Security talent Gap huge enterprise security system urgently needs essay

December 18-19th, the first "360 Security special training camp" held in Beijing. From the Government, financial institutions and other enterprises, more than 40 information security principals and 360 of the top security experts to discuss enterprise-level information security, a comprehensive and in-depth understanding of the current enterprise faced with the threat of attack and the latest defense measures. National top "hacker" only thousands of people figure: the participants around the end of the speech of the 360 Vice President Tanxiaosheng, continue to exchange discussions. "Our company can not recruit enough safety personnel, want to do a complete system a bit powerless, is there any good way to solve this problem?" The head of information security of a large enterprise asked 360 vice President Tanxiaosheng at the "360 Security special training camp". "The current situation is that the security talent gap is indeed very large, professional security companies for security personnel to snatch very intense, so a large number of ordinary enterprises in the future of security services should be outsourced." Tanxiaosheng answered. Tanxiaosheng revealed: "At present in the country, can independent organization network attack and defense of the top ' hacker ', Bai underworld, only thousands of people, these people have more than 100 people in 360 companies, many small security companies, there may be only one or two such people. Security talent is extremely fragmented. With the continuous Internet of traditional enterprises, the security demand of enterprises has exploded. Based on the current situation of talent, and the difficulty of training the top security personnel, the more realistic approach should be to bring the top talent into a team, the team at the same time for several companies to provide security services. People are the key to the success or failure of the Enterprise safety protection: Employees in the enterprise security is extremely important, "people" is the key to the success or failure of enterprise security. In the "360 Security special training camp" for a full two days of explanation and communication, security experts have repeatedly mentioned the impact of corporate security, summed up that "people" is the key to the success or failure of the enterprise safety protection. Some time ago, a domestic network equipment giant server by the NSA intrusion monitoring. The exposure of the incident once again sounded the alarm bells of enterprise safety protection. 360 Network attack and Defense laboratory director Lin said, according to the analysis of the incident, the other side may be using apt means "to fix" the company Mister Secretary, and then invade the company intranet. Lin further remind enterprises of the information in charge: "Secretary, front desk, courier, shredders these seemingly unrelated people and things, will become a key factor in the disclosure of trade secrets." "People" is the key to the success or failure of corporate security, he says, as cloud computing and mobile Internet are pervasive and social networks are on the road. A new generation of enterprise security defense system needs not only excellent products and technology, but also the enterprise staff a high degree of unity of security awareness, so as to be more effective. 360 website Guardian Product manager Dongfang also said: "Employees in the enterprise security is extremely important, no matter how the problem initially looks like, it is always a human problem." Enterprises need to build a three-dimensional linkage security system diagram: 360 unicornteam leader Yang Qing show the wireless threat scene caused the participants to onlookers. With everythingThe advent of the internet era, a single security products can not meet the needs of enterprise network defense. When 360 Unicornteam responsible Yang Qing explain the status of domestic wireless security, car, anti-theft door, bank cards, subways, parking management and other threat scenarios, so that participants are straight perception of this ubiquitous security risks. In response to this ubiquitous threat, 360 senior Security Consulting manager Zhang Yi said, we have entered a new era of enterprise security, not only to be equipped with professional security operation and maintenance team, but also the urgent need to establish a three-dimensional linkage of the security system, the system based on large data needs to obtain the full support of decision-making The need for internal staff to participate in the collective. "360 Enterprise Security Pre-Sales director Rae to 360 companies unique three-dimensional linkage security defense system as an example, so that the participants have a more in-depth understanding of the three-dimensional linkage." The system is not configured with a network firewall or IPS, Rae the defense system as "an overall protection center, two security principles, three security lines and four threat assumptions." "Tanxiaosheng's analogy is quite image:" Three-dimensional linkage security defense system, in the end is from the past wall defense into a tower control game. In the tower Defense game system, enterprises in the cloud, the network, the end of the deployment of a number of defensive points, if the attacker to launch a threat needs to be a close, and each gateway can be linked to defense, until the threat of attack is eliminated. Background link: "360 Security Special training Camp", is by 360 company launches the omni-directional value-added education service, faces the government and the enterprise Informationization security responsible person. Through the first-line security experts to explain, the real case of the scene demonstration, the latest security products and technology experience, 360 security defense system to share four major links, in-depth discussion of enterprise-level information security, to help enterprises to develop the most suitable for their own security protection system.