Security monitoring and alarm are effective means of defend and defer. Due to the continuing nature of Internet companies, monitoring network, system, and APP is very important. Monitoring enables companies to react quickly in the event of any abnormality.
In fact, site security also needs to be monitored. The main purpose of security monitoring is to detect whether users’ sites are attacked (e.g., with DDOS) so they can respond to the issue immediately.
What is the relation between security monitoring and security scanning? When there is security scanning, is security monitoring still necessary? In theory, if everything works perfectly, all vulnerabilities can be detected with the scanner, and then you will not need to have security monitoring. But in reality it is difficult for the scanner to detect all the loopholes present; sometimes it can lead to underreporting because of the scanner rules or some other problems.
Therefore, security monitoring is a strong complement to site security. Security monitoring is like a pair of vigilant eyes that can quickly detect sudden unfavorable changes.