±¦ÔËÀ³¹Ù·½ÍøÕ¾XDRÔËÓª·þÎñÕýʽÔËÐÐ

°ä²¼¹¦·ò 2020-08-19

½üÈÕ  £¬¹ØÓÚXDRµÄ±¨Â··×·×¶øÖÁ¡£¸÷ÈË´Ó¸ÅÏë¡¢Òæ´¦¡¢Êг¡µÈ¶à·½ÃæÚ¹ÊÍXDR·þÎñ¡£±¦ÔËÀ³¹Ù·½ÍøÕ¾×ÔGartnerÔÚ2017ÄêÌá³öXDR¸ÅÏë¾ÍÆðÍ·×êÑÐXDRµÄÂä´¦Ëù°¸¡£ÄDZ¦ÔËÀ³¹Ù·½ÍøÕ¾XDR¹æ»®¶¨Î»ÊÇÔõôµÄ£¿½â¾öʲôÎÊÌ⣿ÓÖÓкÎÌØÉ«ÄØ£¿´Ë¿Ì¾ÍºÍÓ×±àһ·×ß½ø±¦ÔËÀ³¹Ù·½ÍøÕ¾XDR°²È«ÔËÓª·þÎñ¡£


±¦ÔËÀ³¹Ù·½ÍøÕ¾XDR·þÎñµÄ¶¨Î»


XDR·þÎñÓ¢ÎÄÈ«³ÆÊÇExtended detection and response  £¬ÖÐÎÄÃûΪÀ©´ó¼ì²âºÍÏìÓ¦·þÎñ¡£±¦ÔËÀ³¹Ù·½ÍøÕ¾XDR·þÎñÊÇÒ»ÏîÒÔ¡°Ô¶³Ì+±¾µØ¡±Ð­Í¬Áª¶¯Îª½»¸¶Ä£Ê½µÄ°²È«ÔËÓª·þÎñ¡£



1.png


Çø±ðÓÚÒµÄÚ´«Í³µÄ°²È«ÔËÓª·þÎñ²úÆ·  £¬±¦ÔËÀ³¹Ù·½ÍøÕ¾XDR·þÎñ¾ß±¸Ô½·¢ÇáÁ¿»¯µÄÌØµã  £¬¼´XDR·þÎñ¿ÉÄÜÔÚ¿Í»§ÏÖ³¡ÉÙ²¿Êð»ò²»²¿ÊðÈκι¤¾ßµÄÇé¿öÏ  £¬Îª¿Í»§ÌṩÐÅÏ¢ÍøÂç´Ó¼à²â¡¢·ÖÎö¡¢ÏìÓ¦µ½·ÀÓùµ÷ÕûµÄ¹Ø»·»¯ÊÂÎñÖÎÀíÄÜÁ¦¡£


±¦ÔËÀ³¹Ù·½ÍøÕ¾XDR·þÎñµÄÄÚÈÝ


ÍøÂ簲ȫµÄÐÔÖÊÊÇÍøÂ簲ȫ·ÛËéÕßÓë·À»¤ÕßÄÜÁ¦µÄ½ÏÁ¿  £¬ÔÚË«·½²©ÞĺͽÏÁ¿µÄ¹ý³ÌÖÐ  £¬ÍøÂ簲ȫµÄ·ÛËéÕ߻᲻ÐÝѰÕÒ·À»¤ÕßµÄÈõµã  £¬ÆôÓÃеķÛË鼿Á©  £¬ÍøÂ簲ȫµÄ·À»¤ÕßÒ²»á²»ÐÝË÷Çó¶Ô¸¶ÆäзÛË鼿Á©µÄ²½Öè¡£ÔÚÕâÖÖʵս»¯µÄ²©ÞĺͽÏÁ¿ÖÐ  £¬¿Í»§µÄÍøÂ簲ȫ±£ÏÕˮƽºÍÄÜÁ¦²Å»áµÃµ½ÄÚÈÝÐÔµÄÌáÉý¡£


2.png


±¦ÔËÀ³¹Ù·½ÍøÕ¾XDR·þÎñ»ùÓÚÍøÂ簲ȫµÄʵսÊÓ½Ç  £¬½«·þÎñÄÚÈÝ»®·ÖΪ´àÈõÐԹػ·ÖÎÀí·þÎñºÍ³ÖÐøÐÔÍþвÖÎÀí·þÎñ¡£


´àÈõÐԹػ·ÖÎÀí·þÎñ²à³ÁÓÚ¶Ô¿Í»§×ʲúµÄ°²È«¼à²âºÍ·ì϶·¢ÏÖ  £¬³ÖÐøÐÔÍþвÖÎÀí·þÎñ²à³ÁÓÚ¶Ô¿Í»§ÍøÂ簲ȫÊÂÎñµÄ¼à²âºÍÏìÓ¦´ëÖá£


±¦ÔËÀ³¹Ù·½ÍøÕ¾XDR·þÎñͨ¹ý¶ÔÁ½Àà·þÎñÄÚÈݵĴîÅä×éºÏ  £¬Îª¿Í»§µÄÍøÂ簲ȫ¼à²âÓë·ÀÓù¼¼Êõ²Ö¿âÌṩÓÐЧÐÔÑéÖ¤»úÔì  £¬Ô®ÊÖ¿Í»§¹¹½¨Æð»ùÓÚʵսÊӽǵÄÍøÂ簲ȫ¼à²â¡¢·ÖÎö¡¢ÏìÓ¦ºÍ·ÀÓùϵͳ¡£


±¦ÔËÀ³¹Ù·½ÍøÕ¾XDR·þÎñµÄÂäµØÊµÏÖ


ÃÎÏëµÄ°²È«ÔËÓª³É¾Í  £¬Àë²»¿ª³ÉÊìµÄ°²È«ÔËӪϵͳ¡£XDRÔËÓª·þÎñ×÷Ϊ±¦ÔËÀ³¹Ù·½ÍøÕ¾±±¶·°²È«ÔËÓª·þÎñµÄÒ»Ô±  £¬×ñÑ­PPT¡ª¡ª×¨ÒµµÄÔËÓªÈËÔ±£¨People£©¡¢³ß¶ÈµÄÔËÓªÁ÷³Ì£¨Process£©¡¢×¨ÒµµÄ¼¼Êõ¹¤¾ß£¨Technology£©×¼Ôò²¢½øÐÐÂ䵨¡£ 


? ×¨ÒµµÄÔËÓªÈËÔ±(People)


רҵµÄÔËÓªÈËÔ±ÔÚXDRÔËӪϵͳÈýÉí·ÖÖÐÕ¼¾ÝÖ÷Ìâְλ  £¬ºÏÀíµØÅäÖÃרҵµÄÔËÓªÈËÔ±¿ÉÄܱ£ÕÏÔËÓª¹¤¾ß¿ÉÓÐЧʹÓúÍÖÎÀí¡¢ÔËÓªÁ÷³Ì¿ÉÕý³£ÔËÐС£


±¦ÔËÀ³¹Ù·½ÍøÕ¾XDR·þÎñµÄÔËÓªÈËÔ±ÒÀÕÕ¹¤×÷³¡¾°ºÍÄÜÁ¦²ã¼¶·ÖΪһÏß·ÖÎöʦ¡¢¶þÏß·ÖÎöʦºÍÈýÏß·ÖÎöʦ¡£ÔËÓªÍŶӿÉÄÜ7*24Ó×ʱ¶Ô¿Í»§ÍøÂçÌṩ¼à²â¡¢¸æ¾¯¡¢·ÖÎöºÍÏìÓ¦Ö§³Ö  £¬ÓÐЧ¡¢¼±¾çµÄ´¦Öø÷ÀలȫÍþв  £¬Í¬Ê±²»Ðݽç˵еÄÔËÓªÕ½Êõ¡¢ÉèÖÃÐµĹØÁª¹æ¶¨¡¢²åװеij¡¾°Ä£ÐÍ¡¢±ä»»Ðµİ²È«ÔËÓªÄÚÈÝ  £¬Ê¹°²È«ÔËÓªÄܲ»ÐÝÊÊÓ¦³ÖÐø±ä¶¯µÄÍøÂç°²È«Ì¬ÊÆ¡£


3.png


? ³ß¶ÈµÄÔËÓªÁ÷³Ì(Process)


³ß¶ÈµÄ°²È«ÔËÓªÁ÷³ÌÊÇΪÁ˽«ÔËÓª·þÎñ¸üºÃÂ䵨  £¬¼ÈÄÜÃ÷È·°²È«ÔËÓª·þÎñÔõô·¢Õ¹  £¬ÓÖÄÜÃ÷È·°²È«ÔËÓª·þÎñÈËÔ±¸÷×ÔËùÐèµÄ¹¤×÷³ÁµãºÍ¹¤×÷²½Öè¡£


±¦ÔËÀ³¹Ù·½ÍøÕ¾XDR·þÎñѡȡÁËÈ«³ß¶È»¯ÔËÓªÁ÷³ÌÖÎÀí  £¬Í¨¹ý½«ÔËÓª¹¤×÷¸÷»·½ÚËùÐèµÄÈËÔ±¡¢²Ù×÷¡¢Êä³öÁ˾ֵȽøÐй̻¯  £¬ÍøÂç¸÷ÔËÓªÁ÷³Ì»·½ÚµÄ¹¤×÷Êý¾Ý  £¬¶ÔÔËÓª¹¤×÷µÄЧÄÜ¡¢ÕýÈ·ÐÔ½øÐÐÆÀ¶¨  £¬¶ÔÔËÓª¹ý³ÌÖвúÉúµÄ¸÷Ï×÷½øÐÐ×·×Ù  £¬ÓÐЧ¶ã±ÜÒòÈËÔ±³É·Öµ¼ÖµÄÔËÓª·þÎñÖÊÁ¿²»²»±ä  £¬ÊµÏÖ¶Ô¿Í»§µÄ·þÎñ³Ðŵ¡£


4.png


? ×¨ÒµµÄ¼¼Êõ¹¤¾ß£¨Technology£©


רҵµÄ¼¼Êõ¹¤¾ßÊÇÖ¸ÓÃÓÚЭÖú°²È«ÔËÓª¹¤×÷·¢Õ¹ËùÐèµÄÔËӪƽ̨ºÍ°²È«²úÆ·¡£


ÆäÖÐ  £¬ÔËӪƽ̨ÊÇÖ§³Ö°²È«ÔËÓª¹¤×÷µÄÈ«ÐÔÃüÖÜÆÚÖ÷ÌâÊàŦ  £¬ÝÓÈÆ°²È«ÔËÓªµÄÖ¸±ê  £¬¶Ô¹¤¾ßºÍÈËÔ±½øÐÐ1¶Ô1¡¢1¶Ôn¡¢n¶Ô1µÄºÏÀí·ÖÅä  £¬ÔÚÁ÷³ÌµÄ×¼ÔòÏ  £¬¶Ô°²È«ÔËÓª·þÎñ½øÐÐÈ«·½Î»µÄÖ§³ÖÓëÖÎÀí¡£


°²È«²úÆ·ÖØÒªÊÇÖ¸½øÐÐÊý¾Ý²É¼¯  £¬ÒÔ¼°±£ÏÕ°²È«ÔËÓªÆ½Ì¨ÍøÂç¼Ü¹¹µÄºÏÀíÐÔ¼°°²È«ÐԵIJúÆ·¡£°²È«²úƷͨ³£·ÖΪ¼à²â¹¤¾ßºÍÍøÂç¼°°²È«²úÆ·  £¬ÆäÖмà²â¹¤¾ßÓÃÓÚ°²È«Êý¾ÝµÄ²É¼¯  £¬ÍøÂç¼°°²È«²úÆ·ÓÃÓÚ¶Ô°²È«ÔËÓª¼Ü¹¹½øÐб£ÏÕ¡£


XDR·þÎñµÄÖ÷ÌâÓÅÊÆ


1¡¢ÒÔÇáÁ¿»¯µÄͶÈë  £¬ÊµÏÖÒµÎñµÄ°²È«ÔËÓª


»ùÓÚ±¦ÔËÀ³¹Ù·½ÍøÕ¾XDR·þÎñµÄÒµÎñ°²È«ÔËÓª  £¬ÎÞÐè¿Í»§Í¶Èë´óÁ¿µÄ¾«Á¦ºÍ³É±¾¶ÔIT»ù´¡ÉèÊ©½øÐй滮¡¢Éè¼Æ¡¢²¿ÊðºÍÔËά  £¬ÔËÓªµÈËùÐèµÄËùÓÐ×ÊÔ´£¨Æ½Ì¨¡¢ÈËÔ±ºÍ¼¼Êõ¹¤¾ß£©  £¬¾ùÄܹ»·þÎñ×âÁ޵Ĵó¾ÖÌṩ  £¬ÓÐЧÏ÷¼õ¿Í»§µÄÒ»´ÎÐÔ½¨ÉèͶÈë  £¬Ô¤·À×ÊÔ´ÀË·Ñ¡£


2¡¢´ÓʵսÑÝÁ·ÊÓ½Ç  £¬¹¹½¨¹Ø»·»¯ÔËӪϵͳ


±¦ÔËÀ³¹Ù·½ÍøÕ¾XDR·þÎñ´ÓÍøÂ簲ȫµÄʵսÊÓ½Ç  £¬½«·þÎñÄÚÈÝ»®·ÖΪ´àÈõÐԹػ·ÖÎÀí·þÎñºÍ³ÖÐøÐÔÍþвÖÎÀí·þÎñ¡£¿Í»§¿Éƾ¾Ý×ÔÉíµÄÔËÓª³¡¾°¡¢×ÔÉí¶ÔÁ½ÖÖ°²È«ÔËÓªÄÜÁ¦µÄÐèҪѡÔñ¶ÔÓ¦µÄ·þÎñÏî  £¬´Ó³£Ì¬»¯µÄʵսÑÝÁ·ÖÐ  £¬³ÉÁ¢ÆðÒ»Ì×¼¯¼à²â¡¢·ÖÎö¡¢ÏìÓ¦ºÍ·ÀÓùÄÜÁ¦ÎªÒ»ÌåµÄ¹Ø»·»¯ÍøÂ簲ȫÔËӪϵͳ¡£


×÷ÎªÍøÂ簲ȫÐÐÒµµÄÁì¾üÆóÒµ  £¬±¦ÔËÀ³¹Ù·½ÍøÕ¾¼áÈͲ»°ÎµØ×ß×ÔÖ÷´´ÐÂ֮·  £¬¼ùÐÓ×°µÚÈý·½¶ÀÁ¢°²È«ÔËÓª¡±µÄÀíÏë  £¬½ØÖÁĿǰ  £¬±¦ÔËÀ³¹Ù·½ÍøÕ¾ÒÑÔÚÈ«¹ú¸÷µØ30¶à¸ö³ÇÊз¢Õ¹°²È«Ô˽»Ò×Îñ¡£½«À´  £¬±¦ÔËÀ³¹Ù·½ÍøÕ¾°²È«ÔËÓªÖÐÐĽ«³ÖÐøÒÔ³ÖÐøµÄ¡¢ÊµÊ±µÄ¡¢¶¨Ô컯µÄ°²È«·þÎñ  £¬´òÔìÖǻ۳ÇÊа²È«ÔËÓª¡¢´óÊý¾ÝÖÐÐݲȫÔËÓª¡¢ÎïÁªÍø¹¤¿Ø°²È«ÔËÓªµÈ¡£