Data leakage prevention system and method based on file centralized storage and isolation technology

Abstract

The invention discloses a data leakage prevention system and method based on file centralized storage and isolation technology, including a client terminal and a server terminal; the security desktop is logged in through the operating system desktop, and the user is provided with an entry to operate a second application program; the security desktop It also includes a file transfer module, which is used to transfer files to the centralized storage module on the server side through the file transfer protocol, and centrally stores and manages the files through the centralized storage module; the system interface interpretation layer is used to intercept and identify the second application The process initiated by the program; the operating system layer includes a process monitoring module to monitor the process initiated by the second application program, and perform operation monitoring on the process, so as to monitor or intercept operations that may cause file content to leak. By adopting the invention, the access of the application program to the file can be carried out in a safe environment, preventing the application program from leaking the content of the file, thereby ensuring the security of the storage of the file and the application.

Description

technical field [0001] The invention relates to information security and data protection technology, in particular to a data leakage prevention system and method based on file centralized storage and isolation technology. Background technique [0002] While informatization construction has brought a series of work conveniences, it has also brought unprecedented security risks. Relying on traditional network protection, host access, application layer security protection, and server layer security protection has been difficult to cope with the growing electronic data. Therefore, data leakage prevention has become an important hot issue in the field of information security. [0003] In a nutshell, the threat of data leakage mainly comes from three aspects: data storage, data transmission, and data leakage during data use. The current mainstream anti-leakage technologies are mainly divided into four categories: "identity authentication", "access control", "encryption" and "audi...

AI Technical Summary

Problems solved by technology

However, this method may cause the following problems: first, the files are still stored on the local disk, and there is a problem that scattered storage is difficult to share; second, there is a lack of a process monitoring mechanism throughout the process, and there is a problem of copying and pasting the contents of the files to the outside through the application in the virtual desktop Vulnerabilities in the application; third, the read and write operations on the file retain traces locally, and there is a greater risk of leakage

Images