SCC Help >> SCC Operation Guide

SCC Operation Guide

SCC provides the following operations:

1. Security Control Policy Management, consisting of:
   • Add Security Control Policy: Defines a security control policy to associate attack alarms and security actions.
   • Modify Security Control Policy: Modifies a security control policy.
   • Delete Security Control Policy: Deletes a security control policy.
2. Attack Alarm Management, consisting of:
   • Realtime Attack Alarm Monitoring: Browses the recent attack alarms.
   • Browse Attack Alarm: Browses all attack alarms, and searches concerned attack alarms by different query conditions.
   • Operation on Attack Alarms: Operations to be performed in response to attack alarms, including the manual executions of security policies, actions, and recovery actions.
3. Report Management: Displays summary information about attack alarms occurred in the last hour, including top 10 attack alarms, top 10 attack sources, and top 10 attack destinations, and the execution result of the security control policies.
4. Security Topology Management, consisting of:
   • Security Topology: Displays the attack alarms occur in the network in the form of a topology.
   • Attack Path Topology: Displays the attack path of an alarm.
5. Alarm Matching Policy Management, consisting of:
   • Add Alarm Matching Policy: Defines alarms for which a security control policy can be executed.
   • Modify Alarm Matching Policy: Modifies an alarm matching policy. System-defined alarm matching policies cannot be modified.
   • Delete Alarm Matching Policy: Deletes an alarm matching policy. System-defined alarm matching policies cannot be deleted.