THREATS MANAGEMENT SYSTEM AND METHOD THEREOF

摘要

A threat management system and a method thereof are provided to enable a network manager to cope with a lot of threats for networks previously according to the degree of risk calculated by collecting and analyzing global events and local events in real time, thereby easily protecting internal IT(Information Technology) assets included in the networks. A threat manager(140) collects and analyzes events related to threat information generated from global networks in real time to assign authorized codes and risk, and stores the collected/analyzed events as global events in a global DB(110), then collects/analyzes events related to threat information generated from local networks in real time to assign authorized codes, risk, and internal IT asset IPs(Internet Protocols), and stores the events as local events in a local DB(120). The manager calculates final risk related to newly generated local events or newly generated global events to provide the risk to a network manager, depending on whether the local events exist in the local DB and whether the global events exist in the global DB.