SOC (security operation center) is a business oriented security management platform based on asset security in the cloud. Based on the standard protocol and process, SOC is constructed according to NIST CSF IPDRR model, equipped with five capabilities: security identification, security protection, security detection, security response and security recovery. In response to the different needs of customers, security data and security capabilities professional services are opened on demand, which allows customers to quickly respond to their business changes and threats.