Abstract: In the current era of explosive growth of network threats, with the digital reshaping of business models and sustained growth of business, the banking industry is facing problems such as redundant security equipment, heavy security operation tasks, and insufficient practical combat capabilities caused by the continuous expansion of network security defense lines. This paper analyzes the challenges faced by financial institutions in the banking industry in security operations, banking DAO(defence, ability and operation) digital security operation system integrating peace and war integration security operation mechanism has been proposed, with a focus on studying the threelevel architecture of deepening the protection foundation, atomization capability center, and digital operation center, as well as the implementation path of peace and war integration mechanism for normalized, highstrength, and uninterrupted protection targets.

Key words: network security operation, security device management, atomization, security orchestration automation and response, integration of peacetime and wartime

摘要： 在网络威胁呈爆发式增长的当下，随着业务模式数字化重塑与业务持续性增长，银行业面临因网络安全防线持续扩大所导致的安全设备冗杂、安全运营任务繁重、实战能力不足等问题.对银行业金融机构在安全运营中所面临的挑战进行分析，提出了融合平战一体化安全运营机制的银行业DAO(defence, ability and operation)数字化安全运营体系，重点研究纵深化防护基础、原子化能力中枢、数字化运营总台3层次架构，以及针对常态化、高强度、无间断防护目标的平战一体机制实施路径.

关键词: 网络安全运营, 安全设备管理, 原子化, 安全编排自动化和响应, 平战一体化