Method and system for auditing and distributing sensitive data based on evolution strategy

Abstract

The invention relates to the technical field of information safety, particularly to a method and a system for auditing and distributing sensitive data based on an evolution strategy. The system of the invention comprises a risk evaluation module based on trust, an auditing and distributing module based on a strategy, a data leakage auditing module and a sensitive data management service module; the risk evaluation module calculates the trust level of the user behavior and investigates the intersection of a leakage set and an intersection of an acquired set of the user, so that the crime risk of the user is obtained; the distributing module determines a distribution policy under the guide of a crime factor and a judging sum formula according to user application and distribution records; and the auditing module records a distributing log, counts the information for analyzing the user behavior and the data leakage, and feeds back an auditing result to the risk evaluation module and the distributing module. The invention meets the requirements of the anti-leakage application of the sensitive data having high requirements for data completeness; the detection source is detected by the intersection of the acquired data set of the user and the leakage data set; and no watermark information needs to be imbedded, so that the invention meets the application requirements of the sensitive data having high requirements for the completeness and the privacy.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a sensitive data audit distribution method and system based on an evolution strategy. Background technique [0002] Data Leakage Protection (DLP) has a strategic position in protecting national data security and an important role in ensuring information security, and is an important part of national security. At present, the security of information content is mainly manifested in the security of documents or data, and its threats mainly include hacking, document or data leakage caused by foreign spies stealing secrets or internal leaks, such as hackers obtaining user files through illegal means such as network attacks, computer virus theft, etc. Taking documents and materials, misoperation by employees without confidentiality awareness, loss of mobile storage devices, etc. In addition, developed countries monopolize computer chips and key software technologies used ...

AI Technical Summary

Problems solved by technology

Although watermarking has many advantages such as concealment and security when tracking and identifying the copyright and leakage source of digital works, digital watermarking technology also has the following disadvantages: 1) The embedding process of watermarking will lead to changes in the content of the original information carrier, 2. ) The watermarking technology itself is relatively fragile, easily damaged in the process of data processing, and may even be tampered by malicious users, so that it loses the effectiveness of confirming the source of the original data. 3) It is not suitable for highly sensitive data leakage with strict integrity requirements Audit application

Images