What Is the Data Source of Situation Awareness?

Based on the threat data collected from the cloud and other services, SA analyzes and displays the threat posture through big data mining and machine learning, and provides protection suggestions.

• SA presents overall security posture and generates threat alarms by obtaining network-wide traffic data and logs of security protection devices and using AI and big data technologies to analyze the obtained data.
• Additionally, SA aggregates alarm data from other security services, such as Host Security Service (HSS) and Web Application Firewall (WAF). Based on obtained data, SA then performs big data mining, machine learning, and intelligent AI analysis to identify attacks and intrusions, helping you understand the attack and intrusion processes and providing related protection suggestions.

By analyzing security data that covers every aspect of your services, SA makes it easier for you to understand comprehensive security situation of your services and make informed decisions and handle security events in a timely manner.

For details, see How SA Works.