At present

the guiding ideology of network security has changed from compliance delivery to capability delivery

and traditional security operation and maintenance has changed to security operation. Security operation is the centralization and sublimation of traditional security. On the basis of security operation and maintenance

through the organic combination of people

equipment

data and processes

through active detection and dynamic defense

security value is continuously output

resolve security risks and ensure real-time secure and stable operation of various services. Starting from the current situation of security operation

this paper expounds in detail the design idea

basic framework

management process and the relationship between processes of the network security operation management system.