关键词: 网络安全运营, 安全设备管理, 原子化, 安全编排自动化和响应, 平战一体化

Abstract: In the current era of explosive growth of network threats, with the digital reshaping of business models and sustained growth of business, the banking industry is facing problems such as redundant security equipment, heavy security operation tasks, and insufficient practical combat capabilities caused by the continuous expansion of network security defense lines. This paper analyzes the challenges faced by financial institutions in the banking industry in security operations, banking DAO(defence, ability and operation) digital security operation system integrating peace and war integration security operation mechanism has been proposed, with a focus on studying the threelevel architecture of deepening the protection foundation, atomization capability center, and digital operation center, as well as the implementation path of peace and war integration mechanism for normalized, highstrength, and uninterrupted protection targets.

Key words: network security operation, security device management, atomization, security orchestration automation and response, integration of peacetime and wartime