Data leakage prevention system based on file set storage and isolation technology and method thereof

Abstract

The invention discloses a data leakage prevention system based on the file set storage and isolation technology and a method thereof. The data leakage prevention system comprises a client side and a server side. A secure desktop is logged into through an operating system desktop and used for providing an entry for operating a second application program for a user. The secure desktop further comprises a file transfer module, and the file transfer module is used for transferring files to a centralized storage module on the server side according to file transfer protocols and carrying out centralized storage and management on the files through the centralized storage module. A system interface interpretation layer is used for intercepting and recognizing a process initiated by the second application program. An operating system layer comprises a process monitoring module, and the process monitoring module is used for monitoring the process initiated by the second application program and operating and monitoring the process so as to monitor or intercept operations possibly resulting in leakage of file content. By adopting the data leakage prevention system based on the file set storage and isolation technology and the method thereof, the application program can access the files in a safe environment and be prevented from leaking the file content, and therefore the safety of storage and application of the files is guaranteed.

Description

technical field [0001] The invention relates to information security and data protection technology, in particular to a data leakage prevention system and method based on file centralized storage and isolation technology. Background technique [0002] While informatization construction has brought a series of work conveniences, it has also brought unprecedented security risks. Relying on traditional network protection, host access, application layer security protection, and server layer security protection has been difficult to cope with the growing electronic data. Therefore, data leakage prevention has become an important hot issue in the field of information security. [0003] In a nutshell, the threat of data leakage mainly comes from three aspects: data storage, data transmission, and data leakage during data use. The current mainstream anti-leakage technologies are mainly divided into four categories: "identity authentication", "access control", "encryption" and "audi...

AI Technical Summary

Problems solved by technology

However, this method may cause the following problems: first, the files are still stored on the local disk, and there is a problem that scattered storage is difficult to share; second, there is a lack of a process monitoring mechanism throughout the process, and there is a problem of copying and pasting the contents of the files to the outside through the application in the virtual desktop Vulnerabilities in the application; third, the read and write operations on the file retain traces locally, and there is a greater risk of leakage

Images