The existing security system lacked real-time detection and correlation analysis, leading to delays in responding to complex threats. There were limitations in analyzing large volumes of security events individually.
We established a next-generation integrated security monitoring system based on SIEM and SOAR. By adopting a big data-based architecture, we collect and analyze over 80GB of logs in real-time on average daily.
The entire process of detecting, analyzing, and responding to security events has been automated, improving response speed. Through SOAR-based automated responses, we updated firewall policies and enhanced the level of protection for financial services.