Application of atomization management scheme based on network security technology with SOAR

Abstract

Nowadays,more and more enterprises have begun to treat it as the core part of the security infrastructure and apply automation to help solve the problem of “security, cost and efficiency” difficult to balance in enterprise security operations. But the traditional network security is protected based on a concept of stacking security devices, many types of security devices have their security capabilities overlapped. This paper discusses how the atomic device control strategy can be used to standardize the management of network security devices, guide the planning of device deployment and implement automatic security emergency response on various SOAR platforms. For a certain enterprise, its internal network security devices are limited in types and the overall workload is acceptable.