Security Operation Center is a significant innovation in traditional security management means. It forms unified threats and risks management system based on the assets/fields through the normalization, collection, filtering, and correlation analysis of enormous security information distributed in different locations and assets (host computers, network equipment, and security equipment, etc.) It responses to and handles threats and risks with the help of security knowledge base and workflow drive. The fundamental model of security management platform is PDR, while Security Operation Center performs the work of D (detection) and R (response).

Venusense Security Operation Center is consists of “five centers and five functional modules”:

Five centers:

■ Events/traffic monitoring center

■ Network management center

■ vulnerabilities assessment center

■ Security early warning and risks management center

■ Response management center

Five functional modules:

■  Policy configuration management

■  Resources management　

■  Users management 　

■  Security knowledge management　

■ Self system maintenance management

Venusense Security Operation Center features the following product characteristics:

• ■ Strong analysis and handling ability by pooling and collecting security events
• ■ Established perfect assets and risk management system
• ■ The management function of security events response based on the workflows
• ■ The function of realizing different management models at various stages
• ■ Good scalability and openness of the Security Operation Center
• ■ High fault tolerance and availability of the Security Operation Center
• ■ Deep ability of data mining
• ■ Topological auto-discovering, operation status monitoring, fault management, and othernetwork management functions
• ■ Flexible, customizable, and customer oriented security and risks statistics
• ■ Report and strong real-time security management displaying system