Data is the core of future enterprise security capabilities, and the quality and value of data is the basis for security prevention and control capabilities。At present, from the perspective of traditional situational awareness projects, the number of probes is insufficient and the quality of data collected is not high, which will seriously affect the accuracy of data processing and analysis。At the same time, for applications such as threat detection and traceability, collecting asset information and device logs is far from enough, and more full-factor data needs to be collected。

The wall chart prevention and control platform is based on network defense G01, network exploration D01, network connection E01, network shield K01, third-party vendor traffic data, log data and asset data，Build a high-quality data governance system by combining threat intelligence sources (including 360, Qianxin, Tencent, Ali Intelligence Source)，Ensure high granularity, accuracy and efficiency of data。

In many enterprises, there are many network assets and complex application of network security products。Many enterprises cannot accurately grasp the security risk degree of their network assets due to reasons such as the degree of emphasis and product capabilities. As a result, original alarms of security devices are used as indicator sources rather than valid alarms as data sources in daily security analysis。It is difficult for security operation and maintenance personnel to distinguish valid alarms and respond to them。

The wall chart prevention and control platform uses the perspective of asset safety to examine the overall security and protection status of assets, including but not limited to the perception and use of assets around the situation of asset harm, asset weakness, asset attack, etc

Most traditional situational awareness systems are still at a low level when it comes to automation，Mainly: 1, the degree of informatization and technical ability is insufficient，The accuracy of risk identification is difficult to guarantee;2. Security providers generally lack understanding of users' businesses，Difficulty in forming business-based algorithms, scripts, and orchestration;3. Management process，Lack of rule support for automated response handling，Human intervention is required;4. It is difficult to communicate between devices，The ability of coordination and linkage is weak。

The wall chart prevention and control platform realizes the automatic response mechanism with comprehensive cooperative defense ability through the intelligent and visual data governance of the data center, rich algorithm library and custom algorithms and strategies, automation and response (SOAR) and other capabilities

When the traditional situational awareness platform data is available, the platform is built, and there are no qualified security talents, the platform and functions will not be used, and the ability to land can not be truly achieved, and the corresponding return on security investment can not be obtained。

The unique collaborative defense and scheduling command functions of the wall Chart prevention and control platform centralize the coordination and control of various resources, and combine the capabilities of machine learning, artificial intelligence and automated analysis to standardize and reduce the ability requirements of front-line operators

At present, various product manufacturers and platform construction units operate independently, and lack a unified data interface, which brings a lot of trouble to data collection, equipment docking, threat intelligence sharing, etc., increases a lot of unnecessary workload, and fails to take advantage of the core competition point of network security - collaborative sharing。

The wall chart prevention and control platform fully supports different brands and different types of security data acquisition equipment and different sources and different structures of data，Adopt a variety of data docking methods such as active acquisition, active acquisition and passive reception，Based on data center data visualization, intelligent governance，To form an all-round security data collection and analysis capability of all elements in cyberspace。

Network security is a capability system, if only rely on log analysis, alarm events, threat intelligence and other security tools piled up, lack of enough knowledge and talents to serve the operation, lack of clear management process to support the guarantee, it is impossible to achieve the effective implementation of active security capabilities。

With the concept of "data-driven service, service-driven security", the wall Chart prevention and control platform has established a complete safety operation system, safety technology system and safety standard system to achieve the delivery of new safety capabilities。

The platform effectively connects the problems of the independent islands of each unit system in the past, transforms the passive defense method into active discovery, and realizes the ability of accurate detection and protection and emergency linkage。

This platform will change the passive response mode of the protection unit in the past, achieve accurate and timely early warning before the impact of security risks, and build an elastic defense system in real time, in order to avoid, transfer and reduce the risks faced by network security to the maximum extent。

This platform will build an offensive and defense drill platform, and improve the technical ability and level of disposal personnel through continuous combat。