Study on Multi-source Security Information Fusion System Management Platform

The construction of network security defense system tends to require substantial heterogeneous security equipment, and such distributed security equipment produces massive security information which makes it difficult not only to effectively organize, manage and utilize such information, but also to manage and maintain geologically distributed security monitoring systems, thus this paper proposes a multi-source security information fusion system management platform, competent to effectively manage distributed deployment based heterogeneous security systems. The paper discusses the architecture of the management platform, and analyzes network risk conditions on a real-time basis by event correlation, risk assessment, and other methods to improve management's precision of localizing security event spots so as to make prompt response thereto. The paper also conducts a simple analysis of key security technology such as security event normalization models, distributed data models, security communication and control protocols.