Virtualized technology-based data anti-disclosure system

Abstract

The invention relates to a virtualized technology-based data anti-disclosure system, which is characterized in that: the data anti-disclosure system is realized by constructing virtualized operating environment in a work station by utilizing the virtualized technology on the basis of an operating system and redirecting the input / output calling, system calling and the calling of a dynamic library of the host operating system; and the data anti-disclosure system consists of a management module, a driving redirection module, monitoring module, a log auditing module and a data encryption / decipherment module. The data anti-disclosure system has the advantage that a data anti-disclosure protective method for preventing unauthorized users from wiretapping, breaking and copying and propagating confidential data illegally by ensuring that limited users only can access key data under the virtual safety environment and the physical storage of the key data is also concentrated in virtual storage space which is subjected to encrypting protection simultaneously is provided.

Description

technical field [0001] The present invention belongs to the field of information security technology, and relates to a system in which virtualization technology is applied to the field of data security protection, in particular to a data leakage prevention system based on virtualization technology; at the same time, the present invention also relates to the above-mentioned data leakage prevention system Anti-disclosure method. Background technique [0002] With the vigorous development of informatization in our country, electronic data has become an important asset of every department, every enterprise, and every individual. The confidentiality, integrity and availability of data are critical to the viability and competitiveness of governments, critical industries and businesses. Therefore, data security, as an important part in the field of information security, is attracting more and more attention. Data security covers multiple aspects such as loss prevention, leakage p...

AI Technical Summary

Problems solved by technology

[0004] The disadvantage of document-level dynamic encryption and decryption technology is that some file systems themselves support dynamic encryption and decryption of files, such as the NTFS file system in the Windows system, which itself provides EFS (Encryption File System) support. As a general system, Difficult to meet the personalized requirements of various users, such as automatic encryption of certain types of files, etc.

[0005] The disadvantage of the disk-level dynamic encryption and decryption technology is that the speed of the encryption and decryption algorithm used in this technology is directly affected by the performance of the system.

Images