METHOD AND APPARATUS FOR MANAGING ENTERPRISE SECURITY BASED ON INFORMATION PROVIDED BY INTRUSION DETECTION SYSTEM

摘要

PURPOSE: An integrated security management method and apparatus thereof are provided to determine detecting results of attack packets by managing, collecting, and storing the attack packets. CONSTITUTION: One or more IDS(Intrusion Detection System) apparatuses(110) respectively detect attack packets. The IDS apparatuses respectively create attack packet information for the detected attack packets. An ESM(Enterprise Security Management) apparatus(120) receives the attack packet information from the IDS apparatuses. The ESM apparatus creates fire wall policy corresponding to the attack packets based on the attack packet information. One or more firewall apparatuses respectively execute a fire wall system provided by the ESM apparatus according to firewall policy.