Analysis of the current state of network security alert management and recommendations

In recent years, a significant increase in cybersecurity incidents has been observed, characterized by the proliferation of malicious software across mobile networks, frequent cyber-attacks on domestic websites originating from abroad, manipulation of industrial control systems and smart devices, and a rising tide of data breaches involving website and personal information. Moreover, the emergence of fraudulent ransomware and advanced persistent threats (APTs) poses a direct risk to national security and societal stability. This paper offers an in-depth examination of the prevailing state of cybersecurity and suggests strategies for the development of information security surveillance and early warning systems, as well as measures for enhancement.