Research on Architecture and Key Technology of Information Security Emergency Response

With China´s continuous improvement in the degree of informatization, regions of the country have been covered by network, and a great deal of information network security issues have also been brought about. In this paper, firstly, the information security emergency response procedures and disposal system are proposed according to the comprehensive analysis of weak links in information security defense system. Secondly, the support vector machine technology and a multidimensional model of computer forensics are applied to deal with unexpected information security incidents. Experiment results show that these technologies are reasonable in practical application. Finally, an example for specific application is given to clarify the processes of information security emergency response. The risks and potential losses met by important social information systems can be reduced through the timely detection, tracking, analysis and recognition of a major hazard information security incident and proper response. It is very important to strengthen information security emergency response capabilities in the future.