Visualization of security events is an important component of large-scale network security warning.

When processing large-scale network security events,a network security situation evaluation system can be useful and help user to deal with these security events.

Research of security event correlation approach based on attack-symptom;

The investigation and policy of endangering network security events;

Its idea is that mining security events from a large numbers of operation events by cooperative distributed security components, make effect evaluation to the CIA of information assets, then, realize automatically the cooperate between security domain and business domai.

Research on Linkage System of Network Security Incident Response;

Extraction the security incident of XML format by attack experiment an

A model-based analysis method,the weighted fuzzy Petri net, has been proposed to solve the issues of the network security incidents correlation, knowledge representation and reasoning.

This paper first analyzes the advantages and disadvantages of the SOA and the other middleware technologies such as COR- BA,DCOM,RMI and so on,and then introduces the characteristics of security incidents,then A Security Incidents Publish-Subscribe System Based on SOA is designed,and finally shows how to implement the system.