\u65b9\u6cd5\u4f7f\u7ec4\u7ec7\u80fd\u591f\u5728\u5a01\u80c1\u9020\u6210\u91cd\u5927\u635f\u5bb3\u4e4b\u524d\u68c0\u6d4b\u5e76\u7f13\u89e3\u5a01\u80c1\u3002<\/p>\n

\u5178\u578b\u7684SOC\u7531\u4ee5\u4e0b\u5173\u952e\u7ec4\u4ef6\u7ec4\u6210\uff1a<\/p>\n

    \n
  1. \n

    \u5b89\u5168\u5206\u6790\u5e08\uff1a<\/strong> \u8fd9\u4e9b\u90fd\u662f\u719f\u7ec3\u7684\u4e13\u4e1a\u4eba\u5458\uff0c\u4ed6\u4eec\u5206\u6790\u5b89\u5168\u8b66\u62a5\u548c\u4e8b\u4ef6\uff0c\u8c03\u67e5\u6f5c\u5728\u5a01\u80c1\uff0c\u5e76\u5236\u5b9a\u9002\u5f53\u7684\u5e94\u5bf9\u7b56\u7565\u3002<\/p>\n<\/li>\n

  2. \n

    \u5b89\u5168\u4fe1\u606f\u548c\u4e8b\u4ef6\u7ba1\u7406 (SIEM) \u7cfb\u7edf\uff1a<\/strong> SIEM \u7cfb\u7edf\u662f\u7528\u4e8e\u6536\u96c6\u3001\u5173\u8054\u548c\u5206\u6790\u6765\u81ea\u5404\u79cd\u6765\u6e90\uff08\u4f8b\u5982\u9632\u706b\u5899\u3001\u5165\u4fb5\u68c0\u6d4b\u7cfb\u7edf\u548c\u9632\u75c5\u6bd2\u8f6f\u4ef6\uff09\u7684\u5b89\u5168\u4e8b\u4ef6\u6570\u636e\u7684\u6838\u5fc3\u5de5\u5177\u3002<\/p>\n<\/li>\n

  3. \n

    \u5a01\u80c1\u60c5\u62a5\uff1a<\/strong> SOC \u56e2\u961f\u4f9d\u9760\u6700\u65b0\u7684\u5a01\u80c1\u60c5\u62a5\u6765\u4e86\u89e3\u7f51\u7edc\u72af\u7f6a\u5206\u5b50\u4f7f\u7528\u7684\u6700\u65b0\u653b\u51fb\u8d8b\u52bf\u3001\u7b56\u7565\u548c\u6280\u672f\u3002<\/p>\n<\/li>\n

  4. \n

    \u4e8b\u4ef6\u54cd\u5e94\u8ba1\u5212\uff1a<\/strong> \u660e\u786e\u7684\u4e8b\u4ef6\u54cd\u5e94\u8ba1\u5212\u6982\u8ff0\u4e86\u53d1\u751f\u7f51\u7edc\u5b89\u5168\u4e8b\u4ef6\u65f6\u5e94\u91c7\u53d6\u7684\u7a0b\u5e8f\u548c\u884c\u52a8\uff0c\u786e\u4fdd\u534f\u8c03\u6709\u6548\u7684\u54cd\u5e94\u3002<\/p>\n<\/li>\n

  5. \n

    \u6301\u7eed\u76d1\u63a7\uff1a<\/strong> SOC\u5168\u5929\u5019\u8fd0\u884c\uff0c\u786e\u4fdd\u6301\u7eed\u76d1\u63a7\u7ec4\u7ec7\u7684IT\u57fa\u7840\u8bbe\u65bd\u5e76\u53ca\u65f6\u54cd\u5e94\u4e8b\u4ef6\u3002<\/p>\n<\/li>\n

  6. \n

    \u6cd5\u533b\u548c\u8c03\u67e5\uff1a<\/strong> SOC \u56e2\u961f\u8fdb\u884c\u4e8b\u540e\u5206\u6790\u548c\u53d6\u8bc1\uff0c\u4ee5\u4e86\u89e3\u653b\u51fb\u7684\u6839\u672c\u539f\u56e0\u5e76\u9632\u6b62\u5c06\u6765\u53d1\u751f\u7c7b\u4f3c\u4e8b\u4ef6\u3002<\/p>\n<\/li>\n

  7. \n

    \u5408\u4f5c\uff1a<\/strong> \u4e0e\u5176\u4ed6\u56e2\u961f\uff08\u4f8b\u5982 IT\u3001\u6cd5\u5f8b\u548c\u6267\u884c\u7ba1\u7406\uff09\u7684\u6709\u6548\u6c9f\u901a\u548c\u534f\u4f5c\u5bf9\u4e8e SOC \u7684\u6210\u529f\u81f3\u5173\u91cd\u8981\u3002<\/p>\n<\/li>\n<\/ol>\n

    SOC\u7684\u5185\u90e8\u7ed3\u6784\u3002SOC\u7684\u5de5\u4f5c\u539f\u7406\u3002<\/h2>\n

    SOC \u6309\u7167\u79f0\u4e3a\u201cSOC \u751f\u547d\u5468\u671f\u201d\u7684\u5faa\u73af\u8fc7\u7a0b\u8fd0\u884c\u3002\u6b64\u8fc7\u7a0b\u5305\u542b\u51e0\u4e2a\u9636\u6bb5\uff1a<\/p>\n

      \n
    1. \n

      \u68c0\u6d4b\uff1a<\/strong> \u5728\u6b64\u9636\u6bb5\uff0cSOC \u4ece\u5404\u79cd\u5b89\u5168\u5de5\u5177\u548c\u8bbe\u5907\uff08\u5982\u9632\u706b\u5899\u3001\u5165\u4fb5\u68c0\u6d4b\u7cfb\u7edf\u548c\u9632\u75c5\u6bd2\u8f6f\u4ef6\uff09\u6536\u96c6\u6570\u636e\u3002\u7136\u540e\u6c47\u603b\u548c\u5206\u6790\u8fd9\u4e9b\u6570\u636e\uff0c\u4ee5\u8bc6\u522b\u6f5c\u5728\u7684\u5b89\u5168\u4e8b\u4ef6\u3002<\/p>\n<\/li>\n

    2. \n

      \u5206\u6790\uff1a<\/strong> \u4e00\u65e6\u68c0\u6d4b\u5230\u6f5c\u5728\u7684\u5b89\u5168\u4e8b\u4ef6\uff0c\u5b89\u5168\u5206\u6790\u5e08\u5c31\u4f1a\u8c03\u67e5\u8be5\u4e8b\u4ef6\u4ee5\u786e\u5b9a\u5176\u6027\u8d28\u3001\u4e25\u91cd\u7a0b\u5ea6\u53ca\u5176\u5bf9\u7ec4\u7ec7\u7684\u6f5c\u5728\u5f71\u54cd\u3002<\/p>\n<\/li>\n

    3. \n

      \u4e8b\u4ef6\u9a8c\u8bc1\uff1a<\/strong> SOC \u56e2\u961f\u9a8c\u8bc1\u68c0\u6d4b\u5230\u7684\u4e8b\u4ef6\uff0c\u4ee5\u786e\u4fdd\u5b83\u662f\u771f\u6b63\u7684\u5a01\u80c1\u800c\u4e0d\u662f\u8bef\u62a5\u3002<\/p>\n<\/li>\n

    4. \n

      \u904f\u5236\u548c\u6839\u9664\uff1a<\/strong> \u786e\u8ba4\u4e8b\u4ef6\u540e\uff0cSOC \u4f1a\u7acb\u5373\u91c7\u53d6\u884c\u52a8\u904f\u5236\u5a01\u80c1\u5e76\u9632\u6b62\u5176\u8fdb\u4e00\u6b65\u8513\u5ef6\u3002\u8fd9\u53ef\u80fd\u5305\u62ec\u9694\u79bb\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u3001\u963b\u6b62\u6076\u610f\u6d41\u91cf\u6216\u5e94\u7528\u5fc5\u8981\u7684\u8865\u4e01\u3002<\/p>\n<\/li>\n

    5. \n

      \u6062\u590d\uff1a<\/strong> \u4e00\u65e6\u5a01\u80c1\u5f97\u5230\u63a7\u5236\u548c\u6d88\u9664\uff0cSOC\u5c31\u4f1a\u81f4\u529b\u4e8e\u6062\u590d\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u548c\u670d\u52a1\u7684\u6b63\u5e38\u8fd0\u884c\u3002<\/p>\n<\/li>\n

    6. \n

      \u5f97\u5230\u6559\u8bad\uff1a<\/strong> \u8fdb\u884c\u4e8b\u540e\u5206\u6790\u662f\u4e3a\u4e86\u4e86\u89e3\u653b\u51fb\u7684\u7b56\u7565\u5e76\u5236\u5b9a\u7b56\u7565\u6765\u9632\u6b62\u5c06\u6765\u53d1\u751f\u7c7b\u4f3c\u4e8b\u4ef6\u3002<\/p>\n<\/li>\n<\/ol>\n

      SOC\u7684\u5173\u952e\u7279\u6027\u5206\u6790\u3002<\/h2>\n

      SOC \u5177\u6709\u591a\u9879\u5173\u952e\u529f\u80fd\uff0c\u6709\u52a9\u4e8e\u6709\u6548\u4fdd\u62a4\u7ec4\u7ec7\u514d\u53d7\u7f51\u7edc\u5a01\u80c1\uff1a<\/p>\n

        \n
      1. \n

        \u4e3b\u52a8\u5a01\u80c1\u68c0\u6d4b\uff1a<\/strong> SOC \u56e2\u961f\u6301\u7eed\u76d1\u63a7\u7ec4\u7ec7\u7684\u57fa\u7840\u8bbe\u65bd\uff0c\u4ee5\u4fbf\u5728\u5a01\u80c1\u5347\u7ea7\u4e4b\u524d\u68c0\u6d4b\u5e76\u5e94\u5bf9\u5a01\u80c1\u3002<\/p>\n<\/li>\n

      2. \n

        \u96c6\u4e2d\u53ef\u89c1\u6027\uff1a<\/strong> \u96c6\u4e2d\u5f0f SOC \u63d0\u4f9b\u4e86\u7ec4\u7ec7\u5b89\u5168\u6001\u52bf\u7684\u7edf\u4e00\u89c6\u56fe\uff0c\u5b9e\u73b0\u4e86\u9ad8\u6548\u7684\u76d1\u63a7\u548c\u4e8b\u4ef6\u7ba1\u7406\u3002<\/p>\n<\/li>\n

      3. \n

        \u5b9e\u65f6\u54cd\u5e94\uff1a<\/strong> SOC\u5206\u6790\u5e08\u5b9e\u65f6\u54cd\u5e94\u4e8b\u4ef6\uff0c\u51cf\u5c11\u7f51\u7edc\u653b\u51fb\u7684\u6f5c\u5728\u5f71\u54cd\u3002<\/p>\n<\/li>\n

      4. \n

        \u5a01\u80c1\u60c5\u62a5\u96c6\u6210\uff1a<\/strong> SOC \u56e2\u961f\u5229\u7528\u5a01\u80c1\u60c5\u62a5\u6765\u4e86\u89e3\u6700\u65b0\u7684\u7f51\u7edc\u5a01\u80c1\u5e76\u589e\u5f3a\u4ed6\u4eec\u7684\u4e8b\u4ef6\u54cd\u5e94\u80fd\u529b\u3002<\/p>\n<\/li>\n

      5. \n

        \u534f\u4f5c\u4e0e\u6c9f\u901a\uff1a<\/strong> \u4e0e\u5176\u4ed6\u56e2\u961f\u548c\u5229\u76ca\u76f8\u5173\u8005\u7684\u6709\u6548\u6c9f\u901a\u548c\u534f\u4f5c\u786e\u4fdd\u5bf9\u5b89\u5168\u4e8b\u4ef6\u7684\u534f\u8c03\u54cd\u5e94\u3002<\/p>\n<\/li>\n<\/ol>\n

        SOC \u7684\u7c7b\u578b<\/h2>\n

        \u6839\u636e\u7ed3\u6784\u3001\u89c4\u6a21\u548c\u8303\u56f4\uff0cSOC \u53ef\u5206\u4e3a\u4ee5\u4e0b\u4e09\u79cd\u4e3b\u8981\u7c7b\u578b\uff1a<\/p>\n\n\n\n\n\n\n\n\n\n\n
        \u7c7b\u578b<\/th>\n\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n
        \u5185\u90e8 SOC<\/strong><\/td>\n\u8fd9\u79cd\u7c7b\u578b\u7684 SOC \u5728\u7ec4\u7ec7\u5185\u90e8\u5efa\u7acb\u548c\u8fd0\u8425\u3002\u5b83\u63d0\u4f9b\u91cf\u8eab\u5b9a\u5236\u7684\u5b89\u5168\u89e3\u51b3\u65b9\u6848\uff0c<\/td>\n<\/tr>\n
        <\/td>\n\u4f46\u5b83\u9700\u8981\u5728\u6280\u672f\u3001\u4eba\u5458\u548c\u6301\u7eed\u7ef4\u62a4\u65b9\u9762\u8fdb\u884c\u5927\u91cf\u6295\u8d44\u3002<\/td>\n<\/tr>\n
        \u5171\u540c\u7ba1\u7406 SOC<\/strong><\/td>\n\u5728\u5171\u540c\u7ba1\u7406\u7684 SOC \u4e2d\uff0c\u7ec4\u7ec7\u4e0e\u6258\u7ba1\u5b89\u5168\u670d\u52a1\u63d0\u4f9b\u5546 (MSSP) \u5408\u4f5c\u5171\u4eab SOC<\/td>\n<\/tr>\n
        <\/td>\n\u8d23\u4efb\u3002\u8be5\u7ec4\u7ec7\u5728\u53d7\u76ca\u4e8e MSSP \u7684\u4e13\u4e1a\u77e5\u8bc6\u7684\u540c\u65f6\uff0c\u4fdd\u7559\u4e86\u4e00\u5b9a\u7684\u63a7\u5236\u6743\u3002<\/td>\n<\/tr>\n
        \u5b8c\u5168\u5916\u5305\u7684SOC<\/strong><\/td>\n\u5728\u5b8c\u5168\u5916\u5305\u7684 SOC \u4e2d\uff0c\u7ec4\u7ec7\u5c06\u5176\u6574\u4e2a\u7f51\u7edc\u5b89\u5168\u8fd0\u8425\u79fb\u4ea4\u7ed9 MSSP\u3002<\/td>\n<\/tr>\n
        <\/td>\nMSSP \u7ba1\u7406 SOC \u7684\u5404\u4e2a\u65b9\u9762\uff0c\u4f7f\u7ec4\u7ec7\u80fd\u591f\u4e13\u6ce8\u4e8e\u5176\u6838\u5fc3\u4e1a\u52a1\u6d3b\u52a8\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

        SOC\u7684\u4f7f\u7528\u65b9\u6cd5\u3001\u4f7f\u7528\u4e2d\u5b58\u5728\u7684\u95ee\u9898\u53ca\u5176\u89e3\u51b3\u65b9\u6848\u3002<\/h2>\n

        SOC \u5728\u4fdd\u62a4\u7ec4\u7ec7\u514d\u53d7\u7f51\u7edc\u5a01\u80c1\u65b9\u9762\u53d1\u6325\u7740\u81f3\u5173\u91cd\u8981\u7684\u4f5c\u7528\uff0c\u4f46\u5b83\u4eec\u4e5f\u9762\u4e34\u7740\u4e00\u4e9b\u6311\u6218\uff1a<\/p>\n

        1.\u6280\u80fd\u77ed\u7f3a\uff1a<\/strong> \u7f51\u7edc\u5b89\u5168\u884c\u4e1a\u9762\u4e34\u4e13\u4e1a\u6280\u80fd\u77ed\u7f3a\u7684\u95ee\u9898\uff0c\u8fd9\u4f7f\u5f97\u7ec4\u7ec7\u96be\u4ee5\u8058\u7528\u548c\u7559\u4f4f\u5408\u683c\u7684 SOC \u5206\u6790\u5e08\u3002\u4e3a\u4e86\u89e3\u51b3\u8fd9\u4e2a\u95ee\u9898\uff0c\u7ec4\u7ec7\u53ef\u4ee5\u6295\u8d44\u57f9\u8bad\u8ba1\u5212\u5e76\u4e0e\u6559\u80b2\u673a\u6784\u5408\u4f5c\u3002<\/p>\n

        2. \u8b66\u62a5\u8fc7\u8f7d\uff1a<\/strong> \u5404\u79cd\u5de5\u5177\u751f\u6210\u7684\u5927\u91cf\u5b89\u5168\u8b66\u62a5\u53ef\u80fd\u4f1a\u8ba9 SOC \u5206\u6790\u5e08\u4e0d\u582a\u91cd\u8d1f\uff0c\u5bfc\u81f4\u8b66\u62a5\u75b2\u52b3\u548c\u5bf9\u5173\u952e\u4e8b\u4ef6\u7684\u6f5c\u5728\u758f\u5ffd\u3002\u5b9e\u65bd\u5148\u8fdb\u7684 AI \u548c\u673a\u5668\u5b66\u4e60\u6280\u672f\u53ef\u4ee5\u5e2e\u52a9\u81ea\u52a8\u5206\u7c7b\u8b66\u62a5\u5e76\u786e\u5b9a\u4e8b\u4ef6\u7684\u4f18\u5148\u7ea7\u3002<\/p>\n

        3. \u4e0d\u65ad\u6f14\u53d8\u7684\u5a01\u80c1\u5f62\u52bf\uff1a<\/strong> \u7f51\u7edc\u5a01\u80c1\u4e0d\u65ad\u6f14\u53d8\uff0c\u653b\u51fb\u8005\u4e5f\u8d8a\u6765\u8d8a\u72e1\u733e\u3002\u4e3a\u4e86\u5e94\u5bf9\u4e0d\u65ad\u53d8\u5316\u7684\u5a01\u80c1\u5f62\u52bf\uff0cSOC \u56e2\u961f\u5fc5\u987b\u638c\u63e1\u6700\u65b0\u7684\u5a01\u80c1\u60c5\u62a5\uff0c\u5e76\u4e0d\u65ad\u6539\u8fdb\u5176\u4e8b\u4ef6\u54cd\u5e94\u7b56\u7565\u3002<\/p>\n

        4.\u96c6\u6210\u590d\u6742\u6027\uff1a<\/strong> SOC\u5de5\u5177\u548c\u7cfb\u7edf\u53ef\u80fd\u6765\u81ea\u4e0d\u540c\u7684\u4f9b\u5e94\u5546\uff0c\u5e26\u6765\u96c6\u6210\u6311\u6218\u3002\u91c7\u7528\u6807\u51c6\u5316\u534f\u8bae\u548c\u5b89\u5168\u6846\u67b6\u53ef\u4ee5\u4fc3\u8fdb\u66f4\u597d\u7684\u96c6\u6210\u548c\u4fe1\u606f\u5171\u4eab\u3002<\/p>\n

        \u4ee5\u8868\u683c\u548c\u5217\u8868\u7684\u5f62\u5f0f\u5217\u51fa\u4e3b\u8981\u7279\u5f81\u4ee5\u53ca\u4e0e\u7c7b\u4f3c\u672f\u8bed\u7684\u5176\u4ed6\u6bd4\u8f83\u3002<\/h2>\n\n\n\n\n\n\n\n\n
        \u5b66\u671f<\/th>\n\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n
        SOC\uff08\u5b89\u5168\u8fd0\u8425\u4e2d\u5fc3\uff09<\/strong><\/td>\n\u8d1f\u8d23\u76d1\u63a7\u3001\u68c0\u6d4b\u3001\u5206\u6790\u548c\u5e94\u5bf9\u7f51\u7edc\u5b89\u5168\u4e8b\u4ef6\u7684\u96c6\u4e2d\u5355\u4f4d\u3002<\/td>\n<\/tr>\n
        SIEM\uff08\u5b89\u5168\u4fe1\u606f\u548c\u4e8b\u4ef6\u7ba1\u7406\uff09<\/strong><\/td>\n\u7528\u4e8e\u6536\u96c6\u3001\u5173\u8054\u548c\u5206\u6790\u6765\u81ea\u5404\u79cd\u6765\u6e90\u7684\u5b89\u5168\u4e8b\u4ef6\u6570\u636e\u7684\u8f6f\u4ef6\u89e3\u51b3\u65b9\u6848\u3002<\/td>\n<\/tr>\n
        CERT\uff08\u8ba1\u7b97\u673a\u7d27\u6025\u54cd\u5e94\u5c0f\u7ec4\uff09<\/strong><\/td>\n\u8d1f\u8d23\u54cd\u5e94\u548c\u7ba1\u7406\u7f51\u7edc\u5b89\u5168\u4e8b\u4ef6\u7684\u4e13\u5bb6\u7ec4\u3002\u5b83\u53ef\u4ee5\u662f SOC \u7684\u4e00\u90e8\u5206\uff0c\u4e5f\u53ef\u4ee5\u662f\u72ec\u7acb\u5b9e\u4f53\u3002<\/td>\n<\/tr>\n
        \u6258\u7ba1\u5b89\u5168\u670d\u52a1\u63d0\u4f9b\u5546 (MSSP)<\/strong><\/td>\n\u4e00\u5bb6\u5411\u7ec4\u7ec7\u63d0\u4f9b\u6258\u7ba1\u5b89\u5168\u670d\u52a1\uff08\u5305\u62ec SOC \u529f\u80fd\uff09\u7684\u516c\u53f8\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

        \u4e0eSOC\u76f8\u5173\u7684\u672a\u6765\u89c2\u70b9\u548c\u6280\u672f\u3002<\/h2>\n

        SOC\u7684\u672a\u6765\u9884\u8ba1\u5c06\u53d7\u5230\u51e0\u79cd\u65b0\u5174\u6280\u672f\u548c\u8d8b\u52bf\u7684\u5f71\u54cd\uff1a<\/p>\n

        1.\u4eba\u5de5\u667a\u80fd\uff08AI\uff09\u548c\u673a\u5668\u5b66\u4e60\uff1a<\/strong> \u4eba\u5de5\u667a\u80fd\u5de5\u5177\u5c06\u5728\u81ea\u52a8\u5316\u5a01\u80c1\u68c0\u6d4b\u548c\u54cd\u5e94\u8fc7\u7a0b\u4e2d\u53d1\u6325\u91cd\u8981\u4f5c\u7528\uff0c\u4f7f SOC \u56e2\u961f\u80fd\u591f\u6709\u6548\u5730\u5904\u7406\u5927\u91cf\u4e8b\u4ef6\u3002<\/p>\n

        2.\u57fa\u4e8e\u4e91\u7684SOC\uff1a<\/strong> \u968f\u7740\u4e91\u670d\u52a1\u7684\u65e5\u76ca\u666e\u53ca\uff0cSOC\u529f\u80fd\u5f88\u53ef\u80fd\u88ab\u96c6\u6210\u5230\u4e91\u73af\u5883\u4e2d\uff0c\u5b9e\u73b0\u8de8\u5206\u5e03\u5f0f\u57fa\u7840\u8bbe\u65bd\u7684\u5b9e\u65f6\u76d1\u63a7\u548c\u54cd\u5e94\u3002<\/p>\n

        3.\u7269\u8054\u7f51\u5b89\u5168\uff1a<\/strong> \u968f\u7740\u7269\u8054\u7f51 (IoT) \u7684\u4e0d\u65ad\u53d1\u5c55\uff0cSOC \u56e2\u961f\u5c06\u9762\u4e34\u4fdd\u62a4\u8054\u7f51\u8bbe\u5907\u7684\u6311\u6218\u3002\u9700\u8981\u4e13\u95e8\u7684\u5de5\u5177\u548c\u65b9\u6cd5\u6765\u76d1\u63a7\u548c\u4fdd\u62a4\u7269\u8054\u7f51\u751f\u6001\u7cfb\u7edf\u3002<\/p>\n

        4.\u96f6\u4fe1\u4efb\u5b89\u5168\uff1a<\/strong> \u96f6\u4fe1\u4efb\u6a21\u578b\u5047\u8bbe\u6240\u6709\u7f51\u7edc\u6d41\u91cf\u90fd\u53ef\u80fd\u662f\u4e0d\u53d7\u4fe1\u4efb\u7684\uff0c\u8be5\u6a21\u578b\u5c06\u5f97\u5230\u666e\u53ca\uff0c\u4ece\u800c\u5bfc\u81f4 SOC \u7b56\u7565\u4e13\u6ce8\u4e8e\u6301\u7eed\u9a8c\u8bc1\u548c\u8eab\u4efd\u9a8c\u8bc1\u3002<\/p>\n

        5.SOAR\uff08\u5b89\u5168\u7f16\u6392\u3001\u81ea\u52a8\u5316\u548c\u54cd\u5e94\uff09\u7684\u96c6\u6210\uff1a<\/strong> SOAR \u5e73\u53f0\u5c06\u6210\u4e3a SOC \u8fd0\u8425\u4e0d\u53ef\u6216\u7f3a\u7684\u4e00\u90e8\u5206\uff0c\u901a\u8fc7\u81ea\u52a8\u5316\u5267\u672c\u7b80\u5316\u4e8b\u4ef6\u54cd\u5e94\u3002<\/p>\n

        \u5982\u4f55\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u5c06\u5176\u4e0e SOC \u5173\u8054\u3002<\/h2>\n

        \u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u901a\u8fc7\u589e\u5f3a\u5b89\u5168\u6027\u3001\u9690\u79c1\u6027\u548c\u8bbf\u95ee\u63a7\u5236\u6765\u8865\u5145 SOC \u64cd\u4f5c\u3002\u4ee5\u4e0b\u662f\u4ee3\u7406\u670d\u52a1\u5668\u4e0e SOC \u7ed3\u5408\u4f7f\u7528\u7684\u4e00\u4e9b\u65b9\u6cd5\uff1a<\/p>\n

          \n
        1. \n

          \u589e\u5f3a\u533f\u540d\u6027\uff1a<\/strong> \u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u9690\u85cf\u6e90 IP \u5730\u5740\uff0c\u4e3a SOC \u5206\u6790\u5e08\u5728\u5a01\u80c1\u60c5\u62a5\u6536\u96c6\u671f\u95f4\u63d0\u4f9b\u989d\u5916\u7684\u533f\u540d\u6027\u3002<\/p>\n<\/li>\n

        2. \n

          \u7f51\u9875\u8fc7\u6ee4\uff1a<\/strong> \u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5f3a\u5236\u6267\u884c\u7f51\u7edc\u8fc7\u6ee4\u7b56\u7565\uff0c\u963b\u6b62\u8bbf\u95ee\u6076\u610f\u7f51\u7ad9\u5e76\u963b\u6b62\u7528\u6237\u8bbf\u95ee\u6f5c\u5728\u7684\u6709\u5bb3\u5185\u5bb9\u3002<\/p>\n<\/li>\n

        3. \n

          \u6076\u610f\u8f6f\u4ef6\u5206\u6790\uff1a<\/strong> \u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5c06\u53ef\u7591\u6587\u4ef6\u548c URL \u91cd\u5b9a\u5411\u5230\u6c99\u76d2\u73af\u5883\u8fdb\u884c\u6076\u610f\u8f6f\u4ef6\u5206\u6790\uff0c\u5e2e\u52a9 SOC \u56e2\u961f\u8bc6\u522b\u65b0\u7684\u5a01\u80c1\u3002<\/p>\n<\/li>\n

        4. \n

          DDoS \u7f13\u89e3\uff1a<\/strong> \u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5438\u6536\u548c\u51cf\u8f7b\u5206\u5e03\u5f0f\u62d2\u7edd\u670d\u52a1 (DDoS) \u653b\u51fb\uff0c\u4fdd\u62a4\u7ec4\u7ec7\u7684\u57fa\u7840\u8bbe\u65bd\u514d\u53d7\u670d\u52a1\u4e2d\u65ad\u7684\u5f71\u54cd\u3002<\/p>\n<\/li>\n

        5. \n

          \u65e5\u5fd7\u805a\u5408\uff1a<\/strong> \u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u8bb0\u5f55\u548c\u8f6c\u53d1\u7f51\u7edc\u6d41\u91cf\uff0c\u65b9\u4fbf SOC \u5206\u6790\u5e08\u8fdb\u884c\u96c6\u4e2d\u65e5\u5fd7\u805a\u5408\u4ee5\u76d1\u63a7\u548c\u8c03\u67e5\u7f51\u7edc\u6d3b\u52a8\u3002<\/p>\n<\/li>\n<\/ol>\n

          \u76f8\u5173\u94fe\u63a5<\/h2>\n

          \u6709\u5173 SOC\u3001\u7f51\u7edc\u5b89\u5168\u548c\u76f8\u5173\u4e3b\u9898\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u60a8\u53ef\u4ee5\u63a2\u7d22\u4ee5\u4e0b\u8d44\u6e90\uff1a<\/p>\n

            \n
          1. \u7f8e\u56fd\u56fd\u5bb6\u6807\u51c6\u4e0e\u6280\u672f\u7814\u7a76\u9662 (NIST) \u2013 \u8ba1\u7b97\u673a\u5b89\u5168\u8d44\u6e90\u4e2d\u5fc3<\/a><\/li>\n
          2. SANS \u7814\u7a76\u6240 \u2013 \u7f51\u7edc\u5b89\u5168\u8d44\u6e90<\/a><\/li>\n
          3. CERT \u534f\u8c03\u4e2d\u5fc3 \u2013 \u5361\u5185\u57fa\u6885\u9686\u5927\u5b66<\/a><\/li>\n<\/ol>\n

            \u8bf7\u8bb0\u4f4f\uff0c\u7f51\u7edc\u5b89\u5168\u662f\u4e00\u9879\u6301\u7eed\u7684\u52aa\u529b\uff0c\u53ca\u65f6\u4e86\u89e3\u6700\u65b0\u5a01\u80c1\u548c\u6700\u4f73\u5b9e\u8df5\u5bf9\u4e8e\u4fdd\u6301\u5bf9\u7f51\u7edc\u5bf9\u624b\u7684\u5f3a\u5927\u9632\u5fa1\u81f3\u5173\u91cd\u8981\u3002<\/p>","protected":false},"featured_media":470520,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-479046","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about Security Operations Center (SOC)<\/mark>","faq_items":[{"question":"Question: What is a Security Operations Center (SOC)?<\/strong>","answer":"

            Answer:<\/strong> A Security Operations Center (SOC) is a centralized unit within an organization that is responsible for monitoring, detecting, analyzing, and responding to cybersecurity incidents. It serves as the nerve center of the organization's cybersecurity efforts, where security analysts and experts work together to protect the organization's critical assets and data from various cyber threats.<\/p>"},{"question":"Question: How did the concept of SOC originate?<\/strong>","answer":"

            Answer:<\/strong> The concept of SOC can be traced back to the 1980s when the rise of computer networks and the internet introduced new security challenges. As cyber threats became more sophisticated, organizations realized the need for a dedicated team to handle security incidents promptly and effectively. The first mention of SOC can be found in the mid-1990s when large enterprises and government agencies started forming teams to monitor and respond to cybersecurity incidents.<\/p>"},{"question":"Question: What are the key components of a SOC?<\/strong>","answer":"

            Answer:<\/strong> A typical SOC consists of the following key components:<\/p>

            1. Security Analysts:<\/strong> Skilled professionals who analyze security alerts and incidents, investigate potential threats, and develop appropriate response strategies.<\/p><\/li>

            2. Security Information and Event Management (SIEM) System:<\/strong> The central tool used to collect, correlate, and analyze security event data from various sources.<\/p><\/li>

            3. Threat Intelligence:<\/strong> Up-to-date information about the latest cyber threats and attack trends, helping SOC teams stay informed and prepared.<\/p><\/li>

            4. Incident Response Plan:<\/strong> Well-defined procedures and actions to be taken in the event of a cybersecurity incident, ensuring a coordinated and effective response.<\/p><\/li>

            5. Continuous Monitoring:<\/strong> SOC operates 24\/7 to ensure continuous monitoring of the organization's IT infrastructure.<\/p><\/li>

            6. Forensics and Investigation:<\/strong> Post-incident analysis to understand the root cause of an attack and prevent similar incidents in the future.<\/p><\/li><\/ol>"},{"question":"Question: What are the different types of SOC?<\/strong>","answer":"

              Answer:<\/strong> SOC can be classified into three main types based on their structure, size, and scope:<\/p>

              1. In-house SOC:<\/strong> Established and operated within the organization, offering tailored security solutions but requiring significant investments in technology and personnel.<\/p><\/li>

              2. Co-managed SOC:<\/strong> An organization partners with a Managed Security Services Provider (MSSP) to share SOC responsibilities, retaining some control while benefiting from the MSSP's expertise.<\/p><\/li>

              3. Fully Outsourced SOC:<\/strong> An organization hands over its entire cybersecurity operations to an MSSP, allowing the MSSP to manage all aspects of the SOC while the organization focuses on core activities.<\/p><\/li><\/ol>"},{"question":"Question: How can SOC address the challenges they face?<\/strong>","answer":"

                Answer:<\/strong> SOC faces several challenges, such as skill shortage, alert overload, evolving threats, and integration complexity. To address these challenges, organizations can:<\/p>